Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a343438303a3a2f33322d3332203d3e203539303136.roa
File:                     323430313a343438303a3a2f33322d3332203d3e203539303136.roa (raw, json)
Hash identifier:          tijXdtP2aEYodGJFVcP655ov9AvFTQq/eg3860Iq/s8=
Subject key identifier:   CB:6B:AD:E6:CC:E4:5D:0F:09:A8:B2:67:19:FD:AA:9E:39:2E:02:F6
Certificate issuer:       /CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3
Certificate serial:       47BDA7E6FFCD367883D1BFD1F6B53B1C5051C5DB
Authority key identifier: 95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a343438303a3a2f33322d3332203d3e203539303136.roa
Signing time:             Thu 21 May 2026 02:42:10 +0000
ROA not before:           Thu 21 May 2026 02:37:10 +0000
ROA not after:            Thu 20 May 2027 02:42:10 +0000
asID:                     59016
IP address blocks:        2401:4480::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 08:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bd:a7:e6:ff:cd:36:78:83:d1:bf:d1:f6:b5:3b:1c:50:51:c5:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3
        Validity
            Not Before: May 21 02:37:10 2026 GMT
            Not After : May 20 02:42:10 2027 GMT
        Subject: CN=CB6BADE6CCE45D0F09A8B26719FDAA9E392E02F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:30:c0:d0:77:b2:e4:d3:f6:f4:62:6d:36:fd:
                    38:54:30:63:f7:e0:45:09:47:f8:cb:d7:93:f1:44:
                    29:08:75:a2:de:40:15:9c:0d:b2:90:ea:0a:89:58:
                    87:2b:73:9f:e0:5d:07:d1:9b:a4:80:e5:0e:2b:93:
                    3e:64:94:3e:64:5c:4e:ee:83:f9:14:01:df:11:24:
                    cf:85:9f:19:d4:e9:f5:e9:da:77:c1:7c:2c:06:e4:
                    b7:55:6b:71:23:76:e4:48:16:79:b5:24:6f:66:d4:
                    d0:1b:44:6b:e9:b4:f2:86:06:ce:d2:16:6d:c9:96:
                    5f:ee:62:92:96:0b:bc:e0:7f:7c:1f:60:db:1a:e1:
                    00:59:ce:63:bb:6f:b0:a7:1c:a6:3e:24:a8:30:2f:
                    b8:24:b9:13:73:45:7c:07:30:d3:84:91:e9:0f:ad:
                    1c:22:b7:b7:f9:f6:22:5d:10:44:f5:f3:9e:41:86:
                    b3:0f:b1:a5:32:e1:9d:30:ad:6e:0d:6b:10:a1:b3:
                    0e:46:a8:65:d1:13:c9:04:f5:eb:f0:6f:6c:61:0c:
                    ac:55:71:30:64:fe:c6:01:0e:26:dd:ec:fc:96:6c:
                    16:18:81:c9:5f:b0:3e:f8:11:a0:8f:3f:03:16:d1:
                    85:8d:5e:b9:ca:d1:52:97:a3:94:36:5e:6e:50:5e:
                    b7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:6B:AD:E6:CC:E4:5D:0F:09:A8:B2:67:19:FD:AA:9E:39:2E:02:F6
            X509v3 Authority Key Identifier:
                keyid:95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a343438303a3a2f33322d3332203d3e203539303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:4480::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:e2:ce:93:84:30:3c:5a:08:61:9c:58:d5:ba:f9:e5:d7:9a:
         db:38:77:58:3a:33:f0:d8:e3:fc:ec:1d:16:88:51:53:8a:8d:
         d9:71:25:53:71:df:b5:50:f1:34:c9:a7:40:55:63:87:08:9b:
         c1:fd:b6:52:03:08:a1:d9:b5:3f:15:8a:0b:78:1b:3d:90:a0:
         f1:c5:45:11:08:e3:54:f3:56:30:50:ff:a5:f6:2c:fc:d3:b3:
         72:16:ec:6d:7e:96:23:c7:c5:9e:65:77:1e:ba:2c:ca:2f:d3:
         11:21:e8:b6:de:92:3f:99:88:f3:56:db:30:0a:d9:0e:57:2b:
         53:8f:f5:01:ac:94:e6:9a:1a:ee:36:83:35:c8:6c:23:04:c5:
         c7:8a:35:59:33:7e:93:a9:9a:53:ee:74:65:6a:ff:71:05:7a:
         5c:98:70:4a:7b:a0:17:f3:84:90:6d:b2:72:26:b6:c7:27:d8:
         81:85:80:26:5f:44:2e:c6:fe:cf:0b:14:20:d1:d1:67:cb:57:
         2b:43:0d:cd:5a:5b:f1:4f:23:c3:ee:4b:5e:a3:e6:32:a2:57:
         9b:27:57:12:42:e0:20:5a:74:4c:0a:7d:9c:fa:e4:ce:3d:81:
         2d:7b:a6:52:b8:1a:3c:42:38:88:53:1e:4f:09:b0:11:96:cc:
         7e:12:51:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:56:57 2026 by rpki-client