Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105370877056253965/0/323430303a613561303a3a2f33322d3332203d3e203633353330.roa
File:                     323430303a613561303a3a2f33322d3332203d3e203633353330.roa (raw, json)
Hash identifier:          uDfGInXKfeUSoNP2hY+TcDh0GI9nZQpiCTQ28Fl51mE=
Subject key identifier:   6B:15:5C:17:A1:7F:7C:B8:85:A1:2A:9E:09:D2:73:F2:7B:4E:4D:53
Certificate issuer:       /CN=6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40
Certificate serial:       7E2771D81CA32C2576342FCBBE7AA99771FF3F87
Authority key identifier: 6F:B7:28:BF:3C:B4:1A:02:F3:DF:55:AC:25:9F:5D:D1:0B:79:EE:40
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/323430303a613561303a3a2f33322d3332203d3e203633353330.roa
Signing time:             Sat 09 May 2026 06:08:54 +0000
ROA not before:           Sat 09 May 2026 06:03:54 +0000
ROA not after:            Sat 08 May 2027 06:08:54 +0000
asID:                     63530
IP address blocks:        2400:a5a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:45:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:27:71:d8:1c:a3:2c:25:76:34:2f:cb:be:7a:a9:97:71:ff:3f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40
        Validity
            Not Before: May  9 06:03:54 2026 GMT
            Not After : May  8 06:08:54 2027 GMT
        Subject: CN=6B155C17A17F7CB885A12A9E09D273F27B4E4D53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:30:be:ad:cd:b0:9b:4c:33:88:3b:87:dc:18:
                    56:58:7e:f5:c5:74:aa:7d:fa:cb:40:85:89:31:c9:
                    93:18:ba:f8:98:86:26:b7:d5:84:fb:5e:d6:2f:f0:
                    94:f8:8d:dd:eb:b3:c7:9f:dd:ab:a7:37:0d:cf:f8:
                    f7:92:24:d0:a7:64:ac:52:66:30:9c:e9:9d:bd:b8:
                    76:2d:b7:a7:9f:6b:67:03:ff:01:de:73:b5:76:39:
                    59:41:9f:30:ae:f6:8f:a6:a7:02:7b:ae:12:a8:52:
                    d2:40:7d:5e:77:c1:45:53:ef:c3:77:88:92:52:6d:
                    4f:ee:1c:05:c4:c7:1e:dd:63:bf:6d:68:7f:f4:8d:
                    0f:9a:73:8d:be:39:e3:62:fd:e0:dc:b6:50:47:e2:
                    cc:1d:d0:6c:26:36:5c:b6:a8:82:59:64:b7:84:00:
                    83:65:52:84:55:82:5c:4c:8a:1b:e3:3c:14:67:9a:
                    5b:54:b7:38:c3:24:97:ee:b3:ce:b0:3f:b6:c5:15:
                    c1:45:3d:c7:cb:68:bd:f3:c1:43:0d:b9:27:2d:90:
                    e9:fc:4c:a4:dc:f0:57:20:cc:ab:54:de:65:3d:1c:
                    71:85:8e:01:53:ec:e0:5c:c4:39:4b:1f:6e:40:b7:
                    98:c0:41:5d:db:c5:65:5a:5b:70:5d:8a:b3:55:c9:
                    79:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:15:5C:17:A1:7F:7C:B8:85:A1:2A:9E:09:D2:73:F2:7B:4E:4D:53
            X509v3 Authority Key Identifier:
                keyid:6F:B7:28:BF:3C:B4:1A:02:F3:DF:55:AC:25:9F:5D:D1:0B:79:EE:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/323430303a613561303a3a2f33322d3332203d3e203633353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:a5a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:b6:d1:33:60:68:88:80:7d:2a:57:cb:a0:ea:50:41:84:ac:
         a3:da:7b:a1:26:33:f9:35:7e:63:77:3a:73:e4:58:b2:91:df:
         a5:1b:da:ac:67:26:dc:f7:2c:a9:ad:28:de:7e:b2:11:5d:91:
         50:7d:7b:49:4c:3f:e6:5f:64:3b:fc:bd:5c:a3:ee:5e:2a:7d:
         b6:3f:25:6c:38:22:1d:6a:d4:72:6a:31:f8:e4:6b:11:ff:56:
         33:98:3f:b9:3a:98:e8:92:a6:c0:cd:ca:22:af:ee:df:7c:14:
         d2:0a:b9:77:69:7c:ab:7d:57:5b:2a:c5:ff:a8:f7:34:2f:6f:
         7a:22:4d:6c:aa:37:9d:56:11:f4:f9:e6:e4:f8:68:5d:e1:8d:
         43:02:23:98:bb:bb:81:0a:e7:a0:9a:95:17:fa:74:cf:a9:48:
         9c:fb:ca:db:3e:a4:0f:4c:f7:95:1c:b8:01:fa:d8:b0:ce:21:
         68:66:71:ef:c1:68:c1:b0:1e:19:1e:09:c4:c5:8e:c9:ef:83:
         9c:21:ed:01:77:95:3b:96:dd:81:6e:6c:40:07:77:80:27:ad:
         a0:9f:68:6f:ae:80:26:3d:3a:68:d3:db:3f:ca:d4:4a:90:88:
         ea:ff:75:d8:0e:f5:de:08:8c:94:06:b2:1a:7a:ed:f5:40:39:
         ce:67:53:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:32:15 2026 by rpki-client