Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a343238303a3a2f33322d3332203d3e203539303136.roa
File:                     323430313a343238303a3a2f33322d3332203d3e203539303136.roa (raw, json)
Hash identifier:          wvGE2b5TSnKIY0jATltop2J3jnvexdzdvqHvS8nfqoc=
Subject key identifier:   6C:9B:0D:44:30:D8:EB:1C:44:25:9B:CC:B9:86:49:45:5D:05:EB:04
Certificate issuer:       /CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3
Certificate serial:       10E32CA5ADCBC0884C310B4B8C8E4E10BF59A04C
Authority key identifier: 95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a343238303a3a2f33322d3332203d3e203539303136.roa
Signing time:             Thu 21 May 2026 02:42:09 +0000
ROA not before:           Thu 21 May 2026 02:37:09 +0000
ROA not after:            Thu 20 May 2027 02:42:09 +0000
asID:                     59016
IP address blocks:        2401:4280::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 08:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e3:2c:a5:ad:cb:c0:88:4c:31:0b:4b:8c:8e:4e:10:bf:59:a0:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3
        Validity
            Not Before: May 21 02:37:09 2026 GMT
            Not After : May 20 02:42:09 2027 GMT
        Subject: CN=6C9B0D4430D8EB1C44259BCCB98649455D05EB04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:de:0e:d2:d7:64:ae:ce:66:90:f8:1c:0d:94:
                    5c:20:18:04:b6:4b:02:6e:12:b4:dc:2b:51:3c:7f:
                    01:1a:36:2c:6c:d0:58:55:74:79:a2:44:1b:f2:55:
                    3a:f1:f6:02:6c:47:ef:5e:87:33:bf:5a:b9:ec:6d:
                    94:4c:7b:6b:7a:2d:30:83:1e:0a:7c:76:a8:48:16:
                    84:bc:ce:55:3f:6d:e1:d2:c1:97:d4:5a:ca:19:c8:
                    1c:11:9b:48:47:c6:ef:b7:9e:1c:99:35:69:31:67:
                    ad:5e:8d:f1:5c:b1:06:62:99:cd:cf:eb:6a:b5:93:
                    43:57:4c:2c:6a:68:43:d5:59:ff:0e:be:bc:46:03:
                    63:1b:c6:da:50:0d:dd:f1:71:ab:3e:d7:4f:87:6c:
                    bf:f3:5d:17:1a:b5:6d:cc:4d:b8:3b:08:cf:1b:03:
                    d7:ad:de:6d:bd:c4:3c:c9:cd:c5:ed:87:75:0d:a1:
                    2c:05:a0:c7:0e:80:36:13:4b:92:85:e0:f6:e1:a9:
                    4e:a9:65:cf:b2:0f:5d:d0:d0:dd:83:34:5e:e0:fa:
                    ec:58:31:86:9e:cf:a5:ae:91:38:8e:64:80:70:6f:
                    6e:c3:9d:13:e7:5a:5b:0d:ea:f8:df:c1:7f:f6:a1:
                    d7:a1:4f:7f:47:98:ee:1b:4d:af:99:02:1e:31:dc:
                    37:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:9B:0D:44:30:D8:EB:1C:44:25:9B:CC:B9:86:49:45:5D:05:EB:04
            X509v3 Authority Key Identifier:
                keyid:95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a343238303a3a2f33322d3332203d3e203539303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:4280::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:17:0f:e6:c0:d3:d1:ef:6c:a8:f7:31:8b:8d:4f:22:cc:a9:
         b0:45:c7:b0:b4:08:89:11:15:ff:d0:47:e8:74:cf:66:56:ba:
         d7:bb:13:3c:4e:ff:b3:d9:33:52:97:37:df:f8:7f:18:31:14:
         97:b6:f6:07:6b:13:43:2f:96:ee:83:2b:46:83:4a:ff:37:f0:
         79:97:6b:56:57:4f:44:2b:68:83:64:cd:b7:f8:ca:35:da:4a:
         64:64:1c:30:c0:a1:ac:76:ef:46:85:b1:6b:fd:9a:78:91:81:
         0d:c6:cd:c1:f6:34:e1:f3:ac:da:95:1b:7b:7e:ff:24:c7:2f:
         ec:99:06:40:81:7d:b9:43:6b:f8:85:96:3f:cc:8f:ad:16:39:
         5c:0f:bf:44:1d:b0:36:ab:ba:2d:98:81:bb:98:b5:06:6e:b8:
         16:4d:e3:f6:9e:ba:de:da:03:97:50:e7:05:2f:31:f0:32:6f:
         63:3f:9b:5a:22:8e:6c:bb:99:2e:25:d6:ab:b1:80:73:02:bb:
         5a:89:99:9a:ec:0e:1e:0a:72:66:f0:02:51:58:3f:d1:2a:0d:
         6b:c8:16:ed:41:04:75:03:41:a7:7b:d0:66:5b:79:6b:48:98:
         ad:da:7d:1c:24:38:03:4a:f6:b9:cc:79:6f:e4:ae:2a:d0:2f:
         d8:29:c3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:57:04 2026 by rpki-client