Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/323430313a626530303a3a2f34382d3438203d3e20313333313139.roa
File:                     323430313a626530303a3a2f34382d3438203d3e20313333313139.roa (raw, json)
Hash identifier:          j3gepYGGSvR1JTVo0RXfb2CkYUCNxuPb4i0EpGJr5LY=
Subject key identifier:   3F:FA:E3:19:4E:64:3E:D8:E5:0B:89:89:50:AF:24:25:B1:D3:8F:BC
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       6B6AC47E5F1C30CEA01984730AA9BB3FC974E9BF
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/323430313a626530303a3a2f34382d3438203d3e20313333313139.roa
Signing time:             Tue 12 May 2026 07:05:53 +0000
ROA not before:           Tue 12 May 2026 07:00:53 +0000
ROA not after:            Tue 11 May 2027 07:05:53 +0000
asID:                     133119
IP address blocks:        2401:be00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:6a:c4:7e:5f:1c:30:ce:a0:19:84:73:0a:a9:bb:3f:c9:74:e9:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: May 12 07:00:53 2026 GMT
            Not After : May 11 07:05:53 2027 GMT
        Subject: CN=3FFAE3194E643ED8E50B898950AF2425B1D38FBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d9:63:c7:46:46:f1:a9:92:41:08:63:bb:02:
                    f3:36:51:e2:7c:5a:40:5b:8e:c3:b2:b7:e3:85:49:
                    9d:75:c6:7b:5a:83:24:8d:3f:fd:87:08:cb:7e:6b:
                    0e:cf:6a:4a:0d:f7:be:f4:0d:40:33:1c:34:d6:10:
                    4e:41:c7:fc:e2:d3:5b:3a:b5:63:8a:37:37:d7:32:
                    e8:aa:0e:27:6c:5a:70:d0:85:49:1b:92:01:5e:38:
                    e6:2a:4a:5a:bc:b0:fc:e5:6b:3d:dd:09:b2:a5:6d:
                    3a:96:0c:66:22:fa:07:99:a4:5f:63:4f:a6:f3:78:
                    ec:2d:b7:2c:7c:3a:80:89:8a:a6:ca:07:29:bb:37:
                    45:d5:a3:9b:57:88:1b:86:db:57:75:61:97:7f:34:
                    1d:6f:dd:25:e2:4c:30:9e:69:af:bd:47:c3:d4:a6:
                    f4:31:46:61:55:6b:e1:18:12:0e:68:d7:a8:63:07:
                    ae:75:83:32:c3:84:c0:5f:b4:2f:1c:28:d6:ec:98:
                    a0:a8:e4:6f:9e:ea:e4:93:12:f3:2b:86:bb:10:97:
                    0e:8b:4d:a4:b0:1e:37:37:0f:b5:9a:97:14:05:6c:
                    97:ce:6e:13:58:c3:c1:ef:7d:cd:da:44:6d:61:23:
                    00:30:14:62:d2:37:dc:67:4f:2a:73:01:04:1e:82:
                    5b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:FA:E3:19:4E:64:3E:D8:E5:0B:89:89:50:AF:24:25:B1:D3:8F:BC
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/323430313a626530303a3a2f34382d3438203d3e20313333313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:be00::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:f6:cc:1a:07:e0:f6:ef:f9:f7:69:62:2d:c1:a3:01:6d:73:
         19:e9:c9:2d:8f:e9:c3:d2:18:e3:31:8d:8d:17:33:60:ad:4f:
         c5:fc:14:a8:2c:61:6e:4a:99:da:fe:7c:d7:58:6b:b0:00:3f:
         6f:8a:ec:7f:14:ca:21:62:1b:79:16:a2:aa:cf:51:6e:85:d5:
         75:87:89:6b:79:6d:6f:9e:c0:44:37:25:cb:2e:a6:f2:6f:6e:
         98:e0:df:2c:e7:18:a2:f8:bf:8a:dd:6f:1a:09:a7:ae:66:c3:
         9d:ae:9f:3e:0b:a5:1d:e5:77:8a:36:59:b4:72:83:5b:fd:95:
         c9:3d:5b:81:48:d5:09:43:81:2f:8e:39:70:b8:28:7e:12:ba:
         d3:5c:d0:00:4f:03:f6:c5:4c:bb:c3:88:51:67:0d:29:5e:32:
         80:f5:fb:dc:af:c6:cd:af:5b:46:43:f0:11:0f:b4:3e:9f:90:
         b8:5f:a2:8e:27:b6:14:df:8e:9e:02:f2:13:2d:cb:08:2b:7a:
         ee:da:25:c1:aa:b7:1d:bb:5c:25:27:50:f9:3c:88:d4:17:88:
         2d:18:58:ec:54:62:6f:29:21:99:81:7e:f2:10:68:6a:43:19:
         21:18:1e:a8:ed:b2:d1:1f:4d:70:f6:28:ce:47:b3:b3:17:4b:
         33:b8:f1:44
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUa2rEfl8cMM6gGYRzCqm7P8l06b8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYw
NDk1QzhDNDAeFw0yNjA1MTIwNzAwNTNaFw0yNzA1MTEwNzA1NTNaMDMxMTAvBgNV
BAMTKDNGRkFFMzE5NEU2NDNFRDhFNTBCODk4OTUwQUYyNDI1QjFEMzhGQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg2WPHRkbxqZJBCGO7AvM2UeJ8
WkBbjsOyt+OFSZ11xntagySNP/2HCMt+aw7PakoN9770DUAzHDTWEE5Bx/zi01s6
tWOKNzfXMuiqDidsWnDQhUkbkgFeOOYqSlq8sPzlaz3dCbKlbTqWDGYi+geZpF9j
T6bzeOwttyx8OoCJiqbKBym7N0XVo5tXiBuG21d1YZd/NB1v3SXiTDCeaa+9R8PU
pvQxRmFVa+EYEg5o16hjB651gzLDhMBftC8cKNbsmKCo5G+e6uSTEvMrhrsQlw6L
TaSwHjc3D7WalxQFbJfObhNYw8Hvfc3aRG1hIwAwFGLSN9xnTypzAQQeglsfAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUP/rjGU5kPtjlC4mJUK8kJbHTj7wwHwYDVR0j
BBgwFoAUkca2RN1thIOe0SD7wAmE1gSVyMQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTg5MDk4NTIyNjg2MjU5NS8wLzkxQzZCNjQ0REQ2RDg0ODM5RUQxMjBGQkMwMDk4
NEQ2MDQ5NUM4QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYwNDk1QzhDNC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NTg5MDk4NTIyNjg2MjU5NS8wLzMyMzQzMDMxM2E2
MjY1MzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzMzMxMzEzOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQC
AAIwCQMHACQBvgAAADANBgkqhkiG9w0BAQsFAAOCAQEAqPbMGgfg9u/592liLcGj
AW1zGenJLY/pw9IY4zGNjRczYK1PxfwUqCxhbkqZ2v5811hrsAA/b4rsfxTKIWIb
eRaiqs9RboXVdYeJa3ltb57ARDclyy6m8m9umODfLOcYovi/it1vGgmnrmbDna6f
PgulHeV3ijZZtHKDW/2VyT1bgUjVCUOBL445cLgofhK601zQAE8D9sVMu8OIUWcN
KV4ygPX73K/Gza9bRkPwEQ+0Pp+QuF+ijie2FN+OngLyEy3LCCt67tolwaq3Hbtc
JSdQ+TyI1BeILRhY7FRibykhmYF+8hBoakMZIRgeqO2y0R9NcPYozkezsxdLM7jx
RA==
-----END CERTIFICATE-----
Generated at Wed May 13 15:59:18 2026 by rpki-client