Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100948885649555457/0/323430323a653734303a3a2f33322d3332203d3e20313331343930.roa
File:                     323430323a653734303a3a2f33322d3332203d3e20313331343930.roa (raw, json)
Hash identifier:          DEEgmSg+O7gl+RVm4t7MTe4v/o6dKWcbJAlI4KqZGJs=
Subject key identifier:   F7:9B:10:0E:F2:58:04:25:86:72:66:1B:6C:93:C5:A3:8B:8E:E0:C2
Certificate issuer:       /CN=C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145
Certificate serial:       080F7F51C667206524326FBFCB100D5D23B02C19
Authority key identifier: C5:F7:3D:AC:C5:F6:56:C0:8D:8D:2C:5D:EC:72:56:CF:A6:F4:11:45
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/323430323a653734303a3a2f33322d3332203d3e20313331343930.roa
Signing time:             Fri 29 May 2026 06:41:26 +0000
ROA not before:           Fri 29 May 2026 06:36:26 +0000
ROA not after:            Fri 28 May 2027 06:41:26 +0000
asID:                     131490
IP address blocks:        2402:e740::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:40:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:0f:7f:51:c6:67:20:65:24:32:6f:bf:cb:10:0d:5d:23:b0:2c:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145
        Validity
            Not Before: May 29 06:36:26 2026 GMT
            Not After : May 28 06:41:26 2027 GMT
        Subject: CN=F79B100EF25804258672661B6C93C5A38B8EE0C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1a:76:14:01:0c:75:4a:82:71:06:ad:19:91:
                    f6:35:48:43:87:c2:fc:f4:c4:7b:20:06:89:a7:cd:
                    4c:bb:2f:7e:b4:15:95:26:88:e4:40:90:b8:87:c0:
                    4e:d5:6d:6e:db:94:7c:ab:82:dc:51:c6:d8:c3:76:
                    8b:77:94:20:66:5f:45:c6:de:84:ea:29:12:22:1e:
                    f7:5a:2a:0a:da:56:17:20:be:70:85:7c:0a:f3:72:
                    65:79:7b:b1:a2:93:bc:88:df:d4:dd:82:f5:c4:0c:
                    16:27:fa:87:a0:40:6d:56:95:fc:32:f0:71:2d:7d:
                    bf:aa:9b:fa:e5:31:de:0d:4e:7e:c6:bc:aa:11:5b:
                    13:96:b0:7b:bf:bb:e8:03:4b:27:f1:20:3e:1a:af:
                    2e:01:fc:54:0b:58:4b:0d:05:8d:df:ea:7e:b1:8a:
                    69:8e:39:52:a9:b4:1b:73:c7:b9:06:4f:f3:bf:9f:
                    44:3f:e8:32:40:ed:09:2a:b8:a6:8c:73:35:68:00:
                    cf:0f:fc:36:fb:d7:b3:2a:fe:3f:13:da:6f:e6:36:
                    20:2d:32:bc:f8:c9:5e:e7:1d:3d:5a:04:d7:1c:dd:
                    83:54:66:77:29:b3:7c:c6:a6:f6:ca:ac:ed:f8:21:
                    c0:99:bf:3f:06:e7:62:80:07:78:d8:d8:80:3f:b4:
                    58:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:9B:10:0E:F2:58:04:25:86:72:66:1B:6C:93:C5:A3:8B:8E:E0:C2
            X509v3 Authority Key Identifier:
                keyid:C5:F7:3D:AC:C5:F6:56:C0:8D:8D:2C:5D:EC:72:56:CF:A6:F4:11:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/323430323a653734303a3a2f33322d3332203d3e20313331343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:e740::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:59:86:ad:a8:d6:0f:5d:ee:e1:3a:28:78:ba:f0:b1:16:a4:
         6b:76:19:f8:75:92:05:c1:eb:32:fd:97:21:16:a7:d4:56:98:
         da:f4:d9:93:d1:b6:98:9b:34:77:59:0f:4a:74:7a:3b:22:c4:
         82:33:75:bd:d9:1c:93:7e:e3:40:47:77:ab:d2:82:00:68:65:
         a7:eb:6a:80:c1:d0:40:8d:49:65:15:5b:b6:29:f7:8b:8b:9a:
         3a:3d:19:07:8b:ad:5b:64:32:32:68:3e:59:38:7d:41:97:4f:
         0d:27:ab:05:dc:fe:74:40:f7:86:a5:59:20:bd:a7:70:a4:49:
         f6:52:99:ba:ea:f6:7d:6e:a1:a8:c1:fd:75:a7:49:14:b3:a4:
         d3:81:1f:9c:1c:cc:1c:c1:68:23:91:f1:46:74:e2:cd:71:a4:
         44:8e:45:6e:da:9d:6e:d3:45:2d:0c:87:07:a5:c9:4a:ac:7d:
         0b:d8:ad:82:f1:81:60:e2:9c:39:cd:04:37:df:02:7f:3e:ea:
         86:93:a6:e5:62:ed:c5:b8:6f:f4:53:fc:0f:2d:f0:e3:72:1f:
         d9:95:19:d3:62:fa:88:d8:39:84:67:62:bf:a8:8e:cd:34:45:
         41:d5:89:75:69:5e:6c:77:eb:af:93:fb:34:c9:e8:6b:44:c5:
         cd:ea:b5:e1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri May 29 22:58:49 2026 by rpki-client