Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a393030303a3a2f33362d3336203d3e203234313339.roa
File:                     323430363a363130303a393030303a3a2f33362d3336203d3e203234313339.roa (raw, json)
Hash identifier:          Dtv0Bsg3TyRUQspcB/o4m7HQ4ZYGoW6tSld2VMwwtjA=
Subject key identifier:   51:A6:E5:2C:58:BF:2D:7B:6E:49:3D:B3:F7:49:01:7E:1F:A8:B1:B2
Certificate issuer:       /CN=AA39AE9FC417219D4A84D7759F82869F86905204
Certificate serial:       17E5718DF0EBE53A8784413298E0224E97B3D911
Authority key identifier: AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a393030303a3a2f33362d3336203d3e203234313339.roa
Signing time:             Tue 12 May 2026 07:24:50 +0000
ROA not before:           Tue 12 May 2026 07:19:50 +0000
ROA not after:            Tue 11 May 2027 07:24:50 +0000
asID:                     24139
IP address blocks:        2406:6100:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e5:71:8d:f0:eb:e5:3a:87:84:41:32:98:e0:22:4e:97:b3:d9:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA39AE9FC417219D4A84D7759F82869F86905204
        Validity
            Not Before: May 12 07:19:50 2026 GMT
            Not After : May 11 07:24:50 2027 GMT
        Subject: CN=51A6E52C58BF2D7B6E493DB3F749017E1FA8B1B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:25:ca:d5:37:4a:14:ad:ef:2e:f9:04:fd:d6:
                    3a:ee:73:d3:e1:7e:34:13:4b:4f:cf:fb:2f:86:88:
                    9e:30:00:1f:ac:98:48:e7:23:8e:d9:31:a6:08:06:
                    35:60:fb:a2:81:62:0d:e7:f2:74:01:ee:45:44:27:
                    4b:52:89:c7:35:df:b8:f4:8a:f9:1a:94:66:a5:93:
                    5e:25:e0:7c:49:6d:cd:ef:25:42:78:ff:2f:d0:df:
                    40:cf:60:83:f1:ab:6f:a2:0c:8f:54:7a:fe:87:18:
                    e5:9a:d9:0c:cc:b2:7a:dd:47:b2:69:f0:1f:47:8d:
                    db:5e:b7:b4:74:e8:b6:1b:05:52:28:71:82:c7:4c:
                    5c:dc:c4:4e:4b:d8:03:fc:2f:d1:85:a7:67:33:d3:
                    16:66:28:b7:43:93:e0:6a:ca:1b:13:34:b8:6f:73:
                    36:e9:79:94:94:1e:ec:74:55:f5:78:af:cc:c8:96:
                    3f:c4:f1:5e:41:c7:ce:9e:12:d9:32:b6:e0:43:f3:
                    a2:4b:62:8e:fd:19:54:2d:37:ca:f1:da:a1:2b:f2:
                    89:ca:04:34:a0:a8:82:6c:57:fe:37:58:50:59:c0:
                    fc:6d:58:43:6e:42:a6:47:d4:f3:7b:06:7a:ec:0d:
                    5d:54:95:01:39:0b:bc:11:0a:d5:d4:9c:f1:16:95:
                    ac:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A6:E5:2C:58:BF:2D:7B:6E:49:3D:B3:F7:49:01:7E:1F:A8:B1:B2
            X509v3 Authority Key Identifier:
                keyid:AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a393030303a3a2f33362d3336203d3e203234313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:6100:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8e:07:b3:9d:af:40:3d:40:77:a8:6c:58:58:17:e3:69:93:6f:
         f8:59:54:1d:50:8c:eb:12:ac:3a:68:87:0a:e7:3b:be:14:55:
         ff:35:ae:99:88:ca:5f:6a:da:d4:59:fe:42:e8:f4:d1:56:ef:
         f6:33:75:a9:19:bd:da:82:ef:2d:43:e0:0b:c3:91:5d:53:e2:
         6a:75:96:66:6f:ce:f4:35:be:b8:3f:30:c4:08:2b:e6:8a:07:
         91:c5:f1:89:05:a4:41:ec:ea:4b:4c:ff:4c:36:97:9f:b5:bc:
         2f:7a:ca:73:09:36:70:a7:09:d4:18:ca:75:af:1d:7f:00:2f:
         6e:a9:72:c3:96:b4:3a:78:a1:4b:cb:be:08:b1:13:16:12:f3:
         66:c7:60:0a:fb:e1:03:a8:05:dd:3a:77:bd:93:8b:ed:2e:42:
         b5:2c:67:61:29:97:29:70:ad:63:a3:bd:e3:cb:f0:11:c1:86:
         47:9e:0a:2d:2f:b7:18:61:cc:ed:06:f3:cb:18:50:f7:15:ca:
         de:09:54:b2:8a:9e:8a:51:5b:5b:cb:b5:31:7a:26:e7:8a:d9:
         00:70:65:40:c5:7d:af:74:8c:0a:1f:43:71:89:e9:08:a8:f1:
         c3:b6:5e:e9:70:c4:78:d8:9e:e5:dd:7b:cc:5e:59:49:c3:02:
         d4:1e:26:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:42:03 2026 by rpki-client