Route Origin Authorization

$ rpki-client -vvf rpki.net.baiyuexiao.cn/repo/BAIYUEXIAO-RPKI/1/326131343a373538303a663466663a3a2f34382d3438203d3e20323131353735.roa
File:                     326131343a373538303a663466663a3a2f34382d3438203d3e20323131353735.roa (raw, json)
Hash identifier:          0tVhUsoVDqzvBd5yaHHkZLdw14W6UQ7V1ZQ8HMK7vYU=
Subject key identifier:   1F:8F:B0:0C:A7:B8:FA:FE:27:69:CC:C2:B4:2E:C5:14:9A:B5:FD:04
Certificate issuer:       /CN=C74BDD2558EB2CD59758DCBFC830A7C70D197F8C
Certificate serial:       7E3A81B54289CC48725E79F8E3555C26ABCADE23
Authority key identifier: C7:4B:DD:25:58:EB:2C:D5:97:58:DC:BF:C8:30:A7:C7:0D:19:7F:8C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/C74BDD2558EB2CD59758DCBFC830A7C70D197F8C.cer
Subject info access:      rsync://rpki.net.baiyuexiao.cn/repo/BAIYUEXIAO-RPKI/1/326131343a373538303a663466663a3a2f34382d3438203d3e20323131353735.roa
Signing time:             Thu 23 Jul 2026 15:47:50 +0000
ROA not before:           Thu 23 Jul 2026 15:42:50 +0000
ROA not after:            Thu 22 Jul 2027 15:47:50 +0000
asID:                     211575
IP address blocks:        2a14:7580:f4ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.net.baiyuexiao.cn/repo/BAIYUEXIAO-RPKI/1/C74BDD2558EB2CD59758DCBFC830A7C70D197F8C.crl
                          rsync://rpki.net.baiyuexiao.cn/repo/BAIYUEXIAO-RPKI/1/C74BDD2558EB2CD59758DCBFC830A7C70D197F8C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/C74BDD2558EB2CD59758DCBFC830A7C70D197F8C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:3a:81:b5:42:89:cc:48:72:5e:79:f8:e3:55:5c:26:ab:ca:de:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C74BDD2558EB2CD59758DCBFC830A7C70D197F8C
        Validity
            Not Before: Jul 23 15:42:50 2026 GMT
            Not After : Jul 22 15:47:50 2027 GMT
        Subject: CN=1F8FB00CA7B8FAFE2769CCC2B42EC5149AB5FD04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:51:65:7d:24:47:f4:7d:58:b3:ce:38:5d:82:
                    48:c5:31:c6:62:79:23:0e:4e:4a:3a:50:38:34:1b:
                    75:0c:93:f1:e6:d4:25:81:7d:67:04:64:bc:d3:fd:
                    63:69:6f:04:93:a3:74:4f:a6:07:98:81:43:44:be:
                    19:b6:e7:fa:d5:85:dc:80:58:c3:a5:af:66:df:32:
                    17:1e:30:de:1f:a1:58:80:36:01:1d:51:60:6d:e5:
                    bc:81:53:43:e7:5e:92:e2:ad:5f:77:c3:f3:42:43:
                    07:b1:75:6a:d7:3d:46:35:55:d0:cb:5a:24:ed:22:
                    08:ef:c5:6a:2e:cb:29:ab:15:6b:24:48:a7:3a:b7:
                    40:cb:c6:24:55:b0:f5:47:84:e4:0e:e1:84:4f:09:
                    26:6b:8b:9e:5a:11:de:9f:e1:83:80:3a:b3:37:8f:
                    c6:76:ea:2c:46:7e:8a:7c:2e:67:8a:0c:22:f9:dd:
                    74:f6:41:5d:3e:06:8d:71:b9:f2:a0:10:09:a2:4b:
                    d3:aa:28:28:fa:18:c5:f3:e5:d9:2b:9d:7d:1b:42:
                    b7:e1:dd:d4:fd:ac:f4:27:cb:93:76:fb:65:88:50:
                    66:4e:18:0f:91:30:10:23:5f:55:c3:5c:66:b1:cf:
                    29:4c:a1:62:08:ae:01:c6:89:7f:6f:3b:9e:bf:6d:
                    6f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8F:B0:0C:A7:B8:FA:FE:27:69:CC:C2:B4:2E:C5:14:9A:B5:FD:04
            X509v3 Authority Key Identifier:
                keyid:C7:4B:DD:25:58:EB:2C:D5:97:58:DC:BF:C8:30:A7:C7:0D:19:7F:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.net.baiyuexiao.cn/repo/BAIYUEXIAO-RPKI/1/C74BDD2558EB2CD59758DCBFC830A7C70D197F8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/C74BDD2558EB2CD59758DCBFC830A7C70D197F8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.net.baiyuexiao.cn/repo/BAIYUEXIAO-RPKI/1/326131343a373538303a663466663a3a2f34382d3438203d3e20323131353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:f4ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:ac:29:e7:3f:9a:45:ac:24:f7:24:2c:6b:a2:d6:08:1b:38:
         0a:06:ee:9a:7e:b9:57:be:87:56:34:51:2c:f5:03:e8:49:11:
         ad:55:d8:c7:85:e7:ec:df:bb:d7:9a:fd:9f:43:f1:81:8c:9f:
         65:a5:ff:fe:6f:35:af:58:34:fb:b7:cf:3e:2f:c1:3c:fb:57:
         5d:9c:25:2f:0c:dc:d8:08:24:25:1d:08:eb:a6:bb:1b:b9:11:
         5a:a0:78:49:91:5d:de:3c:2f:c5:04:a6:d0:7e:47:c0:39:b7:
         57:05:c0:f7:fb:8e:73:32:2c:f7:d1:5b:62:6b:ca:cb:f7:99:
         56:38:00:24:24:12:9d:8b:22:e7:62:b9:04:03:d1:33:92:fb:
         26:84:e3:27:70:47:e6:b5:b4:d2:5e:f9:da:9d:53:f4:5f:d4:
         ee:8f:d8:fe:c1:98:66:95:2a:83:99:b6:8d:42:a3:e9:40:cc:
         27:e5:25:1a:59:ad:70:96:80:5c:b6:1a:1a:74:4c:84:b2:03:
         ac:46:b9:1c:07:8b:34:ad:99:a7:12:0e:94:56:a7:53:89:b8:
         55:2d:f3:fb:bd:46:13:03:c5:b3:3a:7a:5c:14:d3:dd:90:9f:
         d9:a3:49:45:ad:b4:f1:49:57:83:55:6b:8f:71:00:ad:ae:da:
         c2:a9:54:78
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:43 2026 by rpki-client