Route Origin Authorization

$ rpki-client -vvf rpki.fengrui.link/repo/CowGrassland/0/326131343a373538333a663466343a3a2f34382d3438203d3e20323131353735.roa
File:                     326131343a373538333a663466343a3a2f34382d3438203d3e20323131353735.roa (raw, json)
Hash identifier:          CSzqmzXSSWw0WTzEnhI0KbqsBi/hsvFJ8ka6MZBucp0=
Subject key identifier:   69:49:A8:2B:00:9B:0D:E1:15:1C:C5:C5:AF:4B:15:B1:AA:FD:CA:C0
Certificate issuer:       /CN=B7CB5B0421020EB641294ABAA8F3FB43C3A05473
Certificate serial:       046AD67A50BB15B3D8E7B5E3FABA8082A25B7958
Authority key identifier: B7:CB:5B:04:21:02:0E:B6:41:29:4A:BA:A8:F3:FB:43:C3:A0:54:73
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B7CB5B0421020EB641294ABAA8F3FB43C3A05473.cer
Subject info access:      rsync://rpki.fengrui.link/repo/CowGrassland/0/326131343a373538333a663466343a3a2f34382d3438203d3e20323131353735.roa
Signing time:             Sat 30 Aug 2025 07:06:34 +0000
ROA not before:           Sat 30 Aug 2025 07:01:34 +0000
ROA not after:            Sat 29 Aug 2026 07:06:34 +0000
asID:                     211575
IP address blocks:        2a14:7583:f4f4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.fengrui.link/repo/CowGrassland/0/B7CB5B0421020EB641294ABAA8F3FB43C3A05473.crl
                          rsync://rpki.fengrui.link/repo/CowGrassland/0/B7CB5B0421020EB641294ABAA8F3FB43C3A05473.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B7CB5B0421020EB641294ABAA8F3FB43C3A05473.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 07:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:6a:d6:7a:50:bb:15:b3:d8:e7:b5:e3:fa:ba:80:82:a2:5b:79:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7CB5B0421020EB641294ABAA8F3FB43C3A05473
        Validity
            Not Before: Aug 30 07:01:34 2025 GMT
            Not After : Aug 29 07:06:34 2026 GMT
        Subject: CN=6949A82B009B0DE1151CC5C5AF4B15B1AAFDCAC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:28:79:45:bc:00:30:3d:d5:a1:8a:26:80:71:
                    04:41:e5:fc:7a:c6:4a:60:03:e4:7a:72:28:e2:64:
                    e0:4b:43:37:cb:bd:57:41:40:59:b5:0b:a5:bd:58:
                    a3:f7:e3:2e:1f:e1:89:c9:a0:ce:27:c3:96:42:00:
                    07:46:37:96:0f:07:af:d2:b9:23:1b:b5:1e:c5:c3:
                    54:fe:b2:f4:a0:83:4b:54:70:a4:7d:aa:b5:15:28:
                    00:bb:ac:e0:fc:34:b0:9a:e5:f9:a5:39:fb:ba:08:
                    c7:1b:68:b1:04:ab:e6:53:fa:a0:7c:62:82:8f:08:
                    c1:cc:8b:f7:12:56:d5:59:a9:93:0e:24:72:5a:1c:
                    a7:16:86:81:10:90:32:bf:ed:4c:c2:9a:cb:05:d1:
                    9c:10:97:0a:93:f6:2c:49:37:d8:29:be:dc:0f:19:
                    8e:0c:93:f9:f8:b6:b4:8a:07:37:8f:4a:6c:00:03:
                    04:bc:24:ca:a7:fb:86:c5:a9:4d:f4:e1:3e:42:fb:
                    fb:32:83:f4:94:2c:47:2e:7c:38:d1:9f:ce:c3:a2:
                    47:8b:d9:8d:1e:ae:2c:ce:bb:39:e4:c7:9f:ae:2e:
                    dd:83:c8:54:c8:c1:52:53:7f:54:3d:44:f2:ce:d0:
                    bc:62:c5:fa:e6:6b:5b:e9:ea:b2:a1:b2:51:16:3c:
                    f6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:49:A8:2B:00:9B:0D:E1:15:1C:C5:C5:AF:4B:15:B1:AA:FD:CA:C0
            X509v3 Authority Key Identifier:
                keyid:B7:CB:5B:04:21:02:0E:B6:41:29:4A:BA:A8:F3:FB:43:C3:A0:54:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.fengrui.link/repo/CowGrassland/0/B7CB5B0421020EB641294ABAA8F3FB43C3A05473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B7CB5B0421020EB641294ABAA8F3FB43C3A05473.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.fengrui.link/repo/CowGrassland/0/326131343a373538333a663466343a3a2f34382d3438203d3e20323131353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7583:f4f4::/48

    Signature Algorithm: sha256WithRSAEncryption
         c1:f3:81:fe:45:5e:cf:b6:a0:ba:4d:de:8f:5d:f5:d1:d6:2b:
         37:45:61:22:c7:ed:fc:47:ff:57:97:76:f2:33:5a:c5:34:81:
         ba:fa:63:50:d5:88:2d:08:30:20:7d:d3:4b:19:d1:23:e5:ff:
         1c:b7:55:b3:77:7e:a6:b9:15:b7:20:21:75:e7:28:3c:d4:09:
         ed:c5:e9:69:8a:da:04:62:6a:13:38:3c:74:b4:6f:19:e2:fd:
         1b:9a:dd:c4:6c:85:b4:51:b0:4d:44:74:dc:7e:ec:4b:4d:a5:
         7a:fa:ae:e4:68:e8:bc:9f:eb:55:4f:06:ac:92:ff:51:d7:f1:
         a7:12:31:5e:52:2c:42:97:af:af:b9:88:98:ca:84:bf:1d:4f:
         6f:94:99:d0:de:9e:af:51:07:c9:22:c5:d2:3c:cc:f0:b6:a4:
         25:4e:73:a4:e3:5a:cc:a1:82:72:40:bb:65:19:23:18:b4:a7:
         55:4c:cd:a3:bf:93:6c:15:a4:fd:a6:d5:ed:9c:b1:63:1c:70:
         d3:b0:ec:ed:6d:82:d8:b2:49:85:0f:b3:50:45:7a:83:69:8c:
         e8:f0:49:dc:d5:11:fb:9c:df:eb:62:7b:2e:91:4c:5a:d3:c2:
         34:11:65:1c:5e:d5:b9:85:32:66:73:cc:5c:35:ff:ba:34:e5:
         76:ca:69:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 14:40:19 2025 by rpki-client