Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/uv_PH8M9CTxlO3e5Nu64mp-pogg.roa
File:                     uv_PH8M9CTxlO3e5Nu64mp-pogg.roa (raw, json)
Hash identifier:          3Ee56WLJoVLahsYVKCLaJRfZn7f7k4INIQEhKIKbY4s=
Subject key identifier:   BA:FF:CF:1F:C3:3D:09:3C:65:3B:77:B9:36:EE:B8:9A:9F:A9:A2:08
Certificate issuer:       /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial:       C1
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/uv_PH8M9CTxlO3e5Nu64mp-pogg.roa
Signing time:             Fri 06 Jun 2025 02:29:17 +0000
ROA not before:           Fri 06 Jun 2025 02:29:17 +0000
ROA not after:            Wed 27 May 2026 07:38:41 +0000
asID:                     56047
IP address blocks:        240a:40c2:a010::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Jun 2025 17:39:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
        Validity
            Not Before: Jun  6 02:29:17 2025 GMT
            Not After : May 27 07:38:41 2026 GMT
        Subject: CN=BAFFCF1FC33D093C653B77B936EEB89A9FA9A208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:59:57:2e:73:de:8d:c7:32:af:35:b4:a2:bb:
                    19:79:e2:e6:16:30:fd:8b:c9:90:67:af:85:b0:59:
                    07:18:cf:4b:43:0e:28:39:d3:c5:b8:7b:3c:7c:b6:
                    7a:76:c5:0e:04:f3:12:a7:8b:75:2b:e3:09:ca:d6:
                    bf:61:ba:30:b6:b1:cb:a6:c7:6a:19:cd:cd:66:0e:
                    74:a1:4f:2f:ee:28:7b:46:1c:87:3b:08:3a:a0:bf:
                    34:3c:9d:ee:63:77:10:ea:41:05:01:b2:3e:05:2c:
                    11:96:b0:8f:e7:82:71:58:7f:78:3c:a0:c5:a1:4c:
                    f2:68:86:81:15:1b:99:cc:69:ba:b9:c6:fe:37:6f:
                    35:18:a0:4d:4c:8f:c6:60:1f:7e:a6:1a:ab:82:a0:
                    b0:29:51:58:a7:ab:29:a9:60:89:8c:81:7c:b0:cb:
                    2f:6a:cb:f3:cd:37:d9:cb:da:80:8f:ae:49:f2:38:
                    28:da:0d:e3:a9:2f:e6:4f:da:67:5d:99:15:6f:cd:
                    43:8e:29:6b:52:01:b8:bf:7e:c7:1b:84:47:1d:da:
                    e7:8d:31:35:91:6c:f1:ad:72:08:78:27:f7:79:cf:
                    22:0c:47:b3:73:a6:01:67:a3:71:46:4f:dc:a1:79:
                    07:42:9c:06:7e:80:2c:78:33:15:86:41:dc:a8:61:
                    b5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FF:CF:1F:C3:3D:09:3C:65:3B:77:B9:36:EE:B8:9A:9F:A9:A2:08
            X509v3 Authority Key Identifier:
                keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/uv_PH8M9CTxlO3e5Nu64mp-pogg.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:40c2:a010::/44

    Signature Algorithm: sha256WithRSAEncryption
         7d:84:3f:da:03:d0:3b:0c:f8:57:d8:9c:9f:71:05:86:76:d9:
         2d:aa:5e:1e:f6:1c:20:0b:9c:a7:84:b9:35:6f:93:d3:d9:d6:
         b6:c4:b6:0c:16:eb:3a:cf:ab:e3:d6:0e:53:ed:b2:d9:3e:50:
         3a:65:ca:1c:25:d2:e3:68:a3:2d:a5:dc:68:9c:32:eb:81:52:
         6c:18:8a:a0:61:e9:f2:eb:1a:94:c8:54:96:64:ea:9b:cd:2c:
         71:f8:32:6d:e8:63:b2:c7:f2:45:2c:c0:ec:1d:04:76:20:26:
         c6:a0:98:07:ef:b3:48:02:98:07:78:c8:ee:e4:3c:39:d3:b4:
         25:80:9d:f2:e9:e2:ee:d6:a3:e1:83:d6:78:6a:93:0e:04:69:
         62:d4:ad:f7:b4:2c:b2:7e:55:c6:61:b8:05:93:65:e3:b7:98:
         aa:6e:59:6f:55:76:c9:31:b2:54:82:e7:b3:5f:3f:53:15:8d:
         dd:80:7e:ff:8c:2e:94:d2:9e:4b:63:4b:6c:5b:36:6e:7a:c5:
         b9:6f:18:5f:fa:d8:54:5c:60:8e:91:8d:ce:da:ee:11:cb:9b:
         d1:fa:87:ee:2b:02:7f:b4:9e:d8:04:34:4f:93:03:7c:2b:fb:
         15:21:89:c8:d4:a4:dc:ec:0a:4c:37:66:07:a3:11:c7:7f:19:
         83:59:0e:36
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 13 16:19:01 2025 by rpki-client