Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111842086300155925/1/323430313a613665303a3a2f33322d3332203d3e2030.roa
File:                     323430313a613665303a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier:          nOvIMdHhTRhb5sUMtQwcziF2554ZM2h0OdA2vT3YEJc=
Subject key identifier:   D3:87:57:FC:6E:B7:6A:14:C4:94:B1:A3:B2:5C:97:7B:B8:21:1B:0B
Certificate issuer:       /CN=9A2D314750263BD27FBA266C8599F3E64F26E3C7
Certificate serial:       1713B4D98401EF3A82284CECAA1E85228F446C11
Authority key identifier: 9A:2D:31:47:50:26:3B:D2:7F:BA:26:6C:85:99:F3:E6:4F:26:E3:C7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2D314750263BD27FBA266C8599F3E64F26E3C7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1111842086300155925/1/323430313a613665303a3a2f33322d3332203d3e2030.roa
Signing time:             Wed 27 May 2026 02:37:06 +0000
ROA not before:           Wed 27 May 2026 02:32:06 +0000
ROA not after:            Wed 26 May 2027 02:37:06 +0000
asID:                     0
IP address blocks:        2401:a6e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1111842086300155925/1/9A2D314750263BD27FBA266C8599F3E64F26E3C7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1111842086300155925/1/9A2D314750263BD27FBA266C8599F3E64F26E3C7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2D314750263BD27FBA266C8599F3E64F26E3C7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 05:49:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:13:b4:d9:84:01:ef:3a:82:28:4c:ec:aa:1e:85:22:8f:44:6c:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A2D314750263BD27FBA266C8599F3E64F26E3C7
        Validity
            Not Before: May 27 02:32:06 2026 GMT
            Not After : May 26 02:37:06 2027 GMT
        Subject: CN=D38757FC6EB76A14C494B1A3B25C977BB8211B0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a9:31:4b:1b:03:d6:85:2e:63:8e:37:6a:95:
                    0e:ce:a9:ad:78:cd:39:8f:0e:22:ed:4b:d0:03:2e:
                    ed:1b:7c:e0:8d:62:72:eb:3e:ec:eb:c3:61:b9:19:
                    b9:44:f2:6a:88:5b:f4:dc:d8:ae:5d:74:3a:5c:e0:
                    29:23:8f:35:67:d7:15:30:72:5d:ad:db:05:05:6d:
                    24:7c:61:3f:20:87:97:86:82:b1:1c:16:98:23:06:
                    59:4f:ee:8b:19:57:9e:cd:e3:d3:75:a5:6a:ee:41:
                    d1:72:12:d4:0b:e0:75:20:73:39:88:6c:fc:43:84:
                    25:a9:00:06:e5:cf:82:7e:31:f5:9a:ff:f3:d0:b6:
                    26:43:11:52:ac:d8:1e:23:4d:d5:27:86:49:a6:0b:
                    3d:9f:58:03:13:50:8a:1e:88:20:c1:94:c6:d8:e3:
                    d5:ec:a3:98:0b:1b:1c:73:31:7a:0e:81:6d:ad:7b:
                    e5:52:3c:4d:20:c1:b8:7a:0e:18:06:fe:d8:98:30:
                    eb:fe:5e:be:0f:74:ef:fb:d7:f6:a8:75:8c:4d:2d:
                    31:68:67:43:af:5c:02:23:1e:9e:4b:f5:f7:25:74:
                    28:a0:a8:d6:ef:b8:07:77:ce:21:31:7b:70:ff:91:
                    20:ac:15:92:08:93:97:52:59:d9:cd:d2:13:0c:05:
                    8d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:87:57:FC:6E:B7:6A:14:C4:94:B1:A3:B2:5C:97:7B:B8:21:1B:0B
            X509v3 Authority Key Identifier:
                keyid:9A:2D:31:47:50:26:3B:D2:7F:BA:26:6C:85:99:F3:E6:4F:26:E3:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1111842086300155925/1/9A2D314750263BD27FBA266C8599F3E64F26E3C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2D314750263BD27FBA266C8599F3E64F26E3C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111842086300155925/1/323430313a613665303a3a2f33322d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:a6e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:73:3e:c2:b6:1a:aa:80:c1:00:34:96:28:0b:2a:b8:a2:f3:
         b1:eb:ad:f6:9d:a7:b9:eb:23:3f:86:e2:11:e6:3b:4b:19:1b:
         7e:bd:aa:31:2d:db:17:e6:41:4e:78:64:8a:e3:ee:84:fc:5d:
         84:1f:19:dc:1b:d0:6d:99:15:7c:d8:e0:99:a1:28:6b:a0:94:
         57:62:4c:47:3d:69:a0:06:55:9a:af:8c:3b:b1:a8:98:90:05:
         4b:13:37:b9:67:73:0f:40:94:da:e6:c1:78:44:5b:45:2a:57:
         6e:0b:43:9a:46:1d:5b:ad:55:84:9a:5d:b8:8a:48:a9:cb:63:
         45:59:36:55:a2:98:31:bb:88:f8:19:fb:59:82:02:ec:ae:d4:
         05:c6:13:06:39:4f:96:88:7e:46:f3:6c:87:a8:80:f5:26:36:
         bc:8d:2f:eb:ce:d4:37:88:8b:40:03:53:0a:9b:32:24:51:ee:
         26:bf:40:bb:9e:73:16:8d:3f:f7:2a:83:5d:c8:6e:2d:7d:f9:
         b7:22:a5:57:15:b1:1f:79:a6:c2:b0:9b:7c:4f:0b:19:56:28:
         9b:b2:58:6f:90:0f:6d:f4:e7:08:7a:0a:ed:76:5d:7d:07:0e:
         67:bf:a0:a1:36:84:aa:71:79:6c:4c:69:9d:7b:e8:ad:e8:ca:
         fd:8a:59:0f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUFxO02YQB7zqCKEzsqh6FIo9EbBEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUEyRDMxNDc1MDI2M0JEMjdGQkEyNjZDODU5OUYzRTY0
RjI2RTNDNzAeFw0yNjA1MjcwMjMyMDZaFw0yNzA1MjYwMjM3MDZaMDMxMTAvBgNV
BAMTKEQzODc1N0ZDNkVCNzZBMTRDNDk0QjFBM0IyNUM5NzdCQjgyMTFCMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAqTFLGwPWhS5jjjdqlQ7Oqa14
zTmPDiLtS9ADLu0bfOCNYnLrPuzrw2G5GblE8mqIW/Tc2K5ddDpc4CkjjzVn1xUw
cl2t2wUFbSR8YT8gh5eGgrEcFpgjBllP7osZV57N49N1pWruQdFyEtQL4HUgczmI
bPxDhCWpAAblz4J+MfWa//PQtiZDEVKs2B4jTdUnhkmmCz2fWAMTUIoeiCDBlMbY
49Xso5gLGxxzMXoOgW2te+VSPE0gwbh6DhgG/tiYMOv+Xr4PdO/71/aodYxNLTFo
Z0OvXAIjHp5L9fcldCigqNbvuAd3ziExe3D/kSCsFZIIk5dSWdnN0hMMBY1bAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU04dX/G63ahTElLGjslyXe7ghGwswHwYDVR0j
BBgwFoAUmi0xR1AmO9J/uiZshZnz5k8m48cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MTg0MjA4NjMwMDE1NTkyNS8xLzlBMkQzMTQ3NTAyNjNCRDI3RkJBMjY2Qzg1OTlG
M0U2NEYyNkUzQzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOUEyRDMxNDc1MDI2M0JEMjdGQkEyNjZDODU5OUYzRTY0RjI2RTNDNy5jZXIw
gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTExODQyMDg2MzAwMTU1OTI1LzEvMzIzNDMwMzEzYTYx
MzY2NTMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAabg
MA0GCSqGSIb3DQEBCwUAA4IBAQA9cz7CthqqgMEANJYoCyq4ovOx6632nae56yM/
huIR5jtLGRt+vaoxLdsX5kFOeGSK4+6E/F2EHxncG9BtmRV82OCZoShroJRXYkxH
PWmgBlWar4w7saiYkAVLEze5Z3MPQJTa5sF4RFtFKlduC0OaRh1brVWEml24ikip
y2NFWTZVopgxu4j4GftZggLsrtQFxhMGOU+WiH5G82yHqID1Jja8jS/rztQ3iItA
A1MKmzIkUe4mv0C7nnMWjT/3KoNdyG4tffm3IqVXFbEfeabCsJt8TwsZViibslhv
kA9t9OcIegrtdl19Bw5nv6ChNoSqcXlsTGmde+it6Mr9ilkP
-----END CERTIFICATE-----
Generated at Fri May 29 23:54:50 2026 by rpki-client