Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3230362e302f32332d3233203d3e203435303930.roa
File:                     3135342e382e3230362e302f32332d3233203d3e203435303930.roa (raw, json)
Hash identifier:          6yP8Xt7daqxqV1ywWnbuJYw9J7LYyXPBb5jtCYKUjAk=
Subject key identifier:   62:32:B5:6F:74:54:33:C5:76:4C:9D:68:73:06:92:7F:BA:8B:D9:E8
Certificate issuer:       /CN=A91209740000/serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC
Certificate serial:       7B2D8383D342526648130200CE6C881FD64A40FF
Authority key identifier: 39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3230362e302f32332d3233203d3e203435303930.roa
Signing time:             Tue 30 Jun 2026 10:41:29 +0000
ROA not before:           Tue 30 Jun 2026 10:36:29 +0000
ROA not after:            Tue 29 Jun 2027 10:41:29 +0000
asID:                     45090
IP address blocks:        154.8.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Jul 2026 01:26:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:2d:83:83:d3:42:52:66:48:13:02:00:ce:6c:88:1f:d6:4a:40:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91209740000, serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC
        Validity
            Not Before: Jun 30 10:36:29 2026 GMT
            Not After : Jun 29 10:41:29 2027 GMT
        Subject: CN=6232B56F745433C5764C9D687306927FBA8BD9E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3c:d5:cf:5a:13:91:f5:5c:67:c1:e5:6b:fb:
                    26:11:22:6b:fa:53:bc:a3:b3:a9:93:b2:69:5a:6f:
                    6e:8a:5b:f7:c3:60:69:03:47:b1:ce:48:98:6f:f4:
                    f5:ad:4f:21:b3:94:a1:8e:cd:9d:88:35:e0:2a:da:
                    58:2b:09:42:24:11:4f:fe:df:45:68:59:7d:26:bd:
                    5c:77:38:14:1f:f3:e4:99:39:24:62:f4:14:fc:f6:
                    47:5e:54:92:b4:ee:76:7b:b3:ed:f6:8c:fe:1e:b0:
                    2e:8a:c4:0c:4a:ec:a3:93:8c:7e:bd:8e:e5:de:6a:
                    f8:3a:cc:b6:c2:be:9f:f0:cd:d5:bc:56:e4:bf:68:
                    b0:78:08:49:b4:3b:0c:84:1d:2a:a3:51:7e:47:b3:
                    f9:82:4d:24:6f:12:b6:a0:dc:6d:9d:20:88:67:c1:
                    de:54:4d:35:05:9a:a4:96:de:30:7c:d4:af:89:24:
                    6c:c4:54:0f:cc:41:9c:14:d1:42:07:e7:d3:66:11:
                    de:4d:70:8c:81:2a:ba:7c:1d:f5:e2:fe:80:c3:db:
                    0c:ea:00:0e:e0:78:8a:21:27:1f:6c:ea:a8:bf:0b:
                    c0:ca:da:7b:2d:c5:3d:65:8e:44:59:2e:a1:c7:0d:
                    d1:18:20:7b:b8:d7:52:7d:c5:df:24:47:b2:f1:86:
                    1e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:32:B5:6F:74:54:33:C5:76:4C:9D:68:73:06:92:7F:BA:8B:D9:E8
            X509v3 Authority Key Identifier:
                keyid:39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3135342e382e3230362e302f32332d3233203d3e203435303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.8.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:cc:8e:53:60:67:ee:0d:e0:1d:07:4c:eb:04:08:7c:45:63:
         d9:78:2b:40:30:48:2f:c7:fe:05:d7:cc:29:1e:69:55:15:10:
         4e:14:3c:b6:1e:01:b9:7d:24:1e:37:be:cf:67:b9:0f:3d:ff:
         6e:25:bd:d5:2e:41:e3:4e:46:b9:10:ea:10:c0:81:66:c1:82:
         b6:33:a1:be:04:cd:d1:b4:9a:98:22:ed:5b:c3:94:44:7b:bb:
         6c:ec:0c:fd:36:48:ec:dd:e4:8e:ad:47:3d:8b:39:a4:85:89:
         c1:ce:21:8a:f5:0c:a7:2e:d3:d1:cc:68:a1:d0:99:3a:42:1a:
         40:50:cd:4f:c5:28:c1:33:4c:7a:30:56:73:42:85:4a:d8:9a:
         0c:b3:76:05:6c:fd:a3:63:2f:48:85:32:b2:f4:65:90:48:83:
         94:e4:a6:9d:3f:1b:88:e1:13:d2:2a:4a:11:5b:9d:2d:99:86:
         5c:3d:bc:63:03:55:3f:44:2c:91:f6:a4:a5:7d:89:36:12:42:
         a9:67:bd:37:d3:3e:46:2f:af:1f:18:4f:c1:67:91:ca:0f:76:
         a4:82:b2:f2:af:19:ce:ab:9f:bb:61:ce:d0:e1:83:72:7c:46:
         30:e5:2f:6b:b0:a3:ee:96:71:17:c4:c7:e8:aa:19:4b:f9:b8:
         99:e3:49:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 06:08:38 2026 by rpki-client