Route Origin Authorization

$ rpki-client -vvf rpki.fengrui.link/repo/CowGrassland/0/326131343a373538333a663466303a3a2f34382d3438203d3e20323134353334.roa
File:                     326131343a373538333a663466303a3a2f34382d3438203d3e20323134353334.roa (raw, json)
Hash identifier:          RQXfFOLs/P0nOOs3C1ZIm/JIq/mf76DtSAwwMkv8RJQ=
Subject key identifier:   59:45:35:7E:11:C9:50:19:F3:F2:6B:06:25:EF:7C:07:4A:44:30:C4
Certificate issuer:       /CN=B7CB5B0421020EB641294ABAA8F3FB43C3A05473
Certificate serial:       39173FE2E2D95691372BB13082CAA30F9A1EAE6C
Authority key identifier: B7:CB:5B:04:21:02:0E:B6:41:29:4A:BA:A8:F3:FB:43:C3:A0:54:73
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B7CB5B0421020EB641294ABAA8F3FB43C3A05473.cer
Subject info access:      rsync://rpki.fengrui.link/repo/CowGrassland/0/326131343a373538333a663466303a3a2f34382d3438203d3e20323134353334.roa
Signing time:             Sat 06 Sep 2025 08:23:39 +0000
ROA not before:           Sat 06 Sep 2025 08:18:39 +0000
ROA not after:            Sat 05 Sep 2026 08:23:39 +0000
asID:                     214534
IP address blocks:        2a14:7583:f4f0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.fengrui.link/repo/CowGrassland/0/B7CB5B0421020EB641294ABAA8F3FB43C3A05473.crl
                          rsync://rpki.fengrui.link/repo/CowGrassland/0/B7CB5B0421020EB641294ABAA8F3FB43C3A05473.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B7CB5B0421020EB641294ABAA8F3FB43C3A05473.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 07:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:17:3f:e2:e2:d9:56:91:37:2b:b1:30:82:ca:a3:0f:9a:1e:ae:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7CB5B0421020EB641294ABAA8F3FB43C3A05473
        Validity
            Not Before: Sep  6 08:18:39 2025 GMT
            Not After : Sep  5 08:23:39 2026 GMT
        Subject: CN=5945357E11C95019F3F26B0625EF7C074A4430C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9f:9c:39:7e:5b:ed:f1:6d:2b:d8:a8:8b:7a:
                    b1:67:a3:20:dd:2b:5d:e7:21:85:73:54:74:72:3c:
                    f4:6b:9a:a0:bc:9b:08:c7:1f:5a:74:b8:66:5e:52:
                    85:94:c2:55:23:28:ac:2f:2e:7f:50:9b:f8:f6:3d:
                    bb:06:3d:bd:2b:a3:da:5c:c8:cc:41:58:a3:34:e9:
                    0e:be:e5:b2:55:72:7e:30:7f:25:3a:1b:bb:d2:12:
                    f1:87:c1:39:a9:c2:98:f8:69:54:f7:4e:02:d1:4a:
                    a6:7f:aa:e3:14:42:c2:01:ea:19:cd:63:d0:d2:98:
                    61:b5:d2:93:e9:e5:e9:52:6e:33:0a:9f:c0:9d:10:
                    ae:a6:46:e0:2f:9c:ba:3d:a8:eb:d8:8d:66:8f:c3:
                    4c:b1:b2:0e:c0:5f:fc:ff:40:87:fa:e5:27:4e:4a:
                    4f:86:74:17:04:93:7c:f7:55:ce:46:21:76:0c:c6:
                    94:a5:14:55:56:00:14:22:82:9a:5f:68:3f:5f:e3:
                    0a:84:34:49:e3:1e:d5:b7:b8:a6:da:f9:8c:73:5b:
                    af:61:0b:43:51:3c:8c:7f:95:b8:a8:b7:31:4a:84:
                    00:b2:3f:0a:40:0d:20:2b:cd:18:ad:2a:96:34:e8:
                    ce:b0:5f:ff:2c:a9:a6:b1:79:93:ef:a2:7c:8c:21:
                    85:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:45:35:7E:11:C9:50:19:F3:F2:6B:06:25:EF:7C:07:4A:44:30:C4
            X509v3 Authority Key Identifier:
                keyid:B7:CB:5B:04:21:02:0E:B6:41:29:4A:BA:A8:F3:FB:43:C3:A0:54:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.fengrui.link/repo/CowGrassland/0/B7CB5B0421020EB641294ABAA8F3FB43C3A05473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B7CB5B0421020EB641294ABAA8F3FB43C3A05473.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.fengrui.link/repo/CowGrassland/0/326131343a373538333a663466303a3a2f34382d3438203d3e20323134353334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7583:f4f0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:7b:bc:57:28:3b:2b:db:a4:5c:dd:02:e1:4d:a8:76:c7:61:
         6a:10:59:8c:dc:3c:af:6d:3e:0d:70:3e:6c:d7:9c:39:05:11:
         12:e8:3b:fd:16:3f:c9:b5:87:53:79:84:0c:2f:32:a7:09:08:
         c9:1d:92:30:59:1b:7f:8f:36:0f:7d:d2:16:f3:da:71:f3:3a:
         53:6b:6d:e1:0e:21:15:24:1c:e8:b0:5e:ca:c2:ed:0d:f9:dd:
         67:b7:14:30:b5:64:18:3a:3c:54:ec:ea:0f:3e:8a:2f:41:05:
         a4:bb:04:2f:0d:fb:d8:2e:7e:e8:8f:81:0e:53:67:ea:e9:8e:
         14:43:32:51:b0:0e:a3:9f:c8:89:fe:22:c3:9d:68:92:c4:b5:
         46:b2:0b:ef:e3:ae:df:53:e3:6b:e4:f4:18:91:e6:6b:10:85:
         73:91:16:01:f1:dc:8e:7a:05:95:71:d4:f1:8e:3c:ab:76:a2:
         01:42:02:16:f6:17:5d:25:a9:1a:57:24:77:4b:b3:07:e9:9d:
         04:f4:93:42:c3:6c:1a:7d:e9:c6:50:29:77:fe:0c:a8:ea:96:
         f3:57:f8:5f:28:a4:50:c9:9c:16:0a:9a:3a:4a:4a:0d:d4:92:
         2e:fd:17:f5:24:5b:2d:25:f3:e2:16:51:3f:58:34:cf:77:35:
         f5:09:51:11
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUORc/4uLZVpE3K7EwgsqjD5oermwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdDQjVCMDQyMTAyMEVCNjQxMjk0QUJBQThGM0ZCNDND
M0EwNTQ3MzAeFw0yNTA5MDYwODE4MzlaFw0yNjA5MDUwODIzMzlaMDMxMTAvBgNV
BAMTKDU5NDUzNTdFMTFDOTUwMTlGM0YyNkIwNjI1RUY3QzA3NEE0NDMwQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwn5w5flvt8W0r2KiLerFnoyDd
K13nIYVzVHRyPPRrmqC8mwjHH1p0uGZeUoWUwlUjKKwvLn9Qm/j2PbsGPb0ro9pc
yMxBWKM06Q6+5bJVcn4wfyU6G7vSEvGHwTmpwpj4aVT3TgLRSqZ/quMUQsIB6hnN
Y9DSmGG10pPp5elSbjMKn8CdEK6mRuAvnLo9qOvYjWaPw0yxsg7AX/z/QIf65SdO
Sk+GdBcEk3z3Vc5GIXYMxpSlFFVWABQigppfaD9f4wqENEnjHtW3uKba+YxzW69h
C0NRPIx/lbiotzFKhACyPwpADSArzRitKpY06M6wX/8sqaaxeZPvonyMIYVzAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUWUU1fhHJUBnz8msGJe98B0pEMMQwHwYDVR0j
BBgwFoAUt8tbBCECDrZBKUq6qPP7Q8OgVHMwDgYDVR0PAQH/BAQDAgeAMGsGA1Ud
HwRkMGIwYKBeoFyGWnJzeW5jOi8vcnBraS5mZW5ncnVpLmxpbmsvcmVwby9Db3dH
cmFzc2xhbmQvMC9CN0NCNUIwNDIxMDIwRUI2NDEyOTRBQkFBOEYzRkI0M0MzQTA1
NDczLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzov
L3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk4MWY5NzgyLTg5
OGUtNGI4My05NWU2LTRmZjRhYjc1YzlkYy8yL0I3Q0I1QjA0MjEwMjBFQjY0MTI5
NEFCQUE4RjNGQjQzQzNBMDU0NzMuY2VyMIGQBggrBgEFBQcBCwSBgzCBgDB+Bggr
BgEFBQcwC4ZycnN5bmM6Ly9ycGtpLmZlbmdydWkubGluay9yZXBvL0Nvd0dyYXNz
bGFuZC8wLzMyNjEzMTM0M2EzNzM1MzgzMzNhNjYzNDY2MzAzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzMjMxMzQzNTMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqFHWD9PAwDQYJKoZI
hvcNAQELBQADggEBAKJ7vFcoOyvbpFzdAuFNqHbHYWoQWYzcPK9tPg1wPmzXnDkF
ERLoO/0WP8m1h1N5hAwvMqcJCMkdkjBZG3+PNg990hbz2nHzOlNrbeEOIRUkHOiw
XsrC7Q353We3FDC1ZBg6PFTs6g8+ii9BBaS7BC8N+9gufuiPgQ5TZ+rpjhRDMlGw
DqOfyIn+IsOdaJLEtUayC+/jrt9T42vk9BiR5msQhXORFgHx3I56BZVx1PGOPKt2
ogFCAhb2F10lqRpXJHdLswfpnQT0k0LDbBp96cZQKXf+DKjqlvNX+F8opFDJnBYK
mjpKSg3Uki79F/UkWy0l8+IWUT9YNM93NfUJURE=
-----END CERTIFICATE-----
Generated at Tue Sep 9 14:18:15 2025 by rpki-client