Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109004796452405267/0/323030313a6463373a613a3a2f34382d3438203d3e203234343036.roa
File:                     323030313a6463373a613a3a2f34382d3438203d3e203234343036.roa (raw, json)
Hash identifier:          MHF1orAgbSzr2lYpuf4TyJeKpdLdg/LCD5tzMXxVZ6E=
Subject key identifier:   51:6C:A4:C0:2D:1D:7E:E4:B0:AF:13:5D:A4:2A:40:AA:25:2F:5B:86
Certificate issuer:       /CN=CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4
Certificate serial:       1E5C00AF33CD37CBBFAB8513EC13CBA290C019FC
Authority key identifier: CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/323030313a6463373a613a3a2f34382d3438203d3e203234343036.roa
Signing time:             Thu 06 Aug 2026 08:32:45 +0000
ROA not before:           Thu 06 Aug 2026 08:27:45 +0000
ROA not after:            Thu 05 Aug 2027 08:32:45 +0000
asID:                     24406
IP address blocks:        2001:dc7:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 15:20:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:5c:00:af:33:cd:37:cb:bf:ab:85:13:ec:13:cb:a2:90:c0:19:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4
        Validity
            Not Before: Aug  6 08:27:45 2026 GMT
            Not After : Aug  5 08:32:45 2027 GMT
        Subject: CN=516CA4C02D1D7EE4B0AF135DA42A40AA252F5B86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:37:22:45:64:8a:01:3f:97:57:5f:3f:ac:85:
                    d3:f1:62:83:d6:4a:35:8f:63:94:f9:f0:1d:c2:29:
                    d7:0a:cf:8d:94:6b:0d:2c:60:3a:4e:da:b4:cd:94:
                    5f:97:f8:0a:ea:8f:4b:14:86:c5:19:b1:14:1c:13:
                    24:08:fc:4a:e6:d1:6b:fc:d1:c6:15:4b:7e:bf:3d:
                    b8:29:d0:cc:28:d8:9a:79:23:92:61:67:9a:6e:56:
                    37:46:38:2b:5a:39:36:b4:7e:2f:65:e2:c3:18:30:
                    92:98:6e:88:1b:a3:e3:49:f0:f8:0f:c0:67:7a:41:
                    7f:c6:0d:5d:0e:ee:03:6b:fe:6d:bb:11:d0:50:74:
                    c4:2d:61:d0:a0:05:4b:19:5c:92:59:0e:84:38:e5:
                    ab:59:e1:36:70:97:f7:c4:91:03:a2:4f:3d:4b:1d:
                    f3:69:c0:7c:f9:31:5b:c4:5e:62:b0:f4:9b:92:c7:
                    33:1e:ae:38:fb:32:9e:34:53:37:58:76:26:56:2a:
                    d8:54:cc:0a:8a:1f:68:ec:71:a7:3b:2c:95:9f:ef:
                    28:7d:ad:c1:a4:63:d8:7f:88:30:62:2a:03:ce:1f:
                    ac:fc:a3:fa:a3:33:d6:18:2d:be:6b:f0:7c:8b:dd:
                    3e:8b:5d:2b:e1:f0:a1:2a:e6:64:7e:0b:fb:2a:ae:
                    00:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6C:A4:C0:2D:1D:7E:E4:B0:AF:13:5D:A4:2A:40:AA:25:2F:5B:86
            X509v3 Authority Key Identifier:
                keyid:CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/323030313a6463373a613a3a2f34382d3438203d3e203234343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:dc7:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:68:f9:d3:70:8b:6b:5f:6d:ae:99:4e:c4:50:d5:22:aa:54:
         95:d1:e9:23:6f:08:d0:7d:0c:28:91:cd:3f:4a:ff:2c:24:4c:
         1a:ac:e0:89:6f:6e:44:aa:a3:0b:87:28:b9:d9:d9:8e:85:e8:
         d4:95:2a:86:8d:6b:4e:f2:5b:f3:35:39:cc:e2:f2:44:47:17:
         55:80:28:cc:1b:d3:79:81:de:e1:ee:e8:01:6f:4e:3a:2e:34:
         91:02:6b:d4:4f:4f:f8:d4:23:06:08:2b:5b:a2:96:c1:3e:d2:
         59:1e:ad:b2:82:97:7f:33:bf:1b:04:76:a6:f4:36:fd:44:a1:
         02:9c:e1:43:33:8c:45:46:44:02:45:ba:76:e1:f6:7c:8e:77:
         aa:91:92:7f:6b:0a:75:d7:87:f6:57:15:47:e8:5f:29:f6:a6:
         6c:22:cc:ef:b4:5c:25:52:57:58:bf:b9:d7:d3:3f:f7:74:0f:
         d0:dc:8e:28:9d:f2:27:11:5a:45:57:49:b2:8d:6f:1c:92:81:
         6e:b8:fa:82:38:78:46:57:1a:04:47:7c:21:f8:8a:60:30:11:
         33:81:00:e9:ab:48:e1:63:f3:b7:35:71:c3:1b:01:ea:59:2a:
         f1:35:f2:dd:9f:33:fa:b2:b5:f1:1e:fb:9b:20:c4:96:0b:4e:
         45:e9:f8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 07:05:17 2026 by rpki-client