Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121693257609248803/0/323430313a653863303a3a2f33322d3332203d3e20313331353433.roa
File:                     323430313a653863303a3a2f33322d3332203d3e20313331353433.roa (raw, json)
Hash identifier:          fhO8xv5YeuFXsTmWcf3g6eCB7geoHhnareGKLib1qKQ=
Subject key identifier:   0C:33:FB:D6:C5:44:06:8C:7D:90:20:C1:FB:5F:43:8A:66:10:B8:EE
Certificate issuer:       /CN=F354F915FD6A0C20C9E625C28D36C4BC552B6A04
Certificate serial:       039253CE8BCA90B777757FBF51D5CE3F3FE1794F
Authority key identifier: F3:54:F9:15:FD:6A:0C:20:C9:E6:25:C2:8D:36:C4:BC:55:2B:6A:04
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/323430313a653863303a3a2f33322d3332203d3e20313331353433.roa
Signing time:             Tue 23 Jun 2026 06:53:46 +0000
ROA not before:           Tue 23 Jun 2026 06:48:46 +0000
ROA not after:            Tue 22 Jun 2027 06:53:46 +0000
asID:                     131543
IP address blocks:        2401:e8c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 10:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:92:53:ce:8b:ca:90:b7:77:75:7f:bf:51:d5:ce:3f:3f:e1:79:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F354F915FD6A0C20C9E625C28D36C4BC552B6A04
        Validity
            Not Before: Jun 23 06:48:46 2026 GMT
            Not After : Jun 22 06:53:46 2027 GMT
        Subject: CN=0C33FBD6C544068C7D9020C1FB5F438A6610B8EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:39:98:6f:6b:ba:d4:8b:6a:29:25:71:c3:3f:
                    0c:1c:b0:7e:2c:45:31:b7:0e:2d:fa:48:e2:62:92:
                    ba:05:bd:08:00:bb:f8:c9:c2:d9:69:42:be:9e:07:
                    db:ef:e9:84:ba:3b:16:4b:a4:74:19:35:90:63:84:
                    f7:a4:a9:63:8c:f8:03:28:44:76:93:b8:34:53:d3:
                    e8:9a:a2:9f:44:91:52:bd:06:14:8e:0b:9a:18:3d:
                    0e:46:17:4c:fc:ea:c3:54:3f:a3:fd:23:cd:67:80:
                    c6:b5:f6:fa:25:d8:67:95:38:be:1a:ef:7b:50:01:
                    85:48:64:f6:6d:13:cb:64:42:a8:87:85:cc:95:eb:
                    e2:32:8a:07:80:4e:b1:3b:59:ed:a7:66:b8:92:2a:
                    1a:5d:9e:b5:88:9c:ab:dd:50:ab:4e:95:7c:44:0b:
                    33:ee:34:c5:d7:03:b2:10:3f:4d:29:28:f4:c1:f4:
                    ef:13:80:fb:56:0a:8b:c3:f5:b6:10:d4:aa:c8:32:
                    77:66:10:a6:de:08:8c:02:20:33:8c:15:f7:a4:d5:
                    53:4c:95:6d:3a:1b:69:81:e4:87:46:41:c2:af:09:
                    04:6e:01:f4:2c:41:8c:45:04:61:23:33:b0:73:f8:
                    66:cc:62:2e:48:90:16:f5:2b:41:fe:22:c5:08:ff:
                    dc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:33:FB:D6:C5:44:06:8C:7D:90:20:C1:FB:5F:43:8A:66:10:B8:EE
            X509v3 Authority Key Identifier:
                keyid:F3:54:F9:15:FD:6A:0C:20:C9:E6:25:C2:8D:36:C4:BC:55:2B:6A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/323430313a653863303a3a2f33322d3332203d3e20313331353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:e8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:aa:4e:6f:f4:37:ff:f1:54:a5:75:13:ba:eb:1a:31:4e:54:
         1b:9d:f0:5b:d8:29:54:fb:92:5c:6b:7b:47:d3:fb:cb:5a:62:
         09:c7:d3:c5:fc:b2:65:90:2e:72:fa:d2:6c:ad:2d:67:0f:42:
         90:c3:88:cd:83:c6:ac:70:4f:f7:41:bb:4e:cd:a0:a4:0a:48:
         15:d1:a9:62:d6:0c:34:08:f6:c8:b2:70:d1:11:80:9e:1f:a3:
         d3:11:09:07:60:40:4f:16:66:fb:81:fe:b5:65:4f:32:92:f3:
         f5:a2:43:c2:7b:bd:cf:d5:62:36:84:7b:a3:fe:cc:93:88:d0:
         79:a3:7a:6e:1d:45:18:53:65:04:52:1e:e9:9d:ec:01:13:e6:
         77:17:f3:bf:da:fe:61:83:e7:7f:c6:ea:51:6f:9e:0f:ff:8f:
         16:a2:5b:19:6d:dd:01:c3:2c:eb:dc:43:47:60:b4:01:6a:c1:
         1a:5c:13:3b:cc:4b:62:6b:f6:98:b4:3d:5a:0d:1a:cb:80:5e:
         54:ab:34:7a:e0:4f:53:4c:94:d6:f8:60:b9:26:a3:81:56:6f:
         ee:f6:95:2e:3b:51:b3:1e:96:5b:82:7a:91:c3:e9:a8:23:fc:
         fb:ff:95:81:3e:a4:4c:e4:5b:40:d6:32:f1:db:2d:b9:c6:04:
         7b:8a:f8:04
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUA5JTzovKkLd3dX+/UdXOPz/heU8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM1NEY5MTVGRDZBMEMyMEM5RTYyNUMyOEQzNkM0QkM1
NTJCNkEwNDAeFw0yNjA2MjMwNjQ4NDZaFw0yNzA2MjIwNjUzNDZaMDMxMTAvBgNV
BAMTKDBDMzNGQkQ2QzU0NDA2OEM3RDkwMjBDMUZCNUY0MzhBNjYxMEI4RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+OZhva7rUi2opJXHDPwwcsH4s
RTG3Di36SOJikroFvQgAu/jJwtlpQr6eB9vv6YS6OxZLpHQZNZBjhPekqWOM+AMo
RHaTuDRT0+iaop9EkVK9BhSOC5oYPQ5GF0z86sNUP6P9I81ngMa19vol2GeVOL4a
73tQAYVIZPZtE8tkQqiHhcyV6+IyigeATrE7We2nZriSKhpdnrWInKvdUKtOlXxE
CzPuNMXXA7IQP00pKPTB9O8TgPtWCovD9bYQ1KrIMndmEKbeCIwCIDOMFfek1VNM
lW06G2mB5IdGQcKvCQRuAfQsQYxFBGEjM7Bz+GbMYi5IkBb1K0H+IsUI/9ynAgMB
AAGjggIVMIICETAdBgNVHQ4EFgQUDDP71sVEBox9kCDB+19DimYQuO4wHwYDVR0j
BBgwFoAU81T5Ff1qDCDJ5iXCjTbEvFUragQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy
MTY5MzI1NzYwOTI0ODgwMy8wL0YzNTRGOTE1RkQ2QTBDMjBDOUU2MjVDMjhEMzZD
NEJDNTUyQjZBMDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjM1NEY5MTVGRDZBMEMyMEM5RTYyNUMyOEQzNkM0QkM1NTJCNkEwNC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEyMTY5MzI1NzYwOTI0ODgwMy8wLzMyMzQzMDMxM2E2
NTM4NjMzMDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMxMzMzMTM1MzQzMy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQC
AAIwBwMFACQB6MAwDQYJKoZIhvcNAQELBQADggEBAFyqTm/0N//xVKV1E7rrGjFO
VBud8FvYKVT7klxre0fT+8taYgnH08X8smWQLnL60mytLWcPQpDDiM2DxqxwT/dB
u07NoKQKSBXRqWLWDDQI9siycNERgJ4fo9MRCQdgQE8WZvuB/rVlTzKS8/WiQ8J7
vc/VYjaEe6P+zJOI0Hmjem4dRRhTZQRSHumd7AET5ncX87/a/mGD53/G6lFvng//
jxaiWxlt3QHDLOvcQ0dgtAFqwRpcEzvMS2Jr9pi0PVoNGsuAXlSrNHrgT1NMlNb4
YLkmo4FWb+72lS47UbMelluCepHD6agj/Pv/lYE+pEzkW0DWMvHbLbnGBHuK+AQ=
-----END CERTIFICATE-----
Generated at Tue Jul 14 21:57:54 2026 by rpki-client