Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096250886386089987/0/323430313a356338303a3a2f33322d3332203d3e2030.roa
File:                     323430313a356338303a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier:          1LDXyBKSFl2CziO/AAgiipLUXTwKWhQ9V+Y4/cF1F1s=
Subject key identifier:   95:93:50:B9:52:CE:B0:6F:5A:22:43:E4:41:F6:9F:87:A0:06:E4:91
Certificate issuer:       /CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727
Certificate serial:       4E395FD83EA77D59197123876C15F5EEB71DEBAA
Authority key identifier: AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/323430313a356338303a3a2f33322d3332203d3e2030.roa
Signing time:             Tue 12 May 2026 01:57:23 +0000
ROA not before:           Tue 12 May 2026 01:52:23 +0000
ROA not after:            Tue 11 May 2027 01:57:23 +0000
asID:                     0
IP address blocks:        2401:5c80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:51:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:39:5f:d8:3e:a7:7d:59:19:71:23:87:6c:15:f5:ee:b7:1d:eb:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727
        Validity
            Not Before: May 12 01:52:23 2026 GMT
            Not After : May 11 01:57:23 2027 GMT
        Subject: CN=959350B952CEB06F5A2243E441F69F87A006E491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:74:21:56:71:5e:c0:aa:0b:78:81:1a:90:5b:
                    5a:60:c7:6e:f6:37:b3:4a:07:f3:b1:9f:0d:ca:fb:
                    2d:ca:a1:2c:b8:2e:2a:fb:b3:00:a2:e4:e7:55:ad:
                    58:d2:8c:bd:bd:3b:e4:93:b7:2b:7b:76:b7:df:41:
                    38:fa:4d:ab:19:e4:af:21:b2:4a:e6:a7:89:af:88:
                    c2:59:00:dd:45:0e:d6:62:ee:e6:66:ee:86:37:24:
                    04:41:73:76:b7:51:4c:4a:cb:54:7b:f6:58:28:91:
                    00:92:59:4f:f0:13:57:61:15:79:e4:d6:a0:6a:a1:
                    4e:9f:3d:45:bc:10:cf:24:74:c0:5c:06:57:0c:5f:
                    dc:a8:cf:f2:33:04:26:85:ea:cc:cd:47:ec:31:cd:
                    bb:28:87:de:4f:35:31:6d:e9:48:8d:04:c8:ed:23:
                    7e:6c:76:83:8d:a3:0d:6c:19:1f:61:d8:a9:54:ab:
                    bf:ae:f2:29:39:ef:ed:b5:40:6a:8f:52:a6:ad:32:
                    cd:81:59:29:d2:b0:d5:bf:51:c1:f5:3d:5a:c8:52:
                    65:8e:e4:84:2f:21:24:5f:4c:31:75:3f:a2:bf:05:
                    fb:c5:52:34:24:23:bd:29:2e:5c:04:f2:c8:6c:20:
                    e1:52:55:ea:e6:1b:17:d1:7e:af:fa:50:af:01:47:
                    10:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:93:50:B9:52:CE:B0:6F:5A:22:43:E4:41:F6:9F:87:A0:06:E4:91
            X509v3 Authority Key Identifier:
                keyid:AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/323430313a356338303a3a2f33322d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:d8:7c:bb:a3:ac:6f:bf:9f:0b:2f:f4:c8:36:f4:20:2c:31:
         57:8a:e3:9b:3d:79:c9:50:66:a2:0d:f6:53:6f:7c:4e:35:93:
         66:77:86:52:6f:0b:f4:e0:eb:fa:a3:0c:2f:b1:20:ee:71:21:
         f7:fd:5d:04:56:65:81:42:fb:46:f4:4a:87:0f:4b:89:58:9e:
         97:35:bb:d6:d3:37:3f:d7:0b:26:8e:48:dc:44:76:fd:01:e5:
         2e:91:6e:50:e4:12:83:55:00:5e:ef:37:5b:ec:5e:fe:a4:29:
         06:62:3e:aa:3b:76:85:69:c9:65:2d:18:c4:70:95:d0:c8:4c:
         8c:8a:b6:ee:12:3b:2b:e7:73:2f:f8:7e:c3:d7:9c:93:82:39:
         31:c5:43:35:2d:2e:ee:55:91:52:bc:6b:3e:7f:f1:fa:4f:f5:
         f4:cf:e1:48:6d:5a:58:1a:6e:07:a9:72:f7:f8:4a:fc:48:28:
         01:d4:54:e1:5c:98:bf:5e:2f:6c:89:d5:1b:6e:9e:98:50:fa:
         9c:88:bf:bd:63:f0:36:de:70:5c:4c:06:1c:cc:af:05:78:73:
         9e:39:60:b3:3b:cf:a3:37:f2:05:a9:4e:bd:da:8f:d6:80:ee:
         d4:17:60:80:af:19:53:93:61:05:05:b2:d8:27:34:f2:b3:ca:
         b3:1a:d3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:12:00 2026 by rpki-client