Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/n6V_t1nl4U0wkQyaB1bjssdeVjk.roa
File:                     n6V_t1nl4U0wkQyaB1bjssdeVjk.roa (raw, json)
Hash identifier:          CWmy1ivlq5ump6Lpd9sGJzB3MWvGTxmwsQytw3LunN0=
Subject key identifier:   9F:A5:7F:B7:59:E5:E1:4D:30:91:0C:9A:07:56:E3:B2:C7:5E:56:39
Certificate issuer:       /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial:       15BA
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/n6V_t1nl4U0wkQyaB1bjssdeVjk.roa
Signing time:             Sat 13 Sep 2025 03:06:44 +0000
ROA not before:           Sat 13 Sep 2025 03:06:44 +0000
ROA not after:            Mon 03 Aug 2026 08:44:40 +0000
asID:                     55990
IP address blocks:        113.46.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Oct 2025 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5562 (0x15ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
        Validity
            Not Before: Sep 13 03:06:44 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=9FA57FB759E5E14D30910C9A0756E3B2C75E5639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b7:0a:fd:6a:fa:e4:2a:a6:96:c3:a4:16:30:
                    e1:c1:36:1c:96:32:3d:47:77:80:e9:63:49:5e:0f:
                    39:0e:f3:88:e5:b2:3a:19:5f:ac:55:10:90:b6:d1:
                    ce:92:31:d1:5e:b6:f8:3c:7d:bb:51:ce:e8:42:8b:
                    90:22:78:60:66:a4:4b:62:c3:b4:c0:6e:b3:9b:a5:
                    47:dd:ab:10:72:f1:56:12:88:18:58:28:17:3a:78:
                    7e:2b:1b:23:a8:ff:42:40:ba:51:53:9b:38:65:f4:
                    de:3a:f1:35:f6:84:9c:c9:58:03:ad:61:4c:94:c9:
                    69:31:19:01:91:e7:b6:4d:a8:56:00:55:92:e8:09:
                    85:18:c2:30:43:40:5b:c4:58:0f:36:ef:38:76:0b:
                    2d:47:98:a8:b3:bb:96:e0:01:a8:65:87:59:bb:4e:
                    a1:7e:30:9f:18:a3:6b:93:b1:5c:bc:1e:7a:95:3b:
                    4d:5e:7a:85:ed:78:65:a4:10:fa:6f:2c:82:5b:37:
                    0a:fd:6a:23:bd:7a:0a:aa:7f:fc:b0:8c:fd:4a:a1:
                    78:76:bf:c4:6d:f2:56:9d:9b:fd:12:25:17:21:9a:
                    1e:63:5c:ba:51:db:f5:80:26:84:a0:ac:17:fb:c6:
                    f6:a3:28:35:39:74:6a:41:82:e8:6e:7a:32:ee:0c:
                    ac:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A5:7F:B7:59:E5:E1:4D:30:91:0C:9A:07:56:E3:B2:C7:5E:56:39
            X509v3 Authority Key Identifier:
                keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/n6V_t1nl4U0wkQyaB1bjssdeVjk.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.46.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5e:87:48:56:f1:84:5b:12:54:75:26:18:0a:2a:6b:30:c6:ef:
         bc:a7:c2:cc:52:9b:9e:06:de:31:db:d7:55:b5:18:cf:63:68:
         19:7a:15:e7:59:d3:35:9b:d3:93:60:dd:db:9c:cc:2c:0a:a0:
         73:29:56:bc:12:8f:17:26:b5:4a:d9:66:cb:ca:ee:8e:15:aa:
         84:c6:4c:c1:a8:3b:bb:be:96:c0:2a:48:02:a3:0f:8b:e9:9a:
         da:a2:a4:0f:d8:db:21:ea:c6:e6:6d:f9:3d:f0:f9:20:a1:9c:
         7d:e8:7f:c9:e4:af:75:22:fe:37:de:d5:ff:e0:33:57:d1:81:
         e8:c1:86:1c:3d:a9:b3:db:a0:2f:c2:04:d3:c9:c5:42:fd:c7:
         81:50:51:c0:82:69:12:7e:f8:72:d5:4f:fe:d6:4e:67:9a:1b:
         f7:ba:6d:ee:ac:0e:29:f8:6d:00:57:b0:92:cc:ce:24:64:d0:
         5e:01:95:76:4f:5a:58:f0:73:8c:d8:4a:9b:2c:dc:91:19:35:
         f7:86:f3:24:28:47:89:2a:f1:dc:69:43:cb:d9:2e:a6:d7:e6:
         f5:c6:4b:0b:70:39:ab:71:d8:e9:83:87:e0:75:0f:2d:1c:b1:
         5a:82:8e:b7:61:aa:40:fa:04:04:83:df:b7:ae:63:5d:dd:09:
         ff:4c:8b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:20:58 2025 by rpki-client