Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109004796452405267/0/323030313a6463373a623a3a2f34382d3438203d3e203234343036.roa
File:                     323030313a6463373a623a3a2f34382d3438203d3e203234343036.roa (raw, json)
Hash identifier:          fgOR+MnNJ2W83GiWVYv+7j0t8104WBZvMhJOCqCXPDU=
Subject key identifier:   FC:D9:B8:A7:E1:79:CC:F4:38:4E:CF:DA:E3:A6:1E:64:E6:2A:F6:ED
Certificate issuer:       /CN=CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4
Certificate serial:       2CDD06041E65B12E49CF94A65942A77D134D57E4
Authority key identifier: CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/323030313a6463373a623a3a2f34382d3438203d3e203234343036.roa
Signing time:             Thu 06 Aug 2026 08:33:05 +0000
ROA not before:           Thu 06 Aug 2026 08:28:05 +0000
ROA not after:            Thu 05 Aug 2027 08:33:05 +0000
asID:                     24406
IP address blocks:        2001:dc7:b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 15:20:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:dd:06:04:1e:65:b1:2e:49:cf:94:a6:59:42:a7:7d:13:4d:57:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4
        Validity
            Not Before: Aug  6 08:28:05 2026 GMT
            Not After : Aug  5 08:33:05 2027 GMT
        Subject: CN=FCD9B8A7E179CCF4384ECFDAE3A61E64E62AF6ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:45:96:50:77:47:5d:f3:89:63:12:2c:56:92:
                    bc:9d:17:f7:5a:40:93:dc:27:33:7a:41:f0:15:f4:
                    e6:50:94:5d:e1:ac:9b:5f:f0:34:bd:5c:82:2b:f1:
                    f1:18:3f:b1:26:9c:ba:83:90:ff:d0:bc:7e:a8:30:
                    91:b4:f7:e0:18:2c:33:dc:8f:5e:27:73:e3:2c:f3:
                    dc:38:33:de:34:dd:a4:22:54:2a:9a:34:4f:40:62:
                    84:8c:8e:da:1b:58:98:6e:20:aa:24:b8:15:38:b4:
                    9e:6f:7e:2c:3f:53:8f:cf:d6:f8:e9:a5:2c:19:12:
                    4b:6c:bb:b0:46:ff:36:7a:a0:72:bc:6b:83:33:bb:
                    4e:12:4d:b2:b1:93:a4:f6:35:52:b1:2d:f5:3b:52:
                    6a:63:3a:94:4e:8d:bd:8f:fa:7a:b0:92:72:a0:ee:
                    77:b8:72:7e:0f:31:86:46:36:f3:4b:25:bd:a2:a8:
                    ea:fb:1e:cf:b0:f7:24:e3:dc:d9:fa:9c:fe:83:95:
                    49:ad:fb:6e:98:61:7d:d5:d9:14:32:80:6a:82:42:
                    81:30:f3:b8:dc:0c:ef:f2:17:da:73:3c:63:b0:5c:
                    48:be:d0:51:1a:54:c9:e3:54:83:a5:77:e6:43:9a:
                    09:4f:cb:aa:5b:24:0f:31:e4:89:0c:5a:20:0a:87:
                    b4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D9:B8:A7:E1:79:CC:F4:38:4E:CF:DA:E3:A6:1E:64:E6:2A:F6:ED
            X509v3 Authority Key Identifier:
                keyid:CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/323030313a6463373a623a3a2f34382d3438203d3e203234343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:dc7:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:af:bb:75:3d:70:1e:91:64:9f:92:39:5d:a5:18:b9:b4:82:
         f5:b2:2a:b4:eb:64:6d:7a:70:b6:2e:ba:41:2d:a5:2f:bc:c4:
         d4:8c:02:43:ac:02:d8:7a:6f:15:44:91:27:d9:27:bf:6c:d5:
         4d:12:be:cf:6b:3e:bf:97:62:1c:bc:0f:b9:fe:a0:61:9d:a3:
         e1:c9:ce:4b:f9:2e:5a:c6:9e:be:45:cc:c0:2a:96:e7:54:1d:
         cd:90:7e:4a:70:8b:f2:18:d2:3d:4d:bb:7b:54:39:b2:a9:d2:
         8e:ce:e3:9b:03:ca:ca:83:6d:50:f7:1a:2a:6d:2a:6d:01:ad:
         67:ae:b4:db:40:12:44:08:80:fb:ab:0d:a8:4c:9b:e2:5c:a3:
         74:a7:aa:8b:62:31:fd:85:d0:58:76:af:a4:e5:fe:b1:1f:30:
         cb:b8:80:3b:53:cc:34:cc:c7:03:fd:41:f1:3d:58:6e:3e:50:
         89:8e:4d:f0:af:b0:24:70:ff:ac:df:c5:fe:96:c8:33:c2:36:
         99:8c:17:bc:26:11:46:a0:ab:53:76:e5:1a:c2:c6:f2:01:b9:
         2b:3a:5b:0c:74:8a:c9:44:73:00:0b:86:7b:76:3b:a0:04:95:
         63:3e:b7:4e:06:a1:10:36:b9:84:4a:fa:04:13:8b:dc:d9:ba:
         cf:e7:34:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 07:05:14 2026 by rpki-client