Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a3a2f33362d3336203d3e203234313339.roa
File:                     323430363a363130303a3a2f33362d3336203d3e203234313339.roa (raw, json)
Hash identifier:          KS372/eSv2i+u4bHIZxCPYLZ9s7d9YBvzuhY+9gcHh4=
Subject key identifier:   C3:70:F0:8D:48:DE:A4:0D:03:24:77:C6:6C:C5:77:DF:24:FF:02:87
Certificate issuer:       /CN=AA39AE9FC417219D4A84D7759F82869F86905204
Certificate serial:       6DE78B72E0572F5DA654B39882E4C00B6E35B575
Authority key identifier: AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a3a2f33362d3336203d3e203234313339.roa
Signing time:             Tue 12 May 2026 07:24:50 +0000
ROA not before:           Tue 12 May 2026 07:19:50 +0000
ROA not after:            Tue 11 May 2027 07:24:50 +0000
asID:                     24139
IP address blocks:        2406:6100::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e7:8b:72:e0:57:2f:5d:a6:54:b3:98:82:e4:c0:0b:6e:35:b5:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA39AE9FC417219D4A84D7759F82869F86905204
        Validity
            Not Before: May 12 07:19:50 2026 GMT
            Not After : May 11 07:24:50 2027 GMT
        Subject: CN=C370F08D48DEA40D032477C66CC577DF24FF0287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e3:e0:b3:16:60:87:6a:58:ce:d3:5e:f4:01:
                    6c:ac:49:68:5b:94:45:74:21:8a:d2:7b:72:d8:8b:
                    ed:3c:0e:3f:ed:55:f0:e4:34:6e:c3:58:69:bf:6d:
                    c8:3d:71:b8:aa:aa:76:8b:cf:bb:b8:64:20:09:1f:
                    cd:91:89:60:63:c9:59:6c:8a:b4:ac:85:bc:10:ec:
                    72:a6:17:c8:5f:a4:40:91:87:3d:8f:cf:86:b1:7e:
                    bc:6f:7b:42:36:23:0a:f5:9f:49:5a:61:24:4f:4e:
                    cb:89:a7:99:be:90:1c:76:9a:8e:e8:40:cf:6d:a0:
                    2a:1f:9c:fd:17:84:fd:7b:26:c0:ce:6f:f1:79:97:
                    5d:61:02:8d:67:b1:7e:38:ba:38:dc:85:8a:77:b1:
                    b5:ba:d4:8d:3d:e7:de:0a:4a:80:ac:1c:07:f9:96:
                    ec:86:61:b1:a8:8f:68:d8:84:6e:e6:a9:e1:b5:e1:
                    d4:91:45:82:e5:1c:89:72:cf:07:f5:bd:07:80:5b:
                    57:52:10:6a:9c:f1:7b:f0:69:ac:c1:81:9e:b7:d9:
                    2b:64:91:9a:90:34:53:8b:b5:26:f7:09:13:b7:04:
                    46:cb:03:ca:50:3a:41:b7:95:b9:55:3a:8b:42:cb:
                    17:8d:9f:66:32:21:f8:1b:8a:35:91:fc:c2:6c:56:
                    47:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:70:F0:8D:48:DE:A4:0D:03:24:77:C6:6C:C5:77:DF:24:FF:02:87
            X509v3 Authority Key Identifier:
                keyid:AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a3a2f33362d3336203d3e203234313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:6100::/36

    Signature Algorithm: sha256WithRSAEncryption
         74:6b:f7:b2:0c:97:9b:35:f1:8b:b9:04:11:14:b3:f3:36:9a:
         fa:66:b5:46:f3:e8:4d:49:ad:40:e3:d9:ef:25:96:5e:2a:d1:
         67:f3:d1:74:5a:bd:b9:04:2b:c6:f1:c0:b6:ad:b1:fd:3e:93:
         24:b2:98:75:b1:32:e9:e4:de:ce:16:92:8a:68:14:08:e6:8f:
         27:ab:f2:4f:a7:99:c4:90:2c:7a:00:9a:db:74:f3:1c:c2:05:
         23:e8:7e:96:df:77:b3:28:8e:d7:63:35:83:ad:4d:0d:cf:79:
         b9:30:b1:44:f9:9b:ed:ad:3f:b8:2b:10:2e:44:c3:30:88:d0:
         f3:ab:1d:80:4e:9b:d5:a2:e3:fb:44:8d:0a:01:2d:c5:91:49:
         bd:3f:40:d5:ba:99:17:5a:51:7b:30:71:82:ae:ce:bf:ae:61:
         ab:42:81:19:54:c5:73:b3:ad:44:1c:e7:e4:fd:e0:f5:6b:5b:
         94:65:e6:1c:de:8c:84:18:d8:fc:c8:f1:21:5e:ab:be:dd:38:
         61:e2:0e:7b:06:b2:4a:03:0c:60:8b:c1:71:ac:32:22:e9:f4:
         15:49:e1:21:09:fa:3e:00:8d:b6:ea:d4:06:4c:5d:fe:b3:8c:
         9c:d5:5d:28:5c:0b:49:d8:5a:46:93:84:98:69:0a:2d:07:80:
         9d:8a:ac:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:14:41 2026 by rpki-client