Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109645952957874197/0/323430333a323034303a3a2f33322d3332203d3e203137373735.roa
File:                     323430333a323034303a3a2f33322d3332203d3e203137373735.roa (raw, json)
Hash identifier:          9JhpnBM+1uMmMdwYBNFpw8pK7XrWJeP4b+CjpbEUGtE=
Subject key identifier:   44:59:A9:C9:52:D7:A7:96:D3:34:ED:99:D7:89:3C:76:C7:0F:6F:AE
Certificate issuer:       /CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
Certificate serial:       3BB2F79F3EBE39F2629112068314D901F0170605
Authority key identifier: 54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/323430333a323034303a3a2f33322d3332203d3e203137373735.roa
Signing time:             Wed 17 Jun 2026 08:33:36 +0000
ROA not before:           Wed 17 Jun 2026 08:28:36 +0000
ROA not after:            Wed 16 Jun 2027 08:33:36 +0000
asID:                     17775
IP address blocks:        2403:2040::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 15:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:b2:f7:9f:3e:be:39:f2:62:91:12:06:83:14:d9:01:f0:17:06:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54B31AC409DB052FD501B70509D854CCE7B08A0B
        Validity
            Not Before: Jun 17 08:28:36 2026 GMT
            Not After : Jun 16 08:33:36 2027 GMT
        Subject: CN=4459A9C952D7A796D334ED99D7893C76C70F6FAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2a:e9:d4:0e:23:b9:b0:c7:0c:dc:b0:ea:55:
                    22:65:f6:b0:ae:dc:3c:84:8a:17:2f:73:a3:0e:a0:
                    ba:6e:02:e5:8e:97:a4:ef:d0:0a:01:8c:3a:78:47:
                    44:a4:95:e2:ac:66:35:b1:df:48:ca:4a:8f:30:f0:
                    2f:05:3a:38:60:ae:b0:84:c0:00:b1:cf:3e:ad:04:
                    70:23:f8:16:ca:ef:ea:c3:e9:84:8b:ac:c1:b2:cd:
                    bc:8c:77:ed:f0:3c:d9:51:a8:e5:2b:14:d7:9e:6e:
                    ee:e7:bc:37:4a:35:c5:d6:41:e7:51:aa:bc:4d:48:
                    dd:6d:f3:a4:45:7f:d1:42:20:31:fa:67:11:85:06:
                    00:e4:dd:39:1f:b9:55:85:c2:7c:ab:4e:e5:bb:c6:
                    4e:a7:44:f4:34:fc:1e:cc:61:03:97:2c:64:5a:1a:
                    6a:ef:6a:49:44:0a:04:6d:60:99:34:1a:3d:24:81:
                    af:ad:03:34:0c:56:22:59:2d:bd:91:ee:47:bc:39:
                    2e:9c:25:87:e4:d4:3d:13:b5:f7:bc:e2:1a:5a:9c:
                    e2:ec:cb:d3:d4:a2:f8:13:a2:cc:86:d5:67:79:04:
                    09:65:7b:44:d0:6a:ce:c5:88:48:03:c8:23:55:3c:
                    2a:eb:87:17:64:ec:6f:95:d6:5d:13:9d:a5:6c:e7:
                    b9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:59:A9:C9:52:D7:A7:96:D3:34:ED:99:D7:89:3C:76:C7:0F:6F:AE
            X509v3 Authority Key Identifier:
                keyid:54:B3:1A:C4:09:DB:05:2F:D5:01:B7:05:09:D8:54:CC:E7:B0:8A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/54B31AC409DB052FD501B70509D854CCE7B08A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/54B31AC409DB052FD501B70509D854CCE7B08A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109645952957874197/0/323430333a323034303a3a2f33322d3332203d3e203137373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:2040::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:7e:f0:1f:55:78:66:ef:0f:3b:3f:9e:e8:eb:87:8e:77:c6:
         9d:f1:64:7b:64:7a:11:1e:f1:25:8a:79:d7:39:bb:4f:32:e9:
         a3:73:56:db:e8:b0:8e:2d:15:01:14:7f:64:34:ed:59:92:ee:
         16:77:0c:cf:37:02:b7:02:53:eb:36:1d:8c:5d:85:2b:b0:83:
         88:05:ae:ce:20:a2:d6:3e:1a:04:23:0b:b5:c4:eb:3d:30:ec:
         95:9d:d6:1d:e4:a5:87:82:22:ba:2c:24:de:f2:b3:ee:0d:f7:
         a2:3e:03:3a:42:1a:af:7d:20:1e:fd:ef:e8:54:d4:18:73:71:
         db:6d:5e:77:e1:41:d7:59:38:c1:0a:72:4e:29:b4:05:19:5d:
         1f:08:54:ef:c7:cc:7f:d4:4b:3e:56:31:77:93:02:a8:41:03:
         3f:46:d5:64:2a:ae:ad:1d:f4:0c:79:7c:73:32:2a:5a:ff:9e:
         f1:7d:dc:4a:fb:e9:e2:8e:eb:12:56:d8:7b:87:08:24:c0:69:
         fc:68:99:96:d1:75:25:cb:25:51:e2:77:c4:dc:61:3c:95:7e:
         1f:61:e5:51:a5:43:2c:4c:0c:40:b9:1e:c7:16:53:c0:91:d3:
         33:7c:55:7c:32:f2:e4:d7:ff:0c:0e:29:77:ea:18:0f:ae:a5:
         69:3b:a7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:55 2026 by rpki-client