Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1116910113051901977/2/323430323a663134303a666630343a3a2f34382d3438203d3e203538353633.roa
File:                     323430323a663134303a666630343a3a2f34382d3438203d3e203538353633.roa (raw, json)
Hash identifier:          RDrRnpeXL02LfYBtu1Rzk0qsfCVRDCWrAsnr4P79d78=
Subject key identifier:   1B:6B:F8:3D:0C:11:D6:62:25:DB:59:89:EF:A7:12:8A:DE:80:11:0B
Certificate issuer:       /CN=823A9D24802AB10026095D92952BEC936120C9F0
Certificate serial:       425212E93713A1436D2F6FCE1B02A0E49A17D31C
Authority key identifier: 82:3A:9D:24:80:2A:B1:00:26:09:5D:92:95:2B:EC:93:61:20:C9:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/323430323a663134303a666630343a3a2f34382d3438203d3e203538353633.roa
Signing time:             Thu 18 Jun 2026 01:19:34 +0000
ROA not before:           Thu 18 Jun 2026 01:14:34 +0000
ROA not after:            Thu 17 Jun 2027 01:19:34 +0000
asID:                     58563
IP address blocks:        2402:f140:ff04::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 08:14:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:52:12:e9:37:13:a1:43:6d:2f:6f:ce:1b:02:a0:e4:9a:17:d3:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=823A9D24802AB10026095D92952BEC936120C9F0
        Validity
            Not Before: Jun 18 01:14:34 2026 GMT
            Not After : Jun 17 01:19:34 2027 GMT
        Subject: CN=1B6BF83D0C11D66225DB5989EFA7128ADE80110B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:af:47:bd:b4:99:79:68:6e:65:b6:b9:f8:31:
                    62:1b:d5:b1:04:84:20:d6:6c:b6:e8:29:b9:6c:9b:
                    12:2b:bd:dd:cd:2d:b5:33:3e:41:c5:55:85:63:e4:
                    61:31:86:b4:64:ea:bb:71:d5:38:ba:22:7e:83:73:
                    d0:9f:1d:fd:6d:de:95:dd:f9:3d:2b:cb:7c:72:e2:
                    72:85:b0:26:17:0e:c0:cc:4d:61:09:bb:e6:d5:93:
                    20:29:51:42:7d:21:80:65:76:c3:1a:02:cc:c4:4c:
                    1c:26:b9:f6:72:7e:5c:86:21:7c:6b:a4:d5:80:35:
                    97:c3:63:49:12:81:7c:44:4a:00:12:7a:c2:71:03:
                    55:a2:3b:e2:82:81:8e:ec:91:ff:13:e5:c1:5e:5f:
                    6e:fd:31:cf:bb:77:9c:a6:e9:5e:58:5d:a7:19:61:
                    a4:18:cf:07:2c:ed:25:90:d7:1a:db:77:bc:da:77:
                    19:86:b2:5b:a8:5b:d9:6e:6f:0f:ff:0b:a4:6c:21:
                    ff:2c:09:97:09:73:d0:ce:9e:c5:f7:cb:38:c6:2d:
                    96:cd:c3:a2:7d:41:a2:a5:8f:6c:ce:7c:09:44:d0:
                    22:6a:35:aa:df:17:87:18:d7:f3:9a:54:d0:b3:1f:
                    3f:74:0c:bd:b1:e0:80:00:91:cf:f6:a2:c0:98:c8:
                    15:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6B:F8:3D:0C:11:D6:62:25:DB:59:89:EF:A7:12:8A:DE:80:11:0B
            X509v3 Authority Key Identifier:
                keyid:82:3A:9D:24:80:2A:B1:00:26:09:5D:92:95:2B:EC:93:61:20:C9:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/323430323a663134303a666630343a3a2f34382d3438203d3e203538353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:f140:ff04::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:e4:a7:e2:87:31:61:e3:ec:96:08:a0:a0:31:bb:f8:f1:e1:
         71:b3:be:e0:b0:62:ff:c5:f6:d5:4e:06:d1:6a:26:3a:14:5a:
         60:a5:4a:f0:16:ce:67:32:29:21:23:61:23:e3:94:eb:3f:8c:
         02:48:ff:1c:3b:8d:83:9f:82:da:e6:11:d6:92:23:f1:90:44:
         f0:7a:79:bf:2a:79:d2:c6:27:8c:f6:2c:d7:b9:19:45:d4:11:
         aa:74:b2:d8:ed:e7:01:c1:7e:c4:5a:99:b6:e0:cb:bf:8d:7b:
         88:f1:59:da:28:17:68:cb:bc:df:e9:25:6c:14:09:0c:38:d6:
         9e:03:0e:48:85:c5:ef:11:71:41:cb:9d:1d:6f:4c:e2:2d:6e:
         c5:12:92:9b:53:07:be:d3:e0:f1:9c:fd:0e:24:5d:a9:66:ca:
         3b:c8:b0:2c:b2:9e:0b:85:b2:2b:8a:e3:72:98:2e:29:7e:0c:
         22:0c:c9:2d:53:f7:5d:cc:d1:af:29:3e:8a:c1:2b:72:b9:2a:
         31:48:11:f6:d5:61:6b:da:61:13:ce:2e:68:dc:b5:8b:83:30:
         7b:b1:6b:56:08:ba:fe:c0:c3:fb:cd:39:37:bb:9e:f6:89:1f:
         ee:f4:60:10:2b:2a:89:21:71:04:d1:36:4c:a6:b4:a2:4c:29:
         4d:b1:7a:45
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUQlIS6TcToUNtL2/OGwKg5JoX0xwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODIzQTlEMjQ4MDJBQjEwMDI2MDk1RDkyOTUyQkVDOTM2
MTIwQzlGMDAeFw0yNjA2MTgwMTE0MzRaFw0yNzA2MTcwMTE5MzRaMDMxMTAvBgNV
BAMTKDFCNkJGODNEMEMxMUQ2NjIyNURCNTk4OUVGQTcxMjhBREU4MDExMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRr0e9tJl5aG5ltrn4MWIb1bEE
hCDWbLboKblsmxIrvd3NLbUzPkHFVYVj5GExhrRk6rtx1Ti6In6Dc9CfHf1t3pXd
+T0ry3xy4nKFsCYXDsDMTWEJu+bVkyApUUJ9IYBldsMaAszETBwmufZyflyGIXxr
pNWANZfDY0kSgXxESgASesJxA1WiO+KCgY7skf8T5cFeX279Mc+7d5ym6V5YXacZ
YaQYzwcs7SWQ1xrbd7zadxmGsluoW9lubw//C6RsIf8sCZcJc9DOnsX3yzjGLZbN
w6J9QaKlj2zOfAlE0CJqNarfF4cY1/OaVNCzHz90DL2x4IAAkc/2osCYyBWTAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQUG2v4PQwR1mIl21mJ76cSit6AEQswHwYDVR0j
BBgwFoAUgjqdJIAqsQAmCV2SlSvsk2EgyfAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
NjkxMDExMzA1MTkwMTk3Ny8yLzgyM0E5RDI0ODAyQUIxMDAyNjA5NUQ5Mjk1MkJF
QzkzNjEyMEM5RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvODIzQTlEMjQ4MDJBQjEwMDI2MDk1RDkyOTUyQkVDOTM2MTIwQzlGMC5jZXIw
gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMTE2OTEwMTEzMDUxOTAxOTc3LzIvMzIzNDMwMzIz
YTY2MzEzNDMwM2E2NjY2MzAzNDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1Mzgz
NTM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB
Af8EEzARMA8EAgACMAkDBwAkAvFA/wQwDQYJKoZIhvcNAQELBQADggEBACHkp+KH
MWHj7JYIoKAxu/jx4XGzvuCwYv/F9tVOBtFqJjoUWmClSvAWzmcyKSEjYSPjlOs/
jAJI/xw7jYOfgtrmEdaSI/GQRPB6eb8qedLGJ4z2LNe5GUXUEap0stjt5wHBfsRa
mbbgy7+Ne4jxWdooF2jLvN/pJWwUCQw41p4DDkiFxe8RcUHLnR1vTOItbsUSkptT
B77T4PGc/Q4kXalmyjvIsCyynguFsiuK43KYLil+DCIMyS1T913M0a8pPorBK3K5
KjFIEfbVYWvaYRPOLmjctYuDMHuxa1YIuv7Aw/vNOTe7nvaJH+70YBArKokhcQTR
NkymtKJMKU2xekU=
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:19 2026 by rpki-client