Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1110083775733235733/1/323430323a313861303a3a2f33322d3332203d3e20313531323239.roa
File:                     323430323a313861303a3a2f33322d3332203d3e20313531323239.roa (raw, json)
Hash identifier:          c8WNPZIvhrZeBjLe5wY9CC8paBg1j9yN7x/SJKYbClQ=
Subject key identifier:   A2:89:C0:53:55:F9:92:DA:C6:9B:7E:E1:68:57:BF:DD:84:F5:66:67
Certificate issuer:       /CN=34792F5FA94D005EB8C9704B96BE16835CB06819
Certificate serial:       4C80630F81E7CFA318165D287D46126EA5142750
Authority key identifier: 34:79:2F:5F:A9:4D:00:5E:B8:C9:70:4B:96:BE:16:83:5C:B0:68:19
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/34792F5FA94D005EB8C9704B96BE16835CB06819.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/323430323a313861303a3a2f33322d3332203d3e20313531323239.roa
Signing time:             Fri 22 May 2026 06:04:13 +0000
ROA not before:           Fri 22 May 2026 05:59:13 +0000
ROA not after:            Fri 21 May 2027 06:04:13 +0000
asID:                     151229
IP address blocks:        2402:18a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/34792F5FA94D005EB8C9704B96BE16835CB06819.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:80:63:0f:81:e7:cf:a3:18:16:5d:28:7d:46:12:6e:a5:14:27:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34792F5FA94D005EB8C9704B96BE16835CB06819
        Validity
            Not Before: May 22 05:59:13 2026 GMT
            Not After : May 21 06:04:13 2027 GMT
        Subject: CN=A289C05355F992DAC69B7EE16857BFDD84F56667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d7:e2:de:54:24:35:12:4a:55:59:c4:0a:ad:
                    28:27:51:ba:61:7e:54:87:96:04:93:60:40:44:7b:
                    11:0b:7f:8a:8f:89:00:47:50:df:d6:b2:19:c0:70:
                    4c:96:11:72:c3:04:58:fd:df:71:7f:c3:ef:f9:d6:
                    ef:e1:0b:73:fb:54:5f:9a:1f:f6:db:a0:ae:39:99:
                    f9:54:6c:e9:06:82:61:4e:1e:23:63:dd:b3:f3:17:
                    35:28:80:f6:02:6a:00:31:76:94:a6:fb:5e:b3:f8:
                    43:99:cd:f3:70:06:fa:4b:25:27:34:df:52:a3:2b:
                    d3:18:a1:06:7c:68:9a:4b:ee:31:92:3d:48:e0:d7:
                    af:4b:84:9a:f1:fd:20:61:7b:59:5b:d8:90:26:d7:
                    1c:e3:68:78:b5:9c:d7:1a:d0:97:34:5c:b9:8c:80:
                    4d:49:fd:18:52:44:24:9e:47:c1:cb:8c:d5:8e:f2:
                    6f:7c:e0:60:cd:4c:d5:bb:5c:5c:3c:65:b3:9d:a4:
                    14:69:b7:e5:df:88:eb:e5:a0:b5:8a:b5:a9:cb:37:
                    f7:c4:f5:89:de:66:9e:bd:a1:ca:5f:de:a6:eb:c5:
                    29:26:af:1d:9c:59:2b:3c:f2:93:84:ae:78:97:f2:
                    1b:1a:e9:18:6a:f7:2e:30:b5:fd:94:5f:1d:41:02:
                    04:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:89:C0:53:55:F9:92:DA:C6:9B:7E:E1:68:57:BF:DD:84:F5:66:67
            X509v3 Authority Key Identifier:
                keyid:34:79:2F:5F:A9:4D:00:5E:B8:C9:70:4B:96:BE:16:83:5C:B0:68:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/34792F5FA94D005EB8C9704B96BE16835CB06819.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/323430323a313861303a3a2f33322d3332203d3e20313531323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:18a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:cf:48:27:e9:eb:cc:d3:a9:64:a9:9d:13:05:a7:de:56:36:
         68:a9:ea:4c:36:00:b8:62:e4:b3:06:e0:c1:46:6f:fe:e1:a2:
         e5:27:74:06:b1:06:55:f6:17:4a:48:ba:3a:2e:30:72:38:cb:
         24:89:18:61:d5:c3:a2:61:0c:10:4d:fb:0f:a6:3e:a7:aa:81:
         5d:40:8a:72:b4:be:60:c8:2f:e1:cb:00:de:c4:c7:0d:01:99:
         ef:38:03:2d:de:8b:32:57:9f:02:b2:a1:fb:17:18:24:30:8c:
         ce:f4:93:f2:0b:2a:0a:dc:fd:49:f6:0e:fe:25:68:c9:6b:06:
         05:e0:1f:38:04:ae:b7:88:1a:cb:fc:69:ab:78:63:b3:7c:43:
         c2:be:1b:b1:3b:de:c5:5c:4d:92:3d:97:89:1a:47:93:3e:f9:
         fd:81:ec:41:47:07:43:96:57:d2:a9:23:f4:84:69:89:3c:7b:
         53:6d:91:77:2e:23:59:70:3e:22:70:18:1a:63:f0:4b:67:57:
         69:76:4f:bb:43:2e:ab:1f:28:3b:f3:47:f4:11:46:74:5d:5c:
         8b:60:54:7b:ba:6a:7f:29:e4:4e:5f:c0:15:c6:2a:13:c0:ec:
         6d:52:de:2e:2b:f1:85:a4:22:03:a9:51:c6:bd:d2:47:93:e2:
         0a:07:65:e5
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUTIBjD4Hnz6MYFl0ofUYSbqUUJ1AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQ3OTJGNUZBOTREMDA1RUI4Qzk3MDRCOTZCRTE2ODM1
Q0IwNjgxOTAeFw0yNjA1MjIwNTU5MTNaFw0yNzA1MjEwNjA0MTNaMDMxMTAvBgNV
BAMTKEEyODlDMDUzNTVGOTkyREFDNjlCN0VFMTY4NTdCRkREODRGNTY2NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC11+LeVCQ1EkpVWcQKrSgnUbph
flSHlgSTYEBEexELf4qPiQBHUN/WshnAcEyWEXLDBFj933F/w+/51u/hC3P7VF+a
H/bboK45mflUbOkGgmFOHiNj3bPzFzUogPYCagAxdpSm+16z+EOZzfNwBvpLJSc0
31KjK9MYoQZ8aJpL7jGSPUjg169LhJrx/SBhe1lb2JAm1xzjaHi1nNca0Jc0XLmM
gE1J/RhSRCSeR8HLjNWO8m984GDNTNW7XFw8ZbOdpBRpt+XfiOvloLWKtanLN/fE
9YneZp69ocpf3qbrxSkmrx2cWSs88pOErniX8hsa6Rhq9y4wtf2UXx1BAgStAgMB
AAGjggIVMIICETAdBgNVHQ4EFgQUoonAU1X5ktrGm37haFe/3YT1ZmcwHwYDVR0j
BBgwFoAUNHkvX6lNAF64yXBLlr4Wg1ywaBkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MDA4Mzc3NTczMzIzNTczMy8xLzM0NzkyRjVGQTk0RDAwNUVCOEM5NzA0Qjk2QkUx
NjgzNUNCMDY4MTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzQ3OTJGNUZBOTREMDA1RUI4Qzk3MDRCOTZCRTE2ODM1Q0IwNjgxOS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTExMDA4Mzc3NTczMzIzNTczMy8xLzMyMzQzMDMyM2Ez
MTM4NjEzMDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMxMzUzMTMyMzIzOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQC
AAIwBwMFACQCGKAwDQYJKoZIhvcNAQELBQADggEBAFrPSCfp68zTqWSpnRMFp95W
Nmip6kw2ALhi5LMG4MFGb/7houUndAaxBlX2F0pIujouMHI4yySJGGHVw6JhDBBN
+w+mPqeqgV1AinK0vmDIL+HLAN7Exw0Bme84Ay3eizJXnwKyofsXGCQwjM70k/IL
Kgrc/Un2Dv4laMlrBgXgHzgErreIGsv8aat4Y7N8Q8K+G7E73sVcTZI9l4kaR5M+
+f2B7EFHB0OWV9KpI/SEaYk8e1NtkXcuI1lwPiJwGBpj8EtnV2l2T7tDLqsfKDvz
R/QRRnRdXItgVHu6an8p5E5fwBXGKhPA7G1S3i4r8YWkIgOpUca90keT4goHZeU=
-----END CERTIFICATE-----
Generated at Fri May 29 23:59:13 2026 by rpki-client