Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/XW6zGMf3iLRhJNl634r4d2CjYrY.roa
File:                     XW6zGMf3iLRhJNl634r4d2CjYrY.roa (raw, json)
Hash identifier:          KUckmyPxeQOvvIy/vdJpM8f/7JHpPvBtpkWqEtro9go=
Subject key identifier:   5D:6E:B3:18:C7:F7:88:B4:61:24:D9:7A:DF:8A:F8:77:60:A3:62:B6
Certificate issuer:       /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial:       AC
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/XW6zGMf3iLRhJNl634r4d2CjYrY.roa
Signing time:             Fri 06 Jun 2025 02:21:23 +0000
ROA not before:           Fri 06 Jun 2025 02:21:23 +0000
ROA not after:            Wed 27 May 2026 07:38:41 +0000
asID:                     56042
IP address blocks:        240a:40c0:e010::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 08:09:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
        Validity
            Not Before: Jun  6 02:21:23 2025 GMT
            Not After : May 27 07:38:41 2026 GMT
        Subject: CN=5D6EB318C7F788B46124D97ADF8AF87760A362B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1c:b6:ec:21:68:9e:98:20:04:9d:d7:20:27:
                    7f:63:a2:67:a3:0e:f8:59:e4:af:26:b0:dd:a7:22:
                    f7:e1:94:8e:b9:c2:5b:1b:47:2a:fa:a2:5a:fd:1d:
                    8c:64:dc:ff:8e:7f:98:dd:fe:7c:b5:9c:6f:ed:fb:
                    60:6c:a8:31:67:3a:44:00:64:f5:2b:66:8b:51:6c:
                    39:b9:35:1b:0a:a1:d9:86:88:39:12:23:bc:20:eb:
                    bb:48:c6:33:22:de:2b:a1:8a:6d:5f:bb:17:eb:bf:
                    dc:33:93:fa:1a:d7:16:0b:cc:e3:bf:46:6f:a5:a5:
                    de:f9:46:89:49:0e:1d:fd:66:61:7d:46:29:a8:b9:
                    ea:05:e7:3b:84:da:a0:a6:c9:70:1b:c4:eb:cf:d1:
                    98:c9:10:82:f5:33:06:4e:a9:70:3b:99:1f:ce:fa:
                    b0:64:e5:7c:74:86:42:a7:27:39:e9:bb:15:3b:25:
                    4b:9f:67:26:0d:11:a0:a7:21:a3:7b:66:63:94:bc:
                    af:40:e4:f5:a5:3b:23:07:36:27:1b:f8:c8:c9:db:
                    81:11:25:79:a4:51:e4:aa:73:bc:3e:7b:62:81:be:
                    53:c3:b0:e7:68:71:e5:57:dc:cf:0c:60:71:eb:e2:
                    29:b8:c1:fa:cf:d7:c1:d6:06:ec:43:68:af:38:d6:
                    ef:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6E:B3:18:C7:F7:88:B4:61:24:D9:7A:DF:8A:F8:77:60:A3:62:B6
            X509v3 Authority Key Identifier:
                keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/XW6zGMf3iLRhJNl634r4d2CjYrY.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:40c0:e010::/44

    Signature Algorithm: sha256WithRSAEncryption
         ae:37:6c:83:48:d2:b4:de:82:f2:fb:38:a9:dd:67:24:ed:f6:
         0c:7f:30:5a:db:5a:02:6c:4b:4a:ed:f9:af:6c:90:dc:94:9f:
         70:0c:b9:b8:9d:99:04:f0:11:d3:e6:0c:96:ac:c5:c6:82:0f:
         1b:1f:4d:38:f5:e6:18:b1:95:56:3f:cf:6b:47:19:d8:bf:7d:
         94:18:13:49:94:5e:2e:fd:97:61:62:eb:98:4d:0b:1c:5d:94:
         12:c6:7e:20:53:db:31:a5:ef:aa:a4:6a:fb:94:b3:1a:6a:72:
         0d:8f:22:92:eb:76:a4:4f:90:37:40:26:8d:70:a6:34:fd:9b:
         66:06:02:cc:af:61:c2:6d:49:e1:9f:44:a6:7d:aa:f8:c7:a0:
         e3:3e:7c:33:25:f0:af:86:b1:9e:ce:0e:b4:88:bb:df:79:89:
         61:5e:f0:68:e0:a4:ed:26:a9:3f:84:59:1c:64:09:9e:8d:87:
         20:a3:12:b7:99:b9:34:ba:68:a7:78:45:20:52:0c:92:0a:1c:
         12:5f:89:2b:5c:ef:f3:34:98:f9:d2:c6:7f:f5:f3:d6:ff:e4:
         a1:f8:ad:f7:3d:50:a6:81:8a:a5:76:5d:53:87:71:f0:70:f3:
         a6:9f:e1:a0:a6:4c:23:63:ea:eb:8b:85:81:5a:85:8a:da:79:
         2c:f9:d3:97
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 12 07:50:36 2025 by rpki-client