Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/323430333a383038303a3a2f33322d3438203d3e2034383437.roa
File:                     323430333a383038303a3a2f33322d3438203d3e2034383437.roa (raw, json)
Hash identifier:          lHV0yPNPAZkgbactrq9QFIoJQ7QVQCnXlQeUMkAzhNg=
Subject key identifier:   7E:95:7F:31:40:4A:C9:5D:3F:CB:B6:0F:CC:7D:B1:B3:07:56:89:C4
Certificate issuer:       /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial:       4470E3DFDB3BA72837B0FBA39F64F1E32AC9E943
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/323430333a383038303a3a2f33322d3438203d3e2034383437.roa
Signing time:             Tue 12 May 2026 06:51:41 +0000
ROA not before:           Tue 12 May 2026 06:46:41 +0000
ROA not after:            Tue 11 May 2027 06:51:41 +0000
asID:                     4847
IP address blocks:        2403:8080::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:70:e3:df:db:3b:a7:28:37:b0:fb:a3:9f:64:f1:e3:2a:c9:e9:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
        Validity
            Not Before: May 12 06:46:41 2026 GMT
            Not After : May 11 06:51:41 2027 GMT
        Subject: CN=7E957F31404AC95D3FCBB60FCC7DB1B3075689C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:78:31:b5:5b:7f:e2:cf:70:fe:7a:50:fc:dc:
                    39:52:08:5b:4f:68:b5:4d:3f:90:92:60:3e:cb:3c:
                    2e:af:ed:0e:1e:73:ef:bd:4f:ef:10:de:64:05:fb:
                    e8:fd:83:ff:86:ed:0f:0f:8e:2d:40:19:ef:1b:4f:
                    bc:07:5a:11:c7:3b:d6:86:61:0f:f8:77:fb:a0:c5:
                    78:04:5d:2c:dd:81:98:15:d7:aa:e1:81:66:6c:82:
                    8f:01:8c:1c:fd:f1:82:ed:2e:27:65:53:f9:9f:af:
                    88:ee:6c:00:2e:f5:5f:96:b8:79:d5:a0:02:bd:f0:
                    2b:a7:ed:b1:87:2d:92:af:16:36:e9:15:c4:f0:95:
                    26:f8:fc:22:80:21:dd:fd:0c:d4:ed:b2:65:ad:66:
                    dc:da:f9:24:72:06:79:78:d9:cc:a1:b5:2f:77:3b:
                    ad:1f:89:1e:11:46:fa:57:7c:30:9a:64:da:81:8c:
                    46:d8:be:bf:85:9f:7b:c2:aa:90:da:d9:bc:4e:1e:
                    44:b6:0f:f6:bd:77:6e:80:8a:44:88:f7:cf:10:ea:
                    3f:13:05:d3:8e:f8:8b:68:d9:7a:ef:cc:34:22:52:
                    16:d5:4e:63:94:7f:43:a4:65:9d:00:84:9a:a6:09:
                    1e:3e:1c:79:5f:71:71:10:36:ff:bf:39:e2:85:ff:
                    22:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:95:7F:31:40:4A:C9:5D:3F:CB:B6:0F:CC:7D:B1:B3:07:56:89:C4
            X509v3 Authority Key Identifier:
                keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/323430333a383038303a3a2f33322d3438203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:8080::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:3b:6a:2e:73:7d:5c:fe:1d:d3:ab:d5:92:73:4d:b9:23:17:
         58:2c:01:c9:b5:25:c7:f4:fd:0c:48:bb:ba:07:3e:1f:47:a0:
         c4:a9:96:b6:eb:59:cb:71:79:b6:1b:3b:86:73:94:cd:31:54:
         25:43:ac:0c:d2:12:b0:92:47:b9:06:a6:b4:6c:12:07:a5:52:
         82:48:8e:03:f3:1f:62:79:cd:97:5d:7f:cf:8f:3b:66:e6:56:
         60:c7:07:d5:a9:92:9f:54:83:7c:4c:5f:e6:e5:2d:d7:55:24:
         6a:32:8f:e6:53:91:81:40:88:15:1a:9c:f0:a3:93:5c:50:44:
         43:51:6b:bc:67:f7:fd:85:fb:08:95:0e:e1:40:9e:73:38:fe:
         e4:42:70:b3:f3:9c:d6:d8:97:f9:d2:4d:f1:20:34:41:dd:72:
         5d:8e:19:27:f1:c5:5f:b1:d7:55:15:e2:5b:f4:c0:44:5f:2a:
         6e:9d:d1:ed:b7:83:8d:08:c8:e0:17:62:d8:5e:70:2a:10:d4:
         9e:99:49:be:87:6d:f3:45:08:7f:57:28:96:74:bc:15:c2:17:
         ec:50:b2:24:51:06:18:28:52:f4:ee:6f:80:df:16:c8:d2:e8:
         4f:f1:0a:3e:a2:d2:6c:2e:65:a9:16:d9:19:14:ee:68:b7:f3:
         13:0a:0a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:41:12 2026 by rpki-client