Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/323430323a656634303a3a2f34382d3438203d3e2034383038.roa
File:                     323430323a656634303a3a2f34382d3438203d3e2034383038.roa (raw, json)
Hash identifier:          o6h2ssIRJ/a6brpejGq3kbhx7M8EMhSdPPiDK3amsgA=
Subject key identifier:   1F:3D:04:AE:68:83:BE:37:EF:70:6F:89:6C:3B:AC:6B:85:86:03:D3
Certificate issuer:       /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial:       762F10BB865FEEE709F0AEA994C575E3484E3AC7
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/323430323a656634303a3a2f34382d3438203d3e2034383038.roa
Signing time:             Thu 04 Jun 2026 02:23:43 +0000
ROA not before:           Thu 04 Jun 2026 02:18:43 +0000
ROA not after:            Thu 03 Jun 2027 02:23:43 +0000
asID:                     4808
IP address blocks:        2402:ef40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 17:57:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:2f:10:bb:86:5f:ee:e7:09:f0:ae:a9:94:c5:75:e3:48:4e:3a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
        Validity
            Not Before: Jun  4 02:18:43 2026 GMT
            Not After : Jun  3 02:23:43 2027 GMT
        Subject: CN=1F3D04AE6883BE37EF706F896C3BAC6B858603D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:be:20:1e:c7:02:29:da:15:25:e6:34:24:1e:
                    59:c9:67:ba:2d:04:f5:ac:72:9a:d1:e6:86:41:01:
                    6c:83:d5:f6:2e:cc:39:62:f2:a1:d8:52:ff:f3:19:
                    9b:4c:3a:14:1a:61:88:7a:b8:74:50:3f:9a:e0:35:
                    f9:1c:94:b1:0d:a3:93:47:72:e9:ba:45:52:83:62:
                    ba:7e:c9:74:d3:7e:13:5b:15:85:fc:2e:8b:f0:86:
                    dd:ab:28:00:d8:cc:d8:28:56:3a:1d:de:ee:43:f8:
                    d3:3c:1a:13:6b:a5:17:74:90:dc:c8:5c:00:55:33:
                    ab:4a:1f:fd:aa:3a:b6:ee:4d:9b:56:48:a1:ff:82:
                    6a:8e:ce:68:5a:b3:aa:ee:73:96:45:8a:43:74:1f:
                    cc:59:ef:d8:ee:a7:67:91:55:ae:6d:e4:8e:df:e8:
                    84:53:c4:aa:9f:d1:7d:63:38:22:bc:9d:6e:33:37:
                    9f:a2:4a:09:92:01:6a:b8:e6:2d:f7:f8:97:76:48:
                    c7:43:bf:42:f3:ce:26:64:b0:dd:64:5c:41:fc:a5:
                    be:d8:66:d7:eb:aa:68:1c:bc:cd:8f:c9:fe:1f:12:
                    06:f1:c8:53:a2:e3:9c:99:1d:e8:09:39:d3:0d:36:
                    dd:f4:7a:e9:9b:3b:75:f0:10:0c:9c:47:f3:67:6f:
                    eb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3D:04:AE:68:83:BE:37:EF:70:6F:89:6C:3B:AC:6B:85:86:03:D3
            X509v3 Authority Key Identifier:
                keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/323430323a656634303a3a2f34382d3438203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:ef40::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:25:f8:da:0a:8a:98:a2:ac:0b:14:30:f0:5f:b3:c1:2c:70:
         32:09:dc:fd:8d:16:18:81:e6:91:4b:77:58:a2:31:05:74:83:
         1a:7b:79:1a:b9:b3:81:89:19:8d:b7:8e:54:e1:e7:91:c7:3f:
         3f:89:d1:86:09:c5:c8:9f:62:f2:c9:ff:90:14:7a:11:7f:61:
         e4:14:34:46:d6:2c:74:4b:d6:2d:09:c0:0a:0d:93:ef:7d:07:
         d7:16:fd:b7:3d:4e:5a:cf:b0:a9:39:b9:90:47:bb:b8:90:b5:
         36:7c:48:9b:46:b2:cc:cd:78:1d:bf:28:e1:14:74:2b:c4:b8:
         25:64:b3:6e:76:cc:93:f9:73:53:85:0c:df:68:c2:f6:17:58:
         c9:6f:40:c0:13:26:2e:b7:44:82:c1:55:69:d0:d1:94:38:64:
         83:49:f9:b4:15:bd:ed:51:12:0e:58:d9:d8:b7:db:62:8a:e1:
         22:17:7e:72:0e:25:db:cf:e6:b4:b9:f8:e2:3a:a2:cc:7d:34:
         ac:e6:2c:bd:2c:84:6e:f2:00:f7:2a:a8:4b:e5:d6:9f:81:3f:
         ec:c5:de:f8:ed:af:2a:d9:1a:ed:eb:16:10:a1:49:8e:3b:00:
         be:ee:ae:c2:0c:5a:fc:64:07:7e:66:4f:2a:13:80:a5:e8:1c:
         fc:40:06:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:31 2026 by rpki-client