Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109004796452405267/0/323030313a6463373a613a3a2f34382d3438203d3e203234343039.roa
File:                     323030313a6463373a613a3a2f34382d3438203d3e203234343039.roa (raw, json)
Hash identifier:          K5pwkGtEJxxlEpm+SnWFmuwZM/pNsVo7v2tNZ2nf31Y=
Subject key identifier:   A1:A7:FA:27:6A:07:01:52:15:8E:58:71:3F:2D:CE:FC:0B:DF:3C:55
Certificate issuer:       /CN=CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4
Certificate serial:       06AEB2E9AFAE1A2548A0EE49D12F7E8FFEC49C69
Authority key identifier: CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/323030313a6463373a613a3a2f34382d3438203d3e203234343039.roa
Signing time:             Thu 06 Aug 2026 08:42:41 +0000
ROA not before:           Thu 06 Aug 2026 08:37:41 +0000
ROA not after:            Thu 05 Aug 2027 08:42:41 +0000
asID:                     24409
IP address blocks:        2001:dc7:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 15:20:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ae:b2:e9:af:ae:1a:25:48:a0:ee:49:d1:2f:7e:8f:fe:c4:9c:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4
        Validity
            Not Before: Aug  6 08:37:41 2026 GMT
            Not After : Aug  5 08:42:41 2027 GMT
        Subject: CN=A1A7FA276A070152158E58713F2DCEFC0BDF3C55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:68:ff:99:b0:df:83:54:1a:b9:c0:31:8b:ba:
                    b2:3b:de:4a:27:91:12:2d:de:28:2e:01:50:5e:ae:
                    1d:9b:21:b5:d1:b6:d0:4a:ad:e1:2c:a5:20:63:b0:
                    d6:db:9b:1a:68:a9:8c:2c:87:d7:7f:d0:8a:74:a0:
                    42:5f:1a:1d:d5:a4:c3:e4:a4:cc:fa:46:42:90:75:
                    07:57:5e:63:ba:24:5b:48:3b:d6:ae:04:3a:39:b4:
                    20:7a:5c:cd:af:da:02:b3:06:e8:de:40:51:af:85:
                    cf:f3:16:c0:8d:5f:c6:41:eb:20:b0:8b:24:5a:a8:
                    8e:70:0f:e2:52:e4:2f:8a:2e:81:53:fd:13:61:95:
                    62:be:3c:39:81:c6:f1:4b:28:bd:79:bf:33:82:f0:
                    17:05:a0:a1:0d:2c:be:f9:75:28:20:bb:f5:1e:ef:
                    26:95:c3:e6:ef:d1:51:a1:8a:d2:bb:fc:4c:c9:91:
                    8a:e4:91:ee:09:27:90:01:91:2b:ef:7d:2f:6b:ac:
                    8a:89:6f:5e:f1:d1:98:1e:b7:da:77:2b:0c:1d:41:
                    c6:fd:3c:07:a4:4c:26:a7:63:e5:bd:4a:1b:f1:a5:
                    d0:3e:69:a8:0c:76:26:56:17:7a:46:50:d2:7c:fd:
                    93:40:c4:58:a3:87:a4:b9:92:b3:f4:ff:ac:4b:7c:
                    9d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A7:FA:27:6A:07:01:52:15:8E:58:71:3F:2D:CE:FC:0B:DF:3C:55
            X509v3 Authority Key Identifier:
                keyid:CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/323030313a6463373a613a3a2f34382d3438203d3e203234343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:dc7:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:40:e1:e0:48:33:dd:7e:1a:49:9b:fa:ad:e1:4a:26:9d:a7:
         2f:47:71:cc:4d:ce:70:6f:59:f9:e7:9d:0f:b1:fe:37:52:38:
         a7:29:c5:56:35:40:f7:87:85:b5:ab:d8:eb:e6:fe:f0:bc:1b:
         bf:d9:1b:83:49:7c:75:86:15:eb:74:21:dc:94:c5:13:62:d3:
         0a:c8:24:92:ee:0e:2a:56:66:3b:8c:a3:6c:41:ab:96:28:5b:
         36:30:5e:f3:c0:13:12:98:c6:b9:13:a3:a3:e8:e1:40:ec:fc:
         a5:c7:58:12:a1:53:74:e5:8b:dc:43:24:99:a2:01:8b:9a:2b:
         17:80:f5:c9:e8:86:38:a2:57:fb:f8:e2:21:d1:3a:0c:8c:17:
         c1:0f:26:fa:0c:ae:ec:4b:3b:f7:dc:27:ce:28:e3:3d:cd:fd:
         ac:5a:4d:0b:2b:17:bf:49:39:b6:cf:f7:c3:d5:4c:bc:f8:34:
         94:5b:06:e5:0b:df:ef:d4:87:9a:96:43:ef:c6:fe:d9:43:3f:
         4a:86:08:f8:32:fb:da:ef:2c:aa:5f:2e:ca:04:e0:f0:9e:89:
         1b:bf:e4:e1:27:08:1d:cb:1f:96:8c:e4:b2:69:25:61:62:6f:
         66:e3:80:78:ac:9c:64:1a:27:4b:70:30:7f:2a:e6:91:fe:73:
         0d:ea:c0:ed
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUBq6y6a+uGiVIoO5J0S9+j/7EnGkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VBQ0U2N0I4QzZGMjQ1NUJGRUI5NUNBOTdGNEVGQ0Uw
RDEwREFDNDAeFw0yNjA4MDYwODM3NDFaFw0yNzA4MDUwODQyNDFaMDMxMTAvBgNV
BAMTKEExQTdGQTI3NkEwNzAxNTIxNThFNTg3MTNGMkRDRUZDMEJERjNDNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDaP+ZsN+DVBq5wDGLurI73kon
kRIt3iguAVBerh2bIbXRttBKreEspSBjsNbbmxpoqYwsh9d/0Ip0oEJfGh3VpMPk
pMz6RkKQdQdXXmO6JFtIO9auBDo5tCB6XM2v2gKzBujeQFGvhc/zFsCNX8ZB6yCw
iyRaqI5wD+JS5C+KLoFT/RNhlWK+PDmBxvFLKL15vzOC8BcFoKENLL75dSggu/Ue
7yaVw+bv0VGhitK7/EzJkYrkke4JJ5ABkSvvfS9rrIqJb17x0Zget9p3KwwdQcb9
PAekTCanY+W9ShvxpdA+aagMdiZWF3pGUNJ8/ZNAxFijh6S5krP0/6xLfJ3HAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUoaf6J2oHAVIVjlhxPy3O/AvfPFUwHwYDVR0j
BBgwFoAUzqzme4xvJFW/65XKl/Tvzg0Q2sQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
OTAwNDc5NjQ1MjQwNTI2Ny8wL0NFQUNFNjdCOEM2RjI0NTVCRkVCOTVDQTk3RjRF
RkNFMEQxMERBQzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQ0VBQ0U2N0I4QzZGMjQ1NUJGRUI5NUNBOTdGNEVGQ0UwRDEwREFDNC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwOTAwNDc5NjQ1MjQwNTI2Ny8wLzMyMzAzMDMxM2E2
NDYzMzczYTYxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNDM0MzAzOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQC
AAIwCQMHACABDccACjANBgkqhkiG9w0BAQsFAAOCAQEAr0Dh4Egz3X4aSZv6reFK
Jp2nL0dxzE3OcG9Z+eedD7H+N1I4pynFVjVA94eFtavY6+b+8Lwbv9kbg0l8dYYV
63Qh3JTFE2LTCsgkku4OKlZmO4yjbEGrlihbNjBe88ATEpjGuROjo+jhQOz8pcdY
EqFTdOWL3EMkmaIBi5orF4D1yeiGOKJX+/jiIdE6DIwXwQ8m+gyu7Es799wnzijj
Pc39rFpNCysXv0k5ts/3w9VMvPg0lFsG5Qvf79SHmpZD78b+2UM/SoYI+DL72u8s
ql8uygTg8J6JG7/k4ScIHcsflozksmklYWJvZuOAeKycZBonS3Awfyrmkf5zDerA
7Q==
-----END CERTIFICATE-----
Generated at Sat Aug 29 07:12:21 2026 by rpki-client