Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1116910113051901977/2/323430323a663134303a666630303a3a2f34382d3438203d3e203233373234.roa
File:                     323430323a663134303a666630303a3a2f34382d3438203d3e203233373234.roa (raw, json)
Hash identifier:          9yVGqA3r0m6Cw9MsGwxxYMb5n5CK4oWFB+NiW+b0/ZQ=
Subject key identifier:   FD:AD:F4:2A:D9:AA:E9:C0:88:B5:6C:D3:97:38:68:2F:A1:BB:45:40
Certificate issuer:       /CN=823A9D24802AB10026095D92952BEC936120C9F0
Certificate serial:       655FB98A5208B551A4F0F440D6CBB899FA0BCA6D
Authority key identifier: 82:3A:9D:24:80:2A:B1:00:26:09:5D:92:95:2B:EC:93:61:20:C9:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/323430323a663134303a666630303a3a2f34382d3438203d3e203233373234.roa
Signing time:             Mon 15 Jun 2026 01:00:12 +0000
ROA not before:           Mon 15 Jun 2026 00:55:12 +0000
ROA not after:            Mon 14 Jun 2027 01:00:12 +0000
asID:                     23724
IP address blocks:        2402:f140:ff00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 08:14:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:5f:b9:8a:52:08:b5:51:a4:f0:f4:40:d6:cb:b8:99:fa:0b:ca:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=823A9D24802AB10026095D92952BEC936120C9F0
        Validity
            Not Before: Jun 15 00:55:12 2026 GMT
            Not After : Jun 14 01:00:12 2027 GMT
        Subject: CN=FDADF42AD9AAE9C088B56CD39738682FA1BB4540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cc:7b:04:48:86:7e:fa:0d:7c:7c:4e:c4:46:
                    37:6d:9d:1a:e1:e7:1c:92:df:57:14:30:a7:64:c9:
                    ae:4c:f7:d7:bb:d4:d5:c5:ef:a9:d2:58:28:cb:47:
                    ac:93:82:30:6f:fb:11:77:80:83:86:aa:01:d6:fe:
                    c4:bc:93:99:b7:ca:90:3a:cc:0b:17:fb:39:99:96:
                    90:20:85:a0:cb:d5:6f:81:e8:b4:4c:52:13:db:65:
                    14:cd:e1:3a:6c:eb:8f:7b:d8:eb:2d:10:3e:b9:b7:
                    53:27:c5:fb:15:d9:5f:93:42:eb:f9:27:b0:81:0e:
                    6d:b4:60:0f:88:46:0f:ad:70:da:f0:9a:2f:16:92:
                    d2:6f:0b:d3:8d:4a:2d:71:9d:30:1e:b9:2b:76:f4:
                    3e:83:3b:be:b1:e1:cf:61:59:a1:1d:16:00:fe:c9:
                    5a:af:02:30:a9:f6:df:09:53:de:e6:5a:b3:b3:5d:
                    f0:ad:0e:75:16:81:e2:6a:3a:a2:1c:1d:2a:54:c2:
                    a2:8d:6e:f7:49:d6:91:37:b4:ef:24:93:03:e4:02:
                    af:58:bb:44:ce:f5:92:b9:4f:f2:1a:75:06:97:d7:
                    94:03:d7:d5:a3:d4:da:03:f3:da:fb:fc:7d:d7:15:
                    be:c6:a9:82:05:36:32:73:86:c4:7d:1d:da:ac:96:
                    85:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:AD:F4:2A:D9:AA:E9:C0:88:B5:6C:D3:97:38:68:2F:A1:BB:45:40
            X509v3 Authority Key Identifier:
                keyid:82:3A:9D:24:80:2A:B1:00:26:09:5D:92:95:2B:EC:93:61:20:C9:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/323430323a663134303a666630303a3a2f34382d3438203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:f140:ff00::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:48:15:c7:ba:89:e0:df:71:11:bb:36:6a:f0:2e:15:17:07:
         84:31:cb:17:d2:c1:14:f3:ed:09:bc:8a:36:18:c3:5e:39:d3:
         b2:cd:88:6d:56:be:25:d3:c4:a1:02:0a:91:7b:b9:a1:29:42:
         e8:4c:f1:dc:ad:ba:cb:85:39:0a:c2:a7:eb:8b:25:1a:0f:5b:
         d5:0c:d4:67:a5:53:ba:76:11:6b:50:c9:59:ab:82:60:cc:7c:
         ed:e5:cc:5d:ee:8b:c3:e9:08:74:4d:3e:b6:70:6c:4e:96:da:
         09:88:cd:36:18:44:48:74:70:d1:e4:54:11:18:7f:b2:d4:3c:
         14:af:0a:78:b2:f8:77:71:fd:90:58:87:c8:86:25:53:c4:82:
         2b:76:db:2c:8f:13:68:a2:76:19:95:34:00:d8:fa:a9:72:be:
         f1:e3:dd:f4:c3:c8:e6:f1:d2:20:a1:67:fe:a7:45:c3:1b:9b:
         56:f0:d7:e5:9f:fd:26:60:a0:11:88:3f:04:cb:3c:c5:88:31:
         90:b6:a9:d8:11:dc:ea:84:e5:5f:db:0c:a7:36:c5:60:d8:2a:
         c2:8d:e2:7f:38:0b:f4:b1:ab:c8:45:8f:5f:cf:d0:a9:a7:fd:
         32:60:39:19:04:4a:9c:a2:ec:42:90:69:c4:b7:f8:9a:c5:a5:
         7b:06:9a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:40 2026 by rpki-client