Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1089062140922298370/0/323430303a373130303a3a2f33322d3332203d3e203633353930.roa
File:                     323430303a373130303a3a2f33322d3332203d3e203633353930.roa (raw, json)
Hash identifier:          KAEQc28Y+KwHxr7cwk9O/n6NViFo4hGPdby6zHQ8jDU=
Subject key identifier:   95:7C:84:FA:7D:C9:AF:E0:A2:E0:55:F8:09:0A:01:2F:7A:D7:7B:F6
Certificate issuer:       /CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202
Certificate serial:       675A1D9D28851E2E2F9F4D6B589425E9B8C743B6
Authority key identifier: 22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/323430303a373130303a3a2f33322d3332203d3e203633353930.roa
Signing time:             Thu 23 Apr 2026 07:33:07 +0000
ROA not before:           Thu 23 Apr 2026 07:28:07 +0000
ROA not after:            Thu 22 Apr 2027 07:33:07 +0000
asID:                     63590
IP address blocks:        2400:7100::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:5a:1d:9d:28:85:1e:2e:2f:9f:4d:6b:58:94:25:e9:b8:c7:43:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202
        Validity
            Not Before: Apr 23 07:28:07 2026 GMT
            Not After : Apr 22 07:33:07 2027 GMT
        Subject: CN=957C84FA7DC9AFE0A2E055F8090A012F7AD77BF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:05:63:d4:9e:49:14:89:d1:49:7b:72:4b:bb:
                    42:da:be:29:cb:fa:a7:34:2e:83:69:32:75:cc:7a:
                    61:eb:42:40:db:fa:6e:7a:a1:1f:9d:79:14:26:59:
                    aa:41:1f:77:ae:03:b0:50:79:3e:4f:53:ab:ae:21:
                    a7:18:2d:e6:45:a3:15:9e:e9:fc:88:8e:9b:7a:25:
                    34:a4:87:16:3d:9b:59:4f:e4:01:fe:16:35:0d:8f:
                    31:1e:f3:46:14:35:dc:44:f1:cf:d6:f5:73:4b:51:
                    fe:36:5b:39:30:66:4e:c0:54:1b:84:27:74:5c:f9:
                    6d:f8:9b:29:af:42:72:ee:35:43:9e:da:db:c3:75:
                    f4:c5:44:c6:dc:01:10:59:b9:73:87:e1:5c:f2:63:
                    b7:8a:30:51:d9:16:11:15:cb:bc:de:48:2a:85:d4:
                    73:72:10:3c:81:50:01:7b:c5:62:4d:fe:0e:e6:90:
                    cb:53:82:16:cd:57:ae:43:e6:df:7f:44:df:6e:3c:
                    86:35:6a:97:77:94:10:a5:03:7c:b2:3c:ea:e0:f4:
                    42:11:9e:02:c0:e8:73:02:31:2b:bc:9f:21:5b:46:
                    e3:a8:b2:d0:ae:27:20:56:6b:56:ee:b0:88:90:73:
                    ad:ef:18:27:53:50:72:b0:64:00:b7:bf:f0:c0:72:
                    7e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7C:84:FA:7D:C9:AF:E0:A2:E0:55:F8:09:0A:01:2F:7A:D7:7B:F6
            X509v3 Authority Key Identifier:
                keyid:22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/323430303a373130303a3a2f33322d3332203d3e203633353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:7100::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:8c:8b:0e:bc:10:75:d4:fd:aa:5b:a2:cb:d1:f0:cd:b2:b0:
         ee:fd:58:fd:66:10:af:7b:dc:9c:b8:13:ed:35:01:3c:2a:c1:
         c1:c1:03:f7:47:10:d0:5f:a3:61:35:eb:c5:4d:b2:f8:b1:01:
         e3:01:bf:1c:7e:4f:d0:de:31:3f:6a:5c:bc:3c:be:35:f5:46:
         36:2a:db:11:ca:2c:c7:c8:3f:28:af:07:02:56:09:f0:3b:a1:
         6e:c4:d6:d9:5d:66:a8:1d:f1:62:c2:98:3a:7f:c5:73:28:5f:
         44:ba:f9:fa:c6:2a:27:0a:7d:1a:00:8f:8e:4e:a7:74:71:9a:
         5b:fb:ae:78:4d:15:3f:a7:42:48:95:50:dd:04:5f:90:78:65:
         1e:79:a3:03:33:cf:7d:2c:6e:83:e5:c8:b1:a8:0f:f5:ef:9e:
         5c:6e:45:fe:d6:90:43:5d:8d:e2:25:20:91:90:cf:6e:38:a6:
         90:df:a3:9d:24:e8:55:b4:48:4c:7c:84:ad:d8:17:45:5b:5f:
         4c:c4:f1:14:ec:27:69:fb:0b:02:25:32:8a:9a:f1:63:25:45:
         42:ac:2d:e0:dd:79:c2:3b:eb:64:2f:93:92:9b:90:2a:0f:06:
         0b:86:ed:a0:6c:93:69:31:85:89:3c:8f:11:99:f8:0d:65:4f:
         78:a0:e6:b7
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIUZ1odnSiFHi4vn01rWJQl6bjHQ7YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI2NUMyRTgxQkNDQ0M0RTkyMkFCMTFDNTgxQURFMzFC
RjI3QjIwMjAeFw0yNjA0MjMwNzI4MDdaFw0yNzA0MjIwNzMzMDdaMDMxMTAvBgNV
BAMTKDk1N0M4NEZBN0RDOUFGRTBBMkUwNTVGODA5MEEwMTJGN0FENzdCRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDBWPUnkkUidFJe3JLu0LavinL
+qc0LoNpMnXMemHrQkDb+m56oR+deRQmWapBH3euA7BQeT5PU6uuIacYLeZFoxWe
6fyIjpt6JTSkhxY9m1lP5AH+FjUNjzEe80YUNdxE8c/W9XNLUf42WzkwZk7AVBuE
J3Rc+W34mymvQnLuNUOe2tvDdfTFRMbcARBZuXOH4VzyY7eKMFHZFhEVy7zeSCqF
1HNyEDyBUAF7xWJN/g7mkMtTghbNV65D5t9/RN9uPIY1apd3lBClA3yyPOrg9EIR
ngLA6HMCMSu8nyFbRuOostCuJyBWa1busIiQc63vGCdTUHKwZAC3v/DAcn6dAgMB
AAGjggISMIICDjAdBgNVHQ4EFgQUlXyE+n3Jr+Ci4FX4CQoBL3rXe/YwHwYDVR0j
BBgwFoAUImXC6BvMzE6SKrEcWBreMb8nsgIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4
OTA2MjE0MDkyMjI5ODM3MC8wLzIyNjVDMkU4MUJDQ0NDNEU5MjJBQjExQzU4MUFE
RTMxQkYyN0IyMDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMjI2NUMyRTgxQkNDQ0M0RTkyMkFCMTFDNTgxQURFMzFCRjI3QjIwMi5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDg5MDYyMTQwOTIyMjk4MzcwLzAvMzIzNDMwMzAzYTM3
MzEzMDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMzM1MzkzMC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQAcQAwDQYJKoZIhvcNAQELBQADggEBAKKMiw68EHXU/apbosvR8M2ysO79
WP1mEK973Jy4E+01ATwqwcHBA/dHENBfo2E168VNsvixAeMBvxx+T9DeMT9qXLw8
vjX1RjYq2xHKLMfIPyivBwJWCfA7oW7E1tldZqgd8WLCmDp/xXMoX0S6+frGKicK
fRoAj45Op3Rxmlv7rnhNFT+nQkiVUN0EX5B4ZR55owMzz30sboPlyLGoD/Xvnlxu
Rf7WkENdjeIlIJGQz244ppDfo50k6FW0SEx8hK3YF0VbX0zE8RTsJ2n7CwIlMoqa
8WMlRUKsLeDdecI762Qvk5KbkCoPBguG7aBsk2kxhYk8jxGZ+A1lT3ig5rc=
-----END CERTIFICATE-----
Generated at Wed May 13 20:20:26 2026 by rpki-client