Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a653a3a2f34382d3634203d3e203536303431.roa
File:                     323430323a396238303a653a3a2f34382d3634203d3e203536303431.roa (raw, json)
Hash identifier:          OqkFB7K+ExoMltb7v0kqVxawJdgv6SC5L1yyhv5/CY4=
Subject key identifier:   BA:38:F4:44:3F:84:55:D9:29:1E:44:6E:02:7D:74:37:75:8D:29:11
Certificate issuer:       /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Certificate serial:       6119B710CFF57D5F9A45C0E2707067EE46EA2C09
Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a653a3a2f34382d3634203d3e203536303431.roa
Signing time:             Fri 29 May 2026 07:14:09 +0000
ROA not before:           Fri 29 May 2026 07:09:09 +0000
ROA not after:            Fri 28 May 2027 07:14:09 +0000
asID:                     56041
IP address blocks:        2402:9b80:e::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 23:13:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:19:b7:10:cf:f5:7d:5f:9a:45:c0:e2:70:70:67:ee:46:ea:2c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
        Validity
            Not Before: May 29 07:09:09 2026 GMT
            Not After : May 28 07:14:09 2027 GMT
        Subject: CN=BA38F4443F8455D9291E446E027D7437758D2911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:08:94:80:2a:cc:1c:2f:8c:6d:47:1a:c0:d5:
                    08:cf:5c:0c:ae:86:e4:ba:c9:6d:06:50:3f:aa:aa:
                    d9:c5:95:92:52:82:bc:1a:d2:f9:d8:e1:b2:f6:63:
                    9a:08:cf:20:bb:18:ba:d3:fd:43:e2:c9:fe:c5:22:
                    89:b2:3d:f9:e4:9f:e2:3b:17:8e:9e:72:78:21:8d:
                    a2:65:35:84:09:e1:20:e0:39:8b:5a:4e:9c:3c:58:
                    f2:34:e0:ca:3f:2d:b6:cd:04:ac:35:46:8a:73:27:
                    45:ad:69:3b:aa:3e:22:eb:e4:37:48:3b:e2:6e:8b:
                    e8:2f:0d:22:f6:54:14:ec:47:f3:6b:5a:a6:1d:c0:
                    f3:22:12:fc:cb:36:0d:ae:93:3e:dd:b9:f3:07:ae:
                    aa:7f:fb:d7:bd:98:df:4e:6a:1e:e6:99:db:19:28:
                    b7:1e:e8:20:5b:e3:1e:d0:32:29:73:78:a0:59:0f:
                    5a:ac:f9:23:fe:f0:0e:28:3b:a0:59:cd:25:69:7a:
                    81:4b:58:a8:2c:0d:ea:fc:56:be:eb:ef:21:cb:4e:
                    8e:50:d5:d1:22:e7:0b:e9:d1:0a:8c:e5:cf:23:dc:
                    55:bc:cd:cd:37:39:b4:fb:7a:3c:be:4c:7c:21:14:
                    cb:64:49:72:a0:37:89:7c:15:44:43:f0:0f:c3:83:
                    62:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:38:F4:44:3F:84:55:D9:29:1E:44:6E:02:7D:74:37:75:8D:29:11
            X509v3 Authority Key Identifier:
                keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a653a3a2f34382d3634203d3e203536303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9b80:e::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:04:0e:98:75:95:07:2b:b8:ab:8f:6e:b7:ba:8f:c2:c5:18:
         6d:68:95:e5:96:13:96:68:c8:20:62:7e:8b:0d:ac:95:c5:33:
         0b:f1:f4:db:f1:a3:18:42:d0:6b:19:86:4f:07:91:b8:fa:4b:
         b0:b9:a7:87:c9:26:86:ca:c8:df:5b:21:21:98:ea:54:bc:0f:
         29:3b:d3:74:e8:e1:ec:33:00:93:70:93:dc:b4:eb:7c:f7:5b:
         97:e0:14:34:d0:96:26:cf:7e:70:cd:0b:a2:bd:a3:1e:f2:e2:
         2b:17:c9:37:c2:dd:64:77:b4:ac:01:ef:50:aa:85:46:30:f6:
         dd:23:0a:2a:28:6d:a8:72:f8:4a:61:0e:20:5a:b3:bc:55:76:
         22:15:51:80:e0:86:49:79:f2:e7:8a:7d:c9:13:1c:f5:cf:22:
         37:96:24:b1:3e:81:b8:0b:32:66:62:66:12:2a:fd:4d:ca:a6:
         63:1a:c0:08:c4:ee:5a:db:73:63:64:00:f3:8c:0a:ca:76:87:
         9e:8a:ee:ec:3f:63:c4:c6:e9:53:85:87:83:9f:6f:20:36:c4:
         d9:5b:58:0c:b7:82:a0:0f:5e:62:7e:6a:6d:e4:e2:32:c3:d8:
         5e:8d:d2:38:fb:16:a4:a4:8b:d9:05:b8:79:b1:6b:c7:a2:25:
         3b:a2:2a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:49:12 2026 by rpki-client