Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a623a3a2f34382d3634203d3e203536303431.roa
File:                     323430323a396238303a623a3a2f34382d3634203d3e203536303431.roa (raw, json)
Hash identifier:          3idOKlaAZ9Zfyi2UqKyUS3DwqKREXKwneCa8W3oJl94=
Subject key identifier:   E7:5F:97:79:99:80:6D:1F:2D:D0:FD:6B:6E:09:4C:80:09:9E:15:A1
Certificate issuer:       /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Certificate serial:       42B9D200160DF4BC95F4CA048B9CD83B3B61D900
Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a623a3a2f34382d3634203d3e203536303431.roa
Signing time:             Fri 29 May 2026 07:14:09 +0000
ROA not before:           Fri 29 May 2026 07:09:09 +0000
ROA not after:            Fri 28 May 2027 07:14:09 +0000
asID:                     56041
IP address blocks:        2402:9b80:b::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 23:13:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b9:d2:00:16:0d:f4:bc:95:f4:ca:04:8b:9c:d8:3b:3b:61:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
        Validity
            Not Before: May 29 07:09:09 2026 GMT
            Not After : May 28 07:14:09 2027 GMT
        Subject: CN=E75F977999806D1F2DD0FD6B6E094C80099E15A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5e:41:33:17:6b:4c:97:c3:e2:6f:34:84:99:
                    03:b5:a0:88:73:75:a5:bf:a6:76:5e:51:57:67:ee:
                    4f:67:7b:3e:0d:24:c8:d1:c5:7d:e0:5e:f7:8e:08:
                    5f:55:13:8d:e7:97:a2:ee:6f:24:2a:42:24:34:82:
                    2f:b6:f7:45:28:8e:e4:e0:36:53:37:51:2b:92:10:
                    da:a9:9f:fa:9d:ca:0f:5b:c4:99:8f:97:9e:21:78:
                    a3:15:02:aa:60:aa:f3:c5:01:a7:4a:e5:82:50:29:
                    b5:3e:6d:aa:d9:1b:5b:72:2f:aa:6c:1e:f9:17:1b:
                    0f:3e:a7:91:37:7d:f9:a1:48:65:09:fb:53:1b:64:
                    c5:72:e7:a2:33:a0:ac:55:87:e0:86:3f:0b:69:92:
                    a3:47:e9:15:d7:6b:e6:88:77:21:f5:38:18:bf:ba:
                    2b:41:8e:35:02:42:99:7b:4c:37:b3:45:d5:8c:51:
                    9f:bc:5a:4a:f8:4a:51:f9:5e:bc:b5:a8:a1:cd:68:
                    57:0d:f1:d7:7e:f1:d4:d0:20:b4:92:86:7c:ef:b0:
                    95:be:f0:70:d5:f4:73:6e:c1:f8:a7:d7:f6:f6:80:
                    83:9d:9f:10:4d:75:6d:ce:7c:f1:b7:2f:fb:97:a5:
                    08:c1:18:0e:f2:c1:6e:1b:57:f3:2d:f3:03:71:ae:
                    3e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5F:97:79:99:80:6D:1F:2D:D0:FD:6B:6E:09:4C:80:09:9E:15:A1
            X509v3 Authority Key Identifier:
                keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a623a3a2f34382d3634203d3e203536303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9b80:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:34:2a:87:76:bd:a4:ca:bc:10:fa:0c:c0:3a:17:4d:44:8e:
         fb:03:4b:e5:dd:0a:5b:02:04:6e:27:e1:e3:7e:67:1a:39:de:
         30:cd:9c:d6:cb:75:68:06:35:e6:ac:18:8d:ba:27:be:2d:bf:
         69:f7:46:71:d4:ce:04:eb:32:d5:6e:67:28:c6:6a:69:c5:2f:
         49:a7:4c:79:33:d2:a8:5d:1a:c3:d7:51:fa:92:95:f2:16:50:
         f7:8b:dd:04:22:e4:7d:1f:13:13:31:ac:e0:fa:d5:9e:ef:ba:
         04:9d:a7:d5:2b:2f:58:63:c9:a7:f8:1a:0d:2d:22:86:4c:2c:
         2e:19:e8:89:4b:30:7c:cd:e5:40:7b:8e:26:2c:8b:d1:28:bb:
         8c:15:d8:ab:26:b2:35:7e:81:32:d2:a4:fd:91:46:b0:c6:6f:
         89:3a:42:c5:8e:8e:7b:3c:2c:62:93:12:25:65:e8:6c:77:d8:
         d5:6c:56:ce:25:4e:a9:19:ef:83:53:90:34:f5:86:b9:5b:05:
         a2:2f:a2:02:6b:dc:4b:83:83:84:42:24:fa:5a:65:1c:2f:4c:
         48:6f:20:cb:c0:1b:d5:e8:38:f1:07:52:a1:d0:51:ea:c9:ba:
         84:5f:b7:2c:b9:e7:28:69:e1:16:ca:74:b0:32:23:2b:80:26:
         26:d0:3c:ee
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUQrnSABYN9LyV9MoEi5zYOzth2QAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2
RUZERDAwRjAeFw0yNjA1MjkwNzA5MDlaFw0yNzA1MjgwNzE0MDlaMDMxMTAvBgNV
BAMTKEU3NUY5Nzc5OTk4MDZEMUYyREQwRkQ2QjZFMDk0QzgwMDk5RTE1QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfXkEzF2tMl8PibzSEmQO1oIhz
daW/pnZeUVdn7k9nez4NJMjRxX3gXveOCF9VE43nl6LubyQqQiQ0gi+290UojuTg
NlM3USuSENqpn/qdyg9bxJmPl54heKMVAqpgqvPFAadK5YJQKbU+barZG1tyL6ps
HvkXGw8+p5E3ffmhSGUJ+1MbZMVy56IzoKxVh+CGPwtpkqNH6RXXa+aIdyH1OBi/
uitBjjUCQpl7TDezRdWMUZ+8Wkr4SlH5Xry1qKHNaFcN8dd+8dTQILSShnzvsJW+
8HDV9HNuwfin1/b2gIOdnxBNdW3OfPG3L/uXpQjBGA7ywW4bV/Mt8wNxrj5fAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQU51+XeZmAbR8t0P1rbglMgAmeFaEwHwYDVR0j
BBgwFoAUEGXp5U0cFTfONLXuRFuTR2790A8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjcyNzc1MjM1MTk0MDYwOS8wLzEwNjVFOUU1NEQxQzE1MzdDRTM0QjVFRTQ0NUI5
MzQ3NkVGREQwMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2RUZERDAwRi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwOTY3Mjc3NTIzNTE5NDA2MDkvMC8zMjM0MzAzMjNh
Mzk2MjM4MzAzYTYyM2EzYTJmMzQzODJkMzYzNDIwM2QzZTIwMzUzNjMwMzQzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACQCm4AACzANBgkqhkiG9w0BAQsFAAOCAQEAozQqh3a9pMq8EPoM
wDoXTUSO+wNL5d0KWwIEbifh435nGjneMM2c1st1aAY15qwYjbonvi2/afdGcdTO
BOsy1W5nKMZqacUvSadMeTPSqF0aw9dR+pKV8hZQ94vdBCLkfR8TEzGs4PrVnu+6
BJ2n1SsvWGPJp/gaDS0ihkwsLhnoiUswfM3lQHuOJiyL0Si7jBXYqyayNX6BMtKk
/ZFGsMZviTpCxY6OezwsYpMSJWXobHfY1WxWziVOqRnvg1OQNPWGuVsFoi+iAmvc
S4ODhEIk+lplHC9MSG8gy8Ab1eg48QdSodBR6sm6hF+3LLnnKGnhFsp0sDIjK4Am
JtA87g==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:48:57 2026 by rpki-client