Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a333030303a3a2f33362d3336203d3e203234313339.roa
File:                     323430363a363130303a333030303a3a2f33362d3336203d3e203234313339.roa (raw, json)
Hash identifier:          TS+nJ2C1T6zSN9K1PgNbDsyykfkwEFSrUadsN4jzN4s=
Subject key identifier:   6E:BE:A1:79:21:D7:E7:45:98:60:B0:45:01:08:06:B6:7F:72:E4:D7
Certificate issuer:       /CN=AA39AE9FC417219D4A84D7759F82869F86905204
Certificate serial:       700C825FD2F9BC6A271A58C4E971BCAD1ABBE371
Authority key identifier: AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a333030303a3a2f33362d3336203d3e203234313339.roa
Signing time:             Tue 12 May 2026 07:24:51 +0000
ROA not before:           Tue 12 May 2026 07:19:51 +0000
ROA not after:            Tue 11 May 2027 07:24:51 +0000
asID:                     24139
IP address blocks:        2406:6100:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:0c:82:5f:d2:f9:bc:6a:27:1a:58:c4:e9:71:bc:ad:1a:bb:e3:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA39AE9FC417219D4A84D7759F82869F86905204
        Validity
            Not Before: May 12 07:19:51 2026 GMT
            Not After : May 11 07:24:51 2027 GMT
        Subject: CN=6EBEA17921D7E7459860B045010806B67F72E4D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6e:bc:a0:33:69:85:89:28:b8:41:b0:e9:9c:
                    6c:e2:85:bd:c3:58:98:e4:c1:26:5e:b1:40:af:94:
                    8a:fe:c2:6b:71:b0:e6:ae:56:be:74:8d:fe:1a:4a:
                    25:9c:74:56:9e:a8:54:32:b1:43:b5:b6:c3:b0:08:
                    5f:13:ac:05:56:f5:8c:e9:cc:e3:f3:6c:69:7c:bc:
                    4b:e4:02:99:2e:1c:7b:68:c9:f2:9b:bb:ed:6e:41:
                    ec:c4:4a:5e:04:d5:96:79:be:31:e2:83:30:3a:c5:
                    9e:27:f0:2b:df:d5:33:b0:0c:65:51:70:85:00:3f:
                    a4:ae:b0:84:28:04:5c:da:b2:40:dd:36:c7:4b:84:
                    4e:e7:07:e2:df:24:42:34:b9:42:92:b9:bd:45:3a:
                    f8:b9:34:18:07:9e:e7:50:d9:e1:bd:fc:cf:eb:5f:
                    7c:98:73:73:1a:fa:31:ae:1b:4a:fb:ef:28:5d:0f:
                    85:6f:d0:7a:9f:22:26:54:a5:f3:a9:15:e4:4f:da:
                    91:5d:21:c3:59:b0:10:9d:04:41:22:d5:d8:68:a9:
                    d0:44:94:b9:17:91:0d:16:fb:f7:36:64:50:a5:c3:
                    02:62:d6:2e:3c:9a:f5:11:b8:bf:5f:57:fd:b4:ee:
                    20:63:1d:56:75:2a:be:c2:55:01:cf:05:2f:db:ef:
                    94:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:BE:A1:79:21:D7:E7:45:98:60:B0:45:01:08:06:B6:7F:72:E4:D7
            X509v3 Authority Key Identifier:
                keyid:AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a333030303a3a2f33362d3336203d3e203234313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:6100:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3b:3a:69:88:ba:67:f6:7e:3d:be:54:b4:47:13:91:d6:3f:f7:
         bd:f6:1c:c1:a8:21:02:43:4d:f6:45:24:64:c8:37:ec:26:92:
         9a:86:f9:7d:46:95:97:46:9a:f5:18:8f:dc:c4:54:a0:35:c5:
         6a:57:6a:37:f9:f4:a5:14:53:a0:a5:f4:2b:b3:9f:7a:31:12:
         bc:db:f3:07:52:c1:61:b9:7e:6c:fc:25:e9:1b:78:dc:ab:7e:
         1f:c3:d8:2d:0b:c0:60:be:86:19:37:ec:bd:c1:25:2a:05:8d:
         de:d4:3a:fe:df:2e:c5:1a:69:f2:2a:5e:2c:4e:60:44:de:8c:
         fe:fa:11:7a:7b:1c:b0:8a:ec:ad:e1:e0:32:c8:1c:30:18:e4:
         38:fe:86:82:b1:80:36:76:da:ac:87:60:fe:6b:fb:6c:6c:86:
         c5:51:9e:07:0d:b3:36:00:31:24:7b:4d:1f:c3:cc:f3:a2:1c:
         22:86:8a:5d:91:d1:a0:c5:38:b5:78:3a:79:a9:dd:fc:68:15:
         dd:26:b5:b8:77:eb:47:0c:8d:a8:c9:ed:64:c5:b9:8a:a4:60:
         a7:63:17:a8:e0:18:3f:06:1a:ce:a0:8a:ce:bf:1a:55:5f:63:
         22:01:39:2b:23:74:da:0b:d8:ad:1b:8a:2c:59:54:76:15:9a:
         63:5a:df:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:41:24 2026 by rpki-client