Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a623030303a3a2f33362d3336203d3e203234313339.roa
File:                     323430363a363130303a623030303a3a2f33362d3336203d3e203234313339.roa (raw, json)
Hash identifier:          f5fHl8wuWkXU6z2K2DrpawCQDN9O6wL8Ty6pgADDBdA=
Subject key identifier:   14:CE:A0:AF:F2:D9:F4:99:D8:38:FC:75:C7:EF:A2:CD:D2:F1:14:5E
Certificate issuer:       /CN=AA39AE9FC417219D4A84D7759F82869F86905204
Certificate serial:       71C1FA79AD1F3477B793BB0D0056C17DAA6F08C6
Authority key identifier: AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a623030303a3a2f33362d3336203d3e203234313339.roa
Signing time:             Tue 12 May 2026 07:24:50 +0000
ROA not before:           Tue 12 May 2026 07:19:50 +0000
ROA not after:            Tue 11 May 2027 07:24:50 +0000
asID:                     24139
IP address blocks:        2406:6100:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c1:fa:79:ad:1f:34:77:b7:93:bb:0d:00:56:c1:7d:aa:6f:08:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA39AE9FC417219D4A84D7759F82869F86905204
        Validity
            Not Before: May 12 07:19:50 2026 GMT
            Not After : May 11 07:24:50 2027 GMT
        Subject: CN=14CEA0AFF2D9F499D838FC75C7EFA2CDD2F1145E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:48:d6:82:d4:bc:0e:e9:26:6a:d6:71:00:fe:
                    dd:fe:04:49:9f:a8:1a:89:8c:fa:23:8b:d9:6a:75:
                    15:55:72:02:5f:2c:b5:46:7e:1c:45:39:b0:fe:aa:
                    40:40:fb:4d:24:39:5b:cc:d5:f2:5e:81:4f:8c:07:
                    83:a2:2a:a2:fe:99:ad:d3:68:7f:b7:34:85:cc:b4:
                    bd:4c:71:fc:87:30:da:95:d3:ec:52:f9:0f:e8:d2:
                    c8:ba:30:cd:01:53:ec:06:ca:c3:7d:45:b5:eb:23:
                    31:aa:64:9c:9e:bb:01:33:5e:ad:6a:e7:5f:8b:1f:
                    16:4b:0a:4c:b6:03:c4:21:55:f6:f8:01:c3:a6:18:
                    1b:fd:af:90:ba:36:23:fc:d3:1c:2f:1e:5e:72:c8:
                    f5:75:6e:81:16:c2:5c:65:11:54:e6:26:f1:ed:19:
                    2a:9a:27:ff:e3:1a:1e:4d:35:00:0b:47:17:a9:77:
                    f2:4f:4a:36:a0:bd:d4:a6:cd:e2:ea:c4:84:b1:ad:
                    6e:6a:0e:5d:42:43:76:ef:6d:3b:d6:f0:7a:57:18:
                    e1:fb:cd:5f:fd:eb:c2:ac:14:0c:f7:40:24:a5:c8:
                    71:a8:24:a2:5e:19:37:e6:64:e8:2d:96:55:e6:50:
                    88:40:a0:4f:22:86:4d:b1:36:39:4c:ff:23:e3:b6:
                    89:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CE:A0:AF:F2:D9:F4:99:D8:38:FC:75:C7:EF:A2:CD:D2:F1:14:5E
            X509v3 Authority Key Identifier:
                keyid:AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/323430363a363130303a623030303a3a2f33362d3336203d3e203234313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:6100:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6c:55:f6:88:e0:ee:f2:d6:29:3a:28:4e:14:62:17:44:e3:1a:
         b0:b0:8c:83:06:ed:c0:67:79:a0:ea:d2:4b:51:44:21:13:8c:
         a1:ec:a8:08:6f:d1:bf:9d:24:b8:b6:89:de:4f:fe:13:f3:c3:
         4e:5b:33:a0:22:02:48:53:40:af:0f:bf:7a:3d:2c:2a:31:05:
         ff:6d:b2:18:22:5f:84:36:fc:d8:11:3f:88:42:30:bc:79:2f:
         f4:16:18:a7:a9:27:bd:9f:9c:9a:56:04:6c:76:c0:d4:d5:47:
         a9:e8:f6:23:dd:ff:1d:0e:f2:1e:6c:af:2d:fb:fd:b9:a9:0d:
         25:79:af:79:ca:f2:f4:5d:99:b1:19:e6:ee:ed:a9:e7:4f:31:
         80:9c:2b:60:3e:ca:a6:24:68:a6:c6:ca:b4:09:f8:bb:1f:c7:
         2a:84:22:7f:69:a4:46:28:6d:8f:48:ca:55:3c:7f:19:99:3a:
         d7:e0:be:21:fb:fa:31:89:fa:1a:f5:55:62:e1:c1:ec:21:42:
         a1:f3:0b:44:71:7c:13:07:33:a1:04:f6:bd:d6:28:f9:3c:f3:
         7b:84:ff:75:72:c8:d2:61:40:69:4c:0c:6a:28:29:d4:ba:a9:
         cf:09:25:ea:2e:b7:4f:41:c3:b3:61:5b:7f:c8:86:44:55:00:
         25:15:03:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:42:03 2026 by rpki-client