Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095903841322270721/0/323430323a643334303a3a2f33322d3332203d3e203338333831.roa
File:                     323430323a643334303a3a2f33322d3332203d3e203338333831.roa (raw, json)
Hash identifier:          KjzxHZrpBgUBPF4xWs9+mFljcu+D0MFHtLGLuVYAwtA=
Subject key identifier:   2B:D5:30:B1:1C:E3:83:38:36:5C:F5:7B:69:92:C6:39:E6:14:7B:1A
Certificate issuer:       /CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
Certificate serial:       4C6643504625318D27D16CF89CCE2B80556D2982
Authority key identifier: 51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/323430323a643334303a3a2f33322d3332203d3e203338333831.roa
Signing time:             Wed 22 Apr 2026 07:57:51 +0000
ROA not before:           Wed 22 Apr 2026 07:52:51 +0000
ROA not after:            Wed 21 Apr 2027 07:57:51 +0000
asID:                     38381
IP address blocks:        2402:d340::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:66:43:50:46:25:31:8d:27:d1:6c:f8:9c:ce:2b:80:55:6d:29:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
        Validity
            Not Before: Apr 22 07:52:51 2026 GMT
            Not After : Apr 21 07:57:51 2027 GMT
        Subject: CN=2BD530B11CE38338365CF57B6992C639E6147B1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cc:57:cd:86:0c:ed:d7:0c:6f:f7:e9:f5:59:
                    a1:ad:57:88:bc:13:cc:a8:c3:eb:06:2c:9a:57:cb:
                    f4:09:18:14:21:5e:42:26:04:3b:a6:fc:52:85:84:
                    76:14:ed:46:f9:04:a9:9c:a1:dc:b1:53:81:f5:1f:
                    dd:65:b9:96:1a:b0:34:de:1f:e2:82:1b:57:8c:c8:
                    82:21:bf:88:36:3c:3e:a3:0c:d6:17:49:47:5a:c5:
                    b0:18:36:3b:f9:eb:1d:5c:8a:20:fb:5f:05:7f:57:
                    dd:a9:ec:31:c0:94:80:4b:f2:c6:d4:c5:cf:1b:6e:
                    d0:e9:0c:7a:98:74:69:c8:c8:af:f4:60:bf:b8:2a:
                    ea:3e:47:f1:d2:4f:d3:e7:92:b1:0c:0f:60:4e:f4:
                    15:1a:98:37:fc:12:40:53:90:41:4b:13:c9:25:fe:
                    a3:f7:e1:13:e8:87:68:45:99:2a:54:10:8a:92:9f:
                    04:a4:c5:93:6b:05:9f:7f:3c:ea:18:63:4a:a6:fd:
                    62:a5:91:de:d4:53:9e:8e:d9:50:17:d8:d0:be:f0:
                    84:32:c7:c2:f8:ed:90:6a:9a:a2:d2:1a:a4:30:41:
                    a3:ab:dc:04:02:73:6c:ee:01:d1:60:13:74:d4:03:
                    59:6f:f1:86:33:3d:0b:fa:db:61:65:c3:88:b0:83:
                    7b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D5:30:B1:1C:E3:83:38:36:5C:F5:7B:69:92:C6:39:E6:14:7B:1A
            X509v3 Authority Key Identifier:
                keyid:51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/323430323a643334303a3a2f33322d3332203d3e203338333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:d340::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:ac:d9:c4:4b:1b:aa:06:e0:19:92:29:7d:86:57:7d:15:e1:
         0c:5f:bb:3f:83:e0:e3:56:88:e3:5d:aa:10:99:88:63:d1:8b:
         f0:1e:b9:c7:20:6c:39:d1:01:d2:3a:3e:fa:cd:da:2c:90:ff:
         6a:e9:fd:f1:2a:92:16:51:be:52:fe:47:67:1f:a5:07:46:e2:
         a9:4f:ce:57:4e:1f:6c:98:89:64:00:60:df:0c:45:4a:f0:62:
         c2:f6:54:e2:06:63:66:cc:11:b3:ce:4e:8f:7e:ea:55:a0:ed:
         7c:a9:6a:d3:05:ab:4b:ac:30:90:5e:aa:e5:4f:e3:1f:10:8e:
         cc:e6:8b:d8:6d:ad:20:a3:a6:2a:a1:4b:88:97:ef:99:09:3a:
         b1:3e:6e:8e:99:69:e3:83:ad:4a:c9:6d:40:27:3c:05:78:40:
         70:00:4b:d4:69:3f:fc:5b:c3:ec:f7:52:89:7d:ba:d5:54:f7:
         4f:18:e0:8c:89:a4:71:ae:99:84:59:74:30:35:17:87:a7:bc:
         de:b8:7f:91:74:11:37:c4:c6:a9:21:8f:24:9f:32:ec:69:d9:
         66:29:0e:16:27:c9:66:7b:86:bc:b6:37:89:35:a2:07:9d:fa:
         ad:7e:ff:14:2d:d6:d1:56:56:6e:cb:ab:d8:25:96:1a:c3:1f:
         57:71:f7:de
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIUTGZDUEYlMY0n0Wz4nM4rgFVtKYIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTExNTk2NkZCNjJBMkJEQjRENjVEOTc0REYwREQ5QjAy
MDgxMUQ4RDAeFw0yNjA0MjIwNzUyNTFaFw0yNzA0MjEwNzU3NTFaMDMxMTAvBgNV
BAMTKDJCRDUzMEIxMUNFMzgzMzgzNjVDRjU3QjY5OTJDNjM5RTYxNDdCMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmzFfNhgzt1wxv9+n1WaGtV4i8
E8yow+sGLJpXy/QJGBQhXkImBDum/FKFhHYU7Ub5BKmcodyxU4H1H91luZYasDTe
H+KCG1eMyIIhv4g2PD6jDNYXSUdaxbAYNjv56x1ciiD7XwV/V92p7DHAlIBL8sbU
xc8bbtDpDHqYdGnIyK/0YL+4Kuo+R/HST9PnkrEMD2BO9BUamDf8EkBTkEFLE8kl
/qP34RPoh2hFmSpUEIqSnwSkxZNrBZ9/POoYY0qm/WKlkd7UU56O2VAX2NC+8IQy
x8L47ZBqmqLSGqQwQaOr3AQCc2zuAdFgE3TUA1lv8YYzPQv622Flw4iwg3t7AgMB
AAGjggISMIICDjAdBgNVHQ4EFgQUK9UwsRzjgzg2XPV7aZLGOeYUexowHwYDVR0j
BBgwFoAUURWWb7YqK9tNZdl03w3ZsCCBHY0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTkwMzg0MTMyMjI3MDcyMS8wLzUxMTU5NjZGQjYyQTJCREI0RDY1RDk3NERGMERE
OUIwMjA4MTFEOEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTExNTk2NkZCNjJBMkJEQjRENjVEOTc0REYwREQ5QjAyMDgxMUQ4RC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk1OTAzODQxMzIyMjcwNzIxLzAvMzIzNDMwMzIzYTY0
MzMzNDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzMzODMzMzgzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQC00AwDQYJKoZIhvcNAQELBQADggEBADus2cRLG6oG4BmSKX2GV30V4Qxf
uz+D4ONWiONdqhCZiGPRi/AeuccgbDnRAdI6PvrN2iyQ/2rp/fEqkhZRvlL+R2cf
pQdG4qlPzldOH2yYiWQAYN8MRUrwYsL2VOIGY2bMEbPOTo9+6lWg7XypatMFq0us
MJBequVP4x8Qjszmi9htrSCjpiqhS4iX75kJOrE+bo6ZaeODrUrJbUAnPAV4QHAA
S9RpP/xbw+z3Uol9utVU908Y4IyJpHGumYRZdDA1F4envN64f5F0ETfExqkhjySf
Muxp2WYpDhYnyWZ7hry2N4k1oged+q1+/xQt1tFWVm7Lq9gllhrDH1dx994=
-----END CERTIFICATE-----
Generated at Wed May 13 21:32:19 2026 by rpki-client