Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a343030303a3a2f33362d3336203d3e203234313339.roa
File:                     323430363a363130303a343030303a3a2f33362d3336203d3e203234313339.roa (raw, json)
Hash identifier:          Nc+iO12T5PwOZ1omW+heF25TZ/63WJlMCVihooShVAQ=
Subject key identifier:   8D:7B:A5:29:E8:21:D5:29:ED:23:08:01:14:CD:A2:E3:25:CB:0D:C1
Certificate issuer:       /CN=AA39AE9FC417219D4A84D7759F82869F86905204
Certificate serial:       507C79B5E25A0831EE3A20449E052AAE7E453BA3
Authority key identifier: AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a343030303a3a2f33362d3336203d3e203234313339.roa
Signing time:             Tue 12 May 2026 07:24:50 +0000
ROA not before:           Tue 12 May 2026 07:19:50 +0000
ROA not after:            Tue 11 May 2027 07:24:50 +0000
asID:                     24139
IP address blocks:        2406:6100:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:7c:79:b5:e2:5a:08:31:ee:3a:20:44:9e:05:2a:ae:7e:45:3b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA39AE9FC417219D4A84D7759F82869F86905204
        Validity
            Not Before: May 12 07:19:50 2026 GMT
            Not After : May 11 07:24:50 2027 GMT
        Subject: CN=8D7BA529E821D529ED23080114CDA2E325CB0DC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:06:cb:b9:16:39:ae:79:b1:87:e7:0f:db:00:
                    98:c8:0f:17:36:38:a6:d3:8b:46:6b:7f:0c:e9:4a:
                    9d:ef:07:1d:44:c6:d4:23:21:a2:2c:03:9a:8b:da:
                    94:75:74:51:23:4f:8c:3e:c7:64:b8:f6:05:d5:60:
                    4f:13:a4:0f:71:de:eb:43:2f:d5:74:67:5d:25:e6:
                    10:10:95:46:c8:9f:9a:3a:41:3b:fc:23:da:c9:7f:
                    99:b2:5c:04:30:08:2e:14:1c:a0:ab:3f:58:9c:98:
                    49:29:9f:39:c3:44:b1:5c:b4:2d:7a:34:9b:68:82:
                    af:4e:c2:ea:eb:08:69:99:c0:22:25:34:92:78:b4:
                    c7:18:69:46:2a:8b:56:ea:75:ab:06:3e:d0:7a:df:
                    0c:d1:f7:ae:00:bc:35:1e:1a:26:28:53:99:e0:fa:
                    b2:09:e6:7f:51:0a:42:d6:05:08:e0:17:54:c8:32:
                    15:72:60:bd:01:d1:d2:b9:6e:0f:70:bb:5f:91:da:
                    72:6f:0f:46:4f:df:63:13:38:36:a3:d5:03:32:f8:
                    0d:04:1f:5e:d9:01:c3:79:fe:50:91:98:a9:4d:de:
                    37:7b:5e:93:99:d5:9e:41:20:6a:22:f0:69:32:85:
                    77:00:59:66:84:9c:30:07:08:fe:8c:31:81:ac:70:
                    df:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:7B:A5:29:E8:21:D5:29:ED:23:08:01:14:CD:A2:E3:25:CB:0D:C1
            X509v3 Authority Key Identifier:
                keyid:AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a343030303a3a2f33362d3336203d3e203234313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:6100:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         89:c0:e7:9e:89:40:4b:3f:fe:6f:1c:05:31:d0:1a:a0:50:4f:
         d2:20:6a:3a:f0:fc:c6:6e:e3:46:76:fc:e7:95:5c:ec:ca:29:
         ca:27:42:a6:5e:fc:b2:a5:52:e1:29:24:9b:91:27:8e:2a:ca:
         ae:f0:35:95:ef:0e:66:30:0f:58:bb:e6:6a:b4:d6:a4:0d:7b:
         8b:75:6b:cb:26:c2:54:13:01:b5:4c:b0:b7:2d:8b:d1:f6:1b:
         70:9c:80:76:53:c4:d7:94:05:6d:48:7c:a8:63:c9:35:fe:84:
         6a:d4:e3:6c:33:ce:35:8b:8d:19:4c:fd:ff:cd:dd:0a:e3:6a:
         67:7f:1f:71:b2:87:46:4f:cb:86:25:c9:a0:7d:98:b2:c1:6a:
         4e:ba:02:8a:4e:1b:ea:fe:a9:0f:e2:bc:65:1f:da:39:a4:06:
         63:59:e6:13:59:7a:ba:67:41:31:36:fc:b0:9a:ed:c2:d3:2c:
         1b:7c:95:c4:87:a5:53:ad:d6:0f:f3:b2:ea:9b:36:a9:b5:7c:
         fc:3c:ca:e5:20:b1:58:99:55:c8:3c:86:fe:dc:06:f3:78:f9:
         fd:9d:ca:35:30:50:cc:66:77:e6:9f:4b:1c:b1:d5:90:63:06:
         14:15:57:f3:bb:96:52:b4:c2:a5:79:5a:e9:bb:95:b7:ee:d1:
         0d:cc:a6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:41:38 2026 by rpki-client