Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947878403/0/323430313a376530303a666666383a3a2f34352d3435203d3e203338333535.roa
File:                     323430313a376530303a666666383a3a2f34352d3435203d3e203338333535.roa (raw, json)
Hash identifier:          ZVOiXJmXMUUoqcqPt09Dq1VOfAp9Wv0un73gutc12gs=
Subject key identifier:   26:A9:2F:AB:42:DF:35:B9:D0:3C:4D:74:D2:B0:FA:DD:9E:C3:AF:A9
Certificate issuer:       /CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0
Certificate serial:       6B41E81F1E385A1C9CCED4AD177F680BC55C8917
Authority key identifier: 57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/323430313a376530303a666666383a3a2f34352d3435203d3e203338333535.roa
Signing time:             Mon 01 Jun 2026 03:34:37 +0000
ROA not before:           Mon 01 Jun 2026 03:29:37 +0000
ROA not after:            Mon 31 May 2027 03:34:37 +0000
asID:                     38355
IP address blocks:        2401:7e00:fff8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 21:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:41:e8:1f:1e:38:5a:1c:9c:ce:d4:ad:17:7f:68:0b:c5:5c:89:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0
        Validity
            Not Before: Jun  1 03:29:37 2026 GMT
            Not After : May 31 03:34:37 2027 GMT
        Subject: CN=26A92FAB42DF35B9D03C4D74D2B0FADD9EC3AFA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:79:91:aa:bb:10:35:0f:80:79:f2:3e:a2:fb:
                    38:8f:8a:14:10:e8:8d:ff:fb:52:54:62:21:ec:de:
                    b2:e7:c4:f0:20:b4:df:47:26:35:88:25:ee:c7:05:
                    6e:5d:b6:56:5b:3b:43:d5:37:95:c3:06:a9:a9:81:
                    44:72:13:a9:4a:72:0c:a1:c4:cf:a9:2e:9f:e0:03:
                    ac:b0:6c:4f:c9:07:c8:72:99:de:e8:0b:04:9d:06:
                    3f:73:9e:eb:5d:59:94:cd:9c:98:9e:4e:23:75:b0:
                    38:d2:87:ec:01:29:7a:c6:97:8b:aa:30:e2:f3:9e:
                    de:00:4d:0b:33:f4:09:96:cb:b7:83:2b:0c:53:f9:
                    12:99:ed:47:b5:e9:a0:09:47:fb:b5:4a:8d:84:9f:
                    83:25:73:e5:9e:e8:8a:25:42:36:15:48:55:b0:c5:
                    88:29:05:3a:0a:ee:95:ce:02:de:55:66:6f:ba:8a:
                    72:19:18:32:e0:1f:a3:6b:3c:29:e4:c6:d5:6b:19:
                    2d:e1:6f:5d:3d:b6:23:8b:e1:d9:6d:84:e4:07:50:
                    5b:b9:96:43:07:99:7f:a4:d0:45:9a:9d:e4:42:d9:
                    16:28:85:7c:30:05:08:12:89:79:d8:3e:bf:c1:37:
                    fe:a8:5b:d9:05:ab:46:54:31:aa:66:09:dc:d6:f5:
                    f9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A9:2F:AB:42:DF:35:B9:D0:3C:4D:74:D2:B0:FA:DD:9E:C3:AF:A9
            X509v3 Authority Key Identifier:
                keyid:57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/323430313a376530303a666666383a3a2f34352d3435203d3e203338333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7e00:fff8::/45

    Signature Algorithm: sha256WithRSAEncryption
         a2:53:d1:2d:06:92:e1:da:56:f2:34:73:2d:32:e8:99:85:c0:
         66:13:0d:01:71:f2:e6:24:9b:b7:af:7d:1a:65:82:42:3b:e7:
         62:7b:ff:8d:9b:83:f9:b0:78:d3:13:e2:f8:5e:49:c7:47:8c:
         6c:8c:57:c7:73:fb:98:de:04:fa:84:fe:84:bb:33:71:7c:1c:
         8c:81:bd:d8:ff:9f:93:de:b7:6d:d5:39:7d:cc:a9:1f:98:83:
         f1:80:b1:ba:c2:0d:00:63:2c:ca:f7:05:d0:bd:c3:95:d0:7e:
         66:a2:cc:b7:69:0a:a6:6d:7f:4c:bd:01:98:69:94:9b:0b:3b:
         95:6b:75:51:2f:5a:3c:5b:31:21:f7:ec:09:1f:c0:b6:ed:24:
         3a:b2:54:10:b0:50:e9:43:c2:42:8a:cd:e8:43:c3:5f:37:34:
         68:b2:4b:d7:5a:6d:1d:52:80:ad:81:f5:ec:91:37:8a:06:64:
         82:12:45:80:14:93:e9:dc:f7:5c:7a:4c:59:3a:c4:e8:17:aa:
         72:ec:b6:cb:4c:9b:8c:da:ba:c9:a8:94:cc:61:41:85:ac:70:
         ec:fc:44:12:d2:9a:9f:d7:5c:7a:b1:fa:69:d9:59:8e:47:1c:
         be:ac:23:12:50:61:2e:83:75:cf:75:55:b3:1a:c1:51:3c:9a:
         86:c0:74:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 11:06:40 2026 by rpki-client