Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121693257609248803/0/323430313a653863303a3a2f33322d3332203d3e203535393632.roa
File:                     323430313a653863303a3a2f33322d3332203d3e203535393632.roa (raw, json)
Hash identifier:          Uzqp2qS3WNfWamooG/PJu5GW6P5+HJ+DmabsgSMIPa0=
Subject key identifier:   62:87:0D:65:FA:F7:9B:21:D3:75:68:94:CF:38:34:8C:32:70:22:3F
Certificate issuer:       /CN=F354F915FD6A0C20C9E625C28D36C4BC552B6A04
Certificate serial:       1FDDF55F694EFF0428022C345DA251404ADEECCB
Authority key identifier: F3:54:F9:15:FD:6A:0C:20:C9:E6:25:C2:8D:36:C4:BC:55:2B:6A:04
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/323430313a653863303a3a2f33322d3332203d3e203535393632.roa
Signing time:             Tue 23 Jun 2026 06:53:45 +0000
ROA not before:           Tue 23 Jun 2026 06:48:45 +0000
ROA not after:            Tue 22 Jun 2027 06:53:45 +0000
asID:                     55962
IP address blocks:        2401:e8c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 10:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:dd:f5:5f:69:4e:ff:04:28:02:2c:34:5d:a2:51:40:4a:de:ec:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F354F915FD6A0C20C9E625C28D36C4BC552B6A04
        Validity
            Not Before: Jun 23 06:48:45 2026 GMT
            Not After : Jun 22 06:53:45 2027 GMT
        Subject: CN=62870D65FAF79B21D3756894CF38348C3270223F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:88:82:81:c1:af:10:d3:51:25:64:eb:e5:59:
                    3f:6e:be:2f:be:20:59:b5:fe:5f:e2:f7:66:e1:7a:
                    60:43:9f:8c:93:c4:7a:f5:82:b3:ed:1c:ef:c4:93:
                    ef:5e:d8:49:92:02:00:c0:97:5f:6a:11:ea:9d:be:
                    66:f0:47:a2:f9:04:fb:0c:4b:5f:1e:5a:b9:42:b3:
                    25:38:d1:b7:54:dd:77:12:f3:81:90:b0:a8:d3:f3:
                    c6:c4:82:05:58:06:59:0a:82:3e:f7:17:6a:90:15:
                    f8:23:17:8c:db:3c:63:90:c3:ac:e2:5d:e6:61:56:
                    0e:28:0f:ca:c4:6e:2b:5c:4e:fe:85:5b:4e:1c:bf:
                    e7:8a:c7:4d:78:19:e3:f9:c0:bb:33:18:f3:be:f5:
                    f4:1e:87:c8:bc:59:32:4c:36:30:de:cf:24:f5:0c:
                    1b:d1:4f:f7:6b:cf:84:cb:2c:01:a8:e1:6d:69:fe:
                    b4:83:4e:c5:4d:84:82:61:e7:73:b1:a0:90:4b:43:
                    b1:d8:88:9f:0d:8f:00:47:fd:6b:8c:94:92:86:a4:
                    a5:a7:5f:06:c3:c2:48:61:28:3f:28:82:5a:50:36:
                    da:fc:d6:0e:96:ba:38:de:fb:85:41:ef:6f:f0:ae:
                    fe:e2:a7:cb:2a:d0:55:5b:52:7c:31:82:64:29:b7:
                    89:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:87:0D:65:FA:F7:9B:21:D3:75:68:94:CF:38:34:8C:32:70:22:3F
            X509v3 Authority Key Identifier:
                keyid:F3:54:F9:15:FD:6A:0C:20:C9:E6:25:C2:8D:36:C4:BC:55:2B:6A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/323430313a653863303a3a2f33322d3332203d3e203535393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:e8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:3d:8b:ec:1b:95:f3:07:56:9a:6c:a9:68:b3:4b:ab:27:f7:
         13:1e:0b:1b:75:14:2d:4b:6b:2d:06:37:0b:4d:fc:b2:77:44:
         ab:27:cd:59:1e:8f:6f:06:88:11:75:00:69:5f:90:22:82:49:
         25:5f:f8:39:30:49:25:f4:9d:fc:c3:06:02:fb:57:6d:a5:08:
         2f:b1:fe:6c:98:2e:4c:f3:a1:5e:8e:e2:49:47:bc:fe:31:67:
         dd:dd:10:ad:c5:31:2d:dd:fa:d7:86:cb:00:f6:46:29:9b:bc:
         02:a6:3c:d5:27:39:09:20:bf:b9:17:d1:8f:65:f7:00:eb:db:
         44:22:c8:84:f9:81:6e:da:e3:74:92:e1:2e:5a:1a:ba:1d:63:
         71:a7:89:56:47:c2:ac:25:1e:ca:2d:b9:1f:33:8a:f0:59:e6:
         5b:0a:45:27:3f:57:fc:5b:75:73:df:3e:16:b1:5b:24:f1:de:
         a8:a5:65:2d:d1:89:a3:c7:5c:fe:fb:13:6c:c9:97:23:81:7d:
         ae:69:f6:5d:d6:f5:2d:8c:2c:1e:95:1f:ec:0a:e7:f7:2c:34:
         ea:f0:ba:00:f8:3b:6e:cc:c6:9f:36:14:e3:2c:3f:6c:75:c8:
         4c:37:af:af:c3:31:40:a4:20:dc:7b:9d:c5:eb:7b:37:e8:63:
         0a:04:a4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:27 2026 by rpki-client