Route Origin Authorization

$ rpki-client -vvf rpki.fengrui.link/repo/CowGrassland/0/326131343a373538333a663466343a3a2f34382d3438203d3e203331383938.roa
File:                     326131343a373538333a663466343a3a2f34382d3438203d3e203331383938.roa (raw, json)
Hash identifier:          V/l4i9zm+7RNztN3kaRsdWvtz06RMECmu/rIg/q7cZE=
Subject key identifier:   23:6C:A8:8E:E6:63:AE:C2:69:D1:52:DA:91:B1:50:87:FA:73:92:D6
Certificate issuer:       /CN=B7CB5B0421020EB641294ABAA8F3FB43C3A05473
Certificate serial:       396BA0308850B80F1C58A6CC8477E51D890FB35F
Authority key identifier: B7:CB:5B:04:21:02:0E:B6:41:29:4A:BA:A8:F3:FB:43:C3:A0:54:73
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B7CB5B0421020EB641294ABAA8F3FB43C3A05473.cer
Subject info access:      rsync://rpki.fengrui.link/repo/CowGrassland/0/326131343a373538333a663466343a3a2f34382d3438203d3e203331383938.roa
Signing time:             Mon 01 Sep 2025 12:37:51 +0000
ROA not before:           Mon 01 Sep 2025 12:32:51 +0000
ROA not after:            Mon 31 Aug 2026 12:37:51 +0000
asID:                     31898
IP address blocks:        2a14:7583:f4f4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.fengrui.link/repo/CowGrassland/0/B7CB5B0421020EB641294ABAA8F3FB43C3A05473.crl
                          rsync://rpki.fengrui.link/repo/CowGrassland/0/B7CB5B0421020EB641294ABAA8F3FB43C3A05473.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B7CB5B0421020EB641294ABAA8F3FB43C3A05473.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 07:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:6b:a0:30:88:50:b8:0f:1c:58:a6:cc:84:77:e5:1d:89:0f:b3:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7CB5B0421020EB641294ABAA8F3FB43C3A05473
        Validity
            Not Before: Sep  1 12:32:51 2025 GMT
            Not After : Aug 31 12:37:51 2026 GMT
        Subject: CN=236CA88EE663AEC269D152DA91B15087FA7392D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e3:21:81:4e:1d:c6:ed:22:8b:21:da:11:4b:
                    1c:a4:46:f2:b1:86:d1:ad:60:cb:65:39:83:a2:74:
                    0e:b4:a7:39:68:e1:51:81:ec:a7:15:b1:51:af:fa:
                    4a:29:80:1c:e1:fa:40:06:88:c9:f1:c7:c6:3b:b6:
                    c8:32:3e:6c:83:0d:84:81:f3:66:cc:b7:55:41:9f:
                    ff:a1:2d:e5:af:3f:9a:e1:f1:f1:f8:59:3c:d1:0a:
                    43:a4:72:2e:55:04:2c:8e:87:6d:16:83:52:5e:c1:
                    a4:18:30:92:42:18:05:c8:57:85:25:9b:82:96:ce:
                    f5:75:34:9b:ec:e2:20:b8:74:cd:8d:4b:00:ae:a5:
                    6f:31:77:ac:cb:6a:12:99:64:5e:19:41:b5:bd:65:
                    4a:34:51:32:f3:40:71:ae:25:de:44:cb:48:75:2d:
                    81:0c:84:50:bf:58:29:e6:b1:3f:17:b4:51:2d:72:
                    61:93:71:a6:68:d2:5a:79:14:74:5f:c1:00:09:9e:
                    07:f6:69:58:7d:36:49:14:2e:b4:7f:28:0b:71:ce:
                    b7:26:1e:07:9d:ec:8e:65:c3:97:c4:9b:27:e9:6e:
                    bc:77:86:ff:81:74:7f:84:87:63:1c:a0:25:ad:61:
                    d8:3d:f4:68:68:cc:e9:12:68:25:bf:20:99:de:78:
                    21:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6C:A8:8E:E6:63:AE:C2:69:D1:52:DA:91:B1:50:87:FA:73:92:D6
            X509v3 Authority Key Identifier:
                keyid:B7:CB:5B:04:21:02:0E:B6:41:29:4A:BA:A8:F3:FB:43:C3:A0:54:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.fengrui.link/repo/CowGrassland/0/B7CB5B0421020EB641294ABAA8F3FB43C3A05473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B7CB5B0421020EB641294ABAA8F3FB43C3A05473.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.fengrui.link/repo/CowGrassland/0/326131343a373538333a663466343a3a2f34382d3438203d3e203331383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7583:f4f4::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:86:73:39:8b:38:8f:d1:0e:27:e5:16:ae:92:59:4d:10:e8:
         da:e8:c4:78:0f:62:65:f6:a6:e0:20:6e:3e:08:7e:4c:d4:5d:
         2e:92:74:e4:45:eb:14:ff:cf:44:fe:cf:12:54:68:99:71:21:
         e0:50:6a:a1:5b:1b:eb:7d:5c:c4:65:06:a0:ba:48:85:0e:fb:
         ac:1d:9e:35:da:1d:4c:4c:cf:15:56:7b:7f:3a:1f:9b:ad:82:
         a4:7d:92:3d:79:a2:74:4a:1c:5d:a7:c6:9c:4f:f9:3e:10:47:
         78:95:dd:dd:2c:dd:0e:9b:95:24:2f:53:77:0b:8d:76:86:24:
         4b:b7:45:a7:1b:07:26:2f:cc:87:33:34:86:1e:11:e1:5a:0c:
         d0:e3:88:53:46:b8:78:78:13:79:d0:ff:16:ac:9e:d0:da:43:
         4b:3f:fe:bb:b0:bd:92:21:b6:11:8c:21:4d:d9:51:c4:60:e2:
         0e:cb:7f:dd:f8:c1:18:f7:12:b4:08:c1:1d:75:b6:87:3b:f9:
         ba:ba:28:38:61:18:26:93:24:bc:38:a7:12:71:ae:d2:93:6a:
         ac:1c:6d:c3:12:fa:3d:63:a5:c1:db:08:92:f9:f2:8f:3d:e1:
         e5:a1:5f:c8:ed:03:f4:b4:5d:b6:45:6f:2a:d1:93:ab:b5:ff:
         37:f3:2a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 00:17:57 2025 by rpki-client