Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/0/323430323a653763303a34303a3a2f34322d3432203d3e203539303738.roa
File:                     323430323a653763303a34303a3a2f34322d3432203d3e203539303738.roa (raw, json)
Hash identifier:          goD2V1rSu2zowi6VOTodDwpQ4wulOKJZkxmvgOSz2BE=
Subject key identifier:   AE:2B:1F:66:07:39:E0:66:AB:A9:36:16:3C:86:60:49:55:6A:74:F1
Certificate issuer:       /CN=3685DAC8828B3EB4989761422A77AA7B265F96CE
Certificate serial:       39284CE60E1460972276D6A72F9D4D89D1A97CE9
Authority key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/323430323a653763303a34303a3a2f34322d3432203d3e203539303738.roa
Signing time:             Wed 15 Apr 2026 07:51:54 +0000
ROA not before:           Wed 15 Apr 2026 07:46:54 +0000
ROA not after:            Wed 14 Apr 2027 07:51:54 +0000
asID:                     59078
IP address blocks:        2402:e7c0:40::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:28:4c:e6:0e:14:60:97:22:76:d6:a7:2f:9d:4d:89:d1:a9:7c:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE
        Validity
            Not Before: Apr 15 07:46:54 2026 GMT
            Not After : Apr 14 07:51:54 2027 GMT
        Subject: CN=AE2B1F660739E066ABA936163C866049556A74F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5f:34:1f:b1:dd:03:36:a9:59:8e:10:27:67:
                    ec:6f:46:8a:94:f2:86:3d:66:7b:e5:5b:f3:83:20:
                    3e:ef:87:6e:ab:93:b1:4e:21:b2:ab:e2:76:04:d3:
                    14:1e:a6:b2:ab:af:ef:e4:fa:03:47:a0:ce:4b:f9:
                    50:38:5a:eb:64:ce:06:2d:f2:d5:c6:0d:38:c3:13:
                    5f:1a:8b:1d:48:c4:19:ce:b5:ce:8a:9f:b3:10:6a:
                    95:f6:0d:81:5e:a2:e2:78:d0:69:33:32:47:82:f5:
                    20:b6:87:9d:65:48:40:6f:8f:e1:91:8f:b4:d4:c6:
                    c4:c4:10:10:ff:02:08:3e:ba:18:4e:11:69:8b:80:
                    2f:96:58:26:3f:96:c4:06:e2:81:c1:de:6c:b1:85:
                    1f:b2:c7:38:96:41:3e:bd:7d:b2:42:b7:8f:1f:64:
                    ee:77:c2:e2:97:1a:a9:3d:52:43:f3:1d:80:46:a4:
                    55:1f:47:45:9a:d3:8b:0b:59:30:4e:4a:47:e7:e7:
                    5f:b3:97:3a:fa:14:5e:8a:38:7f:c8:a8:41:f9:00:
                    3c:96:d5:5e:10:16:f5:39:fb:e0:19:77:71:24:cd:
                    18:d5:1d:29:25:16:10:0d:1a:76:bc:34:c2:06:a3:
                    42:f7:42:4e:77:22:5c:ba:02:94:ac:84:7c:2d:1c:
                    9b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2B:1F:66:07:39:E0:66:AB:A9:36:16:3C:86:60:49:55:6A:74:F1
            X509v3 Authority Key Identifier:
                keyid:36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/323430323a653763303a34303a3a2f34322d3432203d3e203539303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:e7c0:40::/42

    Signature Algorithm: sha256WithRSAEncryption
         77:71:be:bd:f8:2f:3b:6a:c7:d5:a0:0c:ee:5e:b8:8e:46:35:
         4b:c1:e3:11:50:8a:44:80:cb:ee:20:ce:61:60:ec:c9:53:ac:
         31:6c:f0:7f:29:cc:6e:90:42:d5:28:5f:8e:d0:47:88:67:bf:
         ab:3b:d4:5c:eb:8a:5e:0a:2e:8e:8f:a4:41:e9:f0:f6:be:e9:
         df:4b:7a:c0:5e:4a:31:2b:ab:1f:4b:c4:ba:0b:a5:16:7f:8a:
         a9:49:28:df:d4:2b:75:b7:6e:25:5d:29:55:ed:d5:19:bf:6f:
         9f:76:a4:de:38:c3:bd:61:c3:16:4c:a3:05:df:b3:64:8b:aa:
         6f:df:6d:fc:ee:9b:95:7e:1c:54:6a:c6:05:47:5e:50:db:cb:
         28:2e:95:d2:79:11:85:ed:32:3c:ba:c0:e0:91:b2:20:80:96:
         eb:bd:1f:d1:9d:ac:7d:88:50:46:0e:d5:66:a9:36:66:91:67:
         54:8a:42:da:0a:46:23:4e:b0:0f:84:ef:5b:cb:65:7d:0f:49:
         61:d3:02:8e:be:96:e9:9a:12:f4:64:18:2b:c3:c4:b6:41:3a:
         7a:89:b1:c4:a9:f2:68:fa:db:90:5e:ca:d6:ba:95:3e:41:77:
         15:79:68:25:84:4c:a5:cd:b6:50:1e:f2:bf:ee:84:a9:62:c8:
         77:21:93:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:39:16 2026 by rpki-client