Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121693257609248803/0/323430313a653863303a3a2f33322d3332203d3e203233373234.roa
File:                     323430313a653863303a3a2f33322d3332203d3e203233373234.roa (raw, json)
Hash identifier:          aD8ky+OQsNAahsNYEb7MXzkuCDy//KNW3bWvYGoKOEU=
Subject key identifier:   F1:4B:1E:A4:AB:E6:35:FF:F9:B5:46:0D:77:92:2A:18:B1:19:9B:E1
Certificate issuer:       /CN=F354F915FD6A0C20C9E625C28D36C4BC552B6A04
Certificate serial:       0C38075727ADA73303D3D85D223607554A902028
Authority key identifier: F3:54:F9:15:FD:6A:0C:20:C9:E6:25:C2:8D:36:C4:BC:55:2B:6A:04
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/323430313a653863303a3a2f33322d3332203d3e203233373234.roa
Signing time:             Tue 23 Jun 2026 06:53:45 +0000
ROA not before:           Tue 23 Jun 2026 06:48:45 +0000
ROA not after:            Tue 22 Jun 2027 06:53:45 +0000
asID:                     23724
IP address blocks:        2401:e8c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 10:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:38:07:57:27:ad:a7:33:03:d3:d8:5d:22:36:07:55:4a:90:20:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F354F915FD6A0C20C9E625C28D36C4BC552B6A04
        Validity
            Not Before: Jun 23 06:48:45 2026 GMT
            Not After : Jun 22 06:53:45 2027 GMT
        Subject: CN=F14B1EA4ABE635FFF9B5460D77922A18B1199BE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:df:01:f0:67:ec:19:55:4a:a3:4c:ca:ee:52:
                    f2:57:b3:9e:ab:8c:1e:98:18:17:41:11:0c:87:da:
                    c3:b1:4e:3a:d0:ce:50:2e:31:9c:84:47:09:b7:ae:
                    98:10:60:5a:df:38:0c:c1:75:a4:f4:7f:7d:21:88:
                    53:63:2e:1d:d4:c8:5e:99:1c:fa:d4:e1:51:3b:56:
                    c1:b5:a0:ca:ff:30:17:54:53:7b:3c:3a:9e:81:fc:
                    b4:70:8b:a0:db:6e:b7:54:d9:69:2c:0d:6d:8d:82:
                    20:13:ac:51:0d:d4:70:9f:c5:fa:ae:94:d2:37:10:
                    36:93:e7:04:95:1a:f1:73:51:e0:77:70:c6:12:43:
                    fb:94:89:97:03:da:56:3c:dc:29:de:de:c9:35:14:
                    7d:31:43:b1:e4:fc:b9:77:94:a2:2e:64:7d:96:8b:
                    25:3f:2c:fd:9b:00:7f:ea:c0:7e:c6:84:e8:d7:aa:
                    25:69:a1:d1:40:b2:16:82:ba:8d:5e:c1:95:39:e1:
                    89:ba:45:3f:32:01:37:86:8b:59:34:74:81:f4:89:
                    42:fb:6f:5d:72:ca:10:36:b9:a6:49:76:76:43:92:
                    f3:d0:03:9a:05:76:73:e6:f5:b0:08:9c:02:1f:02:
                    e0:75:f0:9d:49:b5:4d:d8:b8:a2:a0:11:db:c9:68:
                    8c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:4B:1E:A4:AB:E6:35:FF:F9:B5:46:0D:77:92:2A:18:B1:19:9B:E1
            X509v3 Authority Key Identifier:
                keyid:F3:54:F9:15:FD:6A:0C:20:C9:E6:25:C2:8D:36:C4:BC:55:2B:6A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/323430313a653863303a3a2f33322d3332203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:e8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:eb:2f:44:c2:fa:29:99:15:0d:97:77:47:a3:39:44:ce:6b:
         b5:9c:ec:41:ba:e2:a2:79:1e:0f:93:32:11:59:96:9a:3c:68:
         e9:d5:5b:d7:ac:a7:71:03:4b:18:dc:be:2d:e4:cb:b7:2b:87:
         79:8a:da:d7:ac:c3:7a:5e:87:bd:0b:81:7c:b8:4e:dd:42:f4:
         54:9c:6e:3e:bd:0a:7a:2c:da:de:9a:c7:fa:58:16:86:fe:30:
         94:1a:a9:25:54:79:20:7b:74:88:1d:be:c5:9e:17:58:1a:bb:
         ce:1e:0e:7b:e1:35:e3:48:b6:a6:62:9c:66:61:56:84:97:33:
         8e:77:58:71:77:fb:6b:39:0d:44:70:5a:69:bb:b5:a7:ab:67:
         a7:0c:2e:20:ac:9a:e4:96:75:e0:10:15:c7:78:c2:30:5f:cd:
         72:6c:04:4f:e3:44:c2:1c:b4:83:b6:01:aa:ed:ff:93:52:27:
         69:a6:41:74:b6:97:14:8a:fe:8a:b9:bf:2b:3e:ef:18:27:be:
         3c:b9:38:34:92:fb:6b:b6:13:d3:f9:bb:91:6c:ba:1b:8a:bb:
         ef:7a:ad:86:91:7b:88:22:e6:4a:35:0d:12:ab:c9:55:ed:aa:
         f6:52:d5:9b:ff:d7:bd:9b:e4:62:4e:6a:3c:c5:40:c8:de:74:
         1b:ab:ca:98
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIUDDgHVyetpzMD09hdIjYHVUqQICgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM1NEY5MTVGRDZBMEMyMEM5RTYyNUMyOEQzNkM0QkM1
NTJCNkEwNDAeFw0yNjA2MjMwNjQ4NDVaFw0yNzA2MjIwNjUzNDVaMDMxMTAvBgNV
BAMTKEYxNEIxRUE0QUJFNjM1RkZGOUI1NDYwRDc3OTIyQTE4QjExOTlCRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN3wHwZ+wZVUqjTMruUvJXs56r
jB6YGBdBEQyH2sOxTjrQzlAuMZyERwm3rpgQYFrfOAzBdaT0f30hiFNjLh3UyF6Z
HPrU4VE7VsG1oMr/MBdUU3s8Op6B/LRwi6DbbrdU2WksDW2NgiATrFEN1HCfxfqu
lNI3EDaT5wSVGvFzUeB3cMYSQ/uUiZcD2lY83Cne3sk1FH0xQ7Hk/Ll3lKIuZH2W
iyU/LP2bAH/qwH7GhOjXqiVpodFAshaCuo1ewZU54Ym6RT8yATeGi1k0dIH0iUL7
b11yyhA2uaZJdnZDkvPQA5oFdnPm9bAInAIfAuB18J1JtU3YuKKgEdvJaIyHAgMB
AAGjggISMIICDjAdBgNVHQ4EFgQU8UsepKvmNf/5tUYNd5IqGLEZm+EwHwYDVR0j
BBgwFoAU81T5Ff1qDCDJ5iXCjTbEvFUragQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy
MTY5MzI1NzYwOTI0ODgwMy8wL0YzNTRGOTE1RkQ2QTBDMjBDOUU2MjVDMjhEMzZD
NEJDNTUyQjZBMDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjM1NEY5MTVGRDZBMEMyMEM5RTYyNUMyOEQzNkM0QkM1NTJCNkEwNC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTIxNjkzMjU3NjA5MjQ4ODAzLzAvMzIzNDMwMzEzYTY1
Mzg2MzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzMzM3MzIzNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQB6MAwDQYJKoZIhvcNAQELBQADggEBACTrL0TC+imZFQ2Xd0ejOUTOa7Wc
7EG64qJ5Hg+TMhFZlpo8aOnVW9esp3EDSxjcvi3ky7crh3mK2tesw3peh70LgXy4
Tt1C9FScbj69Cnos2t6ax/pYFob+MJQaqSVUeSB7dIgdvsWeF1gau84eDnvhNeNI
tqZinGZhVoSXM453WHF3+2s5DURwWmm7taerZ6cMLiCsmuSWdeAQFcd4wjBfzXJs
BE/jRMIctIO2Aart/5NSJ2mmQXS2lxSK/oq5vys+7xgnvjy5ODSS+2u2E9P5u5Fs
uhuKu+96rYaRe4gi5ko1DRKryVXtqvZS1Zv/172b5GJOajzFQMjedBurypg=
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:16 2026 by rpki-client