Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123911365988253733/0/323430323a366538303a3a2f33322d3332203d3e20313339313030.roa
File:                     323430323a366538303a3a2f33322d3332203d3e20313339313030.roa (raw, json)
Hash identifier:          vwm0wFYdrshqVC19O/olyhuC+X7rA1oBdsrwCje/4V0=
Subject key identifier:   A2:5E:FB:35:F8:38:92:18:8E:50:92:53:91:8D:17:2B:79:14:F5:B2
Certificate issuer:       /CN=12BD80FB666E9FF3B78C5257CB80604CE466A620
Certificate serial:       183B794E9A05F952E2C4291230221ED40C41E8D4
Authority key identifier: 12:BD:80:FB:66:6E:9F:F3:B7:8C:52:57:CB:80:60:4C:E4:66:A6:20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/12BD80FB666E9FF3B78C5257CB80604CE466A620.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/323430323a366538303a3a2f33322d3332203d3e20313339313030.roa
Signing time:             Mon 29 Jun 2026 10:05:31 +0000
ROA not before:           Mon 29 Jun 2026 10:00:31 +0000
ROA not after:            Mon 28 Jun 2027 10:05:31 +0000
asID:                     139100
IP address blocks:        2402:6e80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/12BD80FB666E9FF3B78C5257CB80604CE466A620.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 12:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:3b:79:4e:9a:05:f9:52:e2:c4:29:12:30:22:1e:d4:0c:41:e8:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12BD80FB666E9FF3B78C5257CB80604CE466A620
        Validity
            Not Before: Jun 29 10:00:31 2026 GMT
            Not After : Jun 28 10:05:31 2027 GMT
        Subject: CN=A25EFB35F83892188E509253918D172B7914F5B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:76:13:65:3f:14:2f:ef:b2:af:db:9f:bd:10:
                    16:a5:f3:47:71:1c:5c:66:96:b7:82:e2:8d:4d:cc:
                    4d:13:51:05:86:3e:8d:d4:bc:8c:2c:23:41:4a:59:
                    78:ba:91:44:6d:44:89:22:ec:b3:e9:23:7a:6d:68:
                    41:32:6a:c3:a7:66:6a:83:97:97:73:c7:7e:f5:07:
                    b6:0d:ab:62:3d:b7:9a:4a:bb:ab:7a:d4:f2:44:5a:
                    cc:16:03:06:26:54:86:4b:39:af:96:a2:37:e5:f7:
                    57:42:e4:3c:0b:4f:9e:0d:b2:ad:f2:f7:bd:55:30:
                    10:a7:31:27:ba:63:cf:ed:62:14:b8:a4:75:3c:ec:
                    65:1d:66:09:62:ea:c5:79:2d:7b:b4:28:f8:23:b5:
                    87:5e:81:18:4d:2f:15:14:58:d2:7e:1a:3c:bd:f5:
                    44:36:62:3f:b9:cf:7b:cd:e7:e9:d0:c1:d7:8b:67:
                    99:bf:da:5f:03:54:c2:6a:7e:ca:0c:00:3f:65:75:
                    ae:c4:3a:d7:36:72:08:5f:8f:d1:67:e3:82:a9:da:
                    58:03:f4:d6:f8:42:ad:7f:e9:42:a0:6b:d1:4a:cc:
                    97:fd:f3:29:57:37:ff:59:fa:65:b0:34:32:8e:5a:
                    d4:19:48:67:c9:89:d5:ef:8f:56:2b:ab:a7:17:b8:
                    72:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:5E:FB:35:F8:38:92:18:8E:50:92:53:91:8D:17:2B:79:14:F5:B2
            X509v3 Authority Key Identifier:
                keyid:12:BD:80:FB:66:6E:9F:F3:B7:8C:52:57:CB:80:60:4C:E4:66:A6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/12BD80FB666E9FF3B78C5257CB80604CE466A620.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/323430323a366538303a3a2f33322d3332203d3e20313339313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:6e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:cc:df:17:3e:89:ad:92:78:e0:98:0f:68:b1:d2:cb:2d:18:
         ce:cc:37:26:5d:24:0c:e4:c7:72:24:2d:3b:48:1b:86:e8:9b:
         0a:46:83:fe:e4:bc:f2:c0:25:94:3c:68:e3:ca:98:df:1e:62:
         cc:74:83:b0:5c:cb:90:d5:21:81:66:15:48:1d:18:51:6a:95:
         64:75:38:15:14:0c:8c:b5:98:31:04:e9:21:ed:74:15:d3:b5:
         63:5e:ad:09:a5:af:b0:71:e6:3f:10:fc:c7:66:5c:2c:5a:8e:
         c2:ed:18:6d:68:41:47:a9:ef:5f:48:c2:a1:25:fe:8f:cf:59:
         6d:ed:76:5c:ff:b4:40:d9:94:63:53:fd:07:a9:f6:0c:b5:97:
         f4:2d:2c:8d:f0:a5:a8:bb:1a:3f:a3:5c:c4:7a:85:32:02:c9:
         8c:cc:2f:bb:72:e0:05:b8:77:c1:1e:99:89:dd:13:05:d8:65:
         f0:1a:f0:ad:8b:6a:4e:3a:45:40:f5:c1:07:ef:3f:7c:73:7b:
         85:5e:26:30:a7:4b:79:05:c0:5e:89:64:6d:a3:54:02:d6:25:
         82:42:f6:38:cd:a7:80:0a:d6:b5:9d:ba:aa:c5:11:74:02:79:
         fb:5e:f7:de:87:ff:70:ea:a8:ba:81:f5:0f:cb:9a:7b:fc:fc:
         e5:6c:ff:df
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:14 2026 by rpki-client