Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/323430323a393234303a3a2f33322d3332203d3e203435303836.roa
File:                     323430323a393234303a3a2f33322d3332203d3e203435303836.roa (raw, json)
Hash identifier:          AqV/sGmm6hXrkokj6jMHwdG8GuWNGQ6cK8CF70VYMyI=
Subject key identifier:   BC:AF:1A:7B:3C:17:C9:45:C4:41:3A:18:F9:5F:3A:DD:81:73:B8:2D
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       5889867905A258E880CAAAEBF2052B0777F3C914
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/323430323a393234303a3a2f33322d3332203d3e203435303836.roa
Signing time:             Thu 07 May 2026 01:51:05 +0000
ROA not before:           Thu 07 May 2026 01:46:05 +0000
ROA not after:            Thu 06 May 2027 01:51:05 +0000
asID:                     45086
IP address blocks:        2402:9240::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:89:86:79:05:a2:58:e8:80:ca:aa:eb:f2:05:2b:07:77:f3:c9:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: May  7 01:46:05 2026 GMT
            Not After : May  6 01:51:05 2027 GMT
        Subject: CN=BCAF1A7B3C17C945C4413A18F95F3ADD8173B82D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:11:22:a6:ba:c3:57:8a:1e:4b:87:4a:72:e5:
                    ab:de:f0:75:7f:24:24:6c:ae:c1:7b:aa:63:8f:b0:
                    3f:06:fc:83:fd:91:cf:f6:cb:e9:7e:fc:85:b3:e5:
                    d0:9d:28:fd:b2:69:f1:08:3c:d6:7b:e3:f5:9e:93:
                    5b:22:89:59:c7:c3:ca:25:a2:0f:52:5f:b1:ba:43:
                    c9:c6:5f:71:f7:f1:df:bb:6b:5a:a6:c2:fc:2b:b1:
                    c1:14:f4:19:56:86:00:b1:b2:71:55:56:2b:06:e1:
                    f2:52:43:c1:78:3b:da:16:23:ea:03:3e:92:5a:87:
                    eb:a1:0c:98:9b:35:66:94:d9:7b:32:50:f6:5f:cf:
                    d9:b9:79:85:67:a5:35:75:41:6c:a5:dc:0c:9b:3e:
                    01:93:f6:e5:76:7f:6c:8f:5f:2d:e5:4f:b6:29:7c:
                    d2:bc:c1:d5:ca:d8:c9:98:12:05:0a:0a:12:c7:83:
                    5b:95:fc:ba:ef:02:3f:d3:17:17:10:de:54:96:85:
                    4e:44:f6:d4:18:ba:b2:9a:b4:16:49:79:21:76:f0:
                    f1:10:3b:9d:84:e1:87:0d:e9:95:ce:e8:ee:f2:11:
                    ab:a7:3b:60:0e:ee:6e:d3:96:59:09:0c:02:7d:49:
                    b9:02:b8:4d:8c:13:33:51:a1:af:19:c4:2b:3d:44:
                    23:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AF:1A:7B:3C:17:C9:45:C4:41:3A:18:F9:5F:3A:DD:81:73:B8:2D
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/323430323a393234303a3a2f33322d3332203d3e203435303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9240::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:a9:ad:53:d6:ac:29:6e:25:09:fc:ff:24:f3:ea:8d:98:f9:
         c3:66:9c:46:8b:24:07:7f:81:7b:5c:96:a6:ec:32:d3:30:da:
         7a:18:34:85:f6:59:9a:84:1b:24:0d:e7:08:50:be:ae:7c:54:
         b2:a3:ec:f9:5f:69:6a:fa:58:a2:5d:9c:96:37:6b:c0:a9:ea:
         10:85:6f:e2:9b:5d:a4:37:f1:ce:94:11:3a:e0:c9:c7:ee:5a:
         37:f1:e8:37:b8:85:ab:46:c9:bf:6f:4a:61:8e:37:a0:62:9e:
         bd:d7:aa:d0:aa:57:08:10:cf:1e:d9:18:02:05:cc:f7:df:41:
         55:07:2d:e6:4c:f3:ec:e4:20:bf:59:c4:ff:7e:53:07:51:bc:
         bd:e9:ce:3f:e9:1c:49:f1:22:7d:78:f7:f7:15:1c:4d:91:32:
         8c:eb:b4:70:84:35:43:d5:25:92:e9:b1:ee:c7:2b:e8:3b:43:
         4e:31:62:98:16:70:df:d5:72:57:04:13:35:9d:48:d0:89:29:
         59:dc:45:94:3c:92:5b:c8:cb:ee:79:4d:0c:71:f5:3e:75:30:
         ff:0c:c5:f0:45:0d:36:65:57:73:11:c5:dd:cf:35:59:df:20:
         22:c8:27:be:70:38:e0:de:45:49:07:a1:bd:e8:32:6a:86:3a:
         79:32:a5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:05:13 2026 by rpki-client