Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346733569/0/323430363a646438303a3a2f33322d3338203d3e20333938373034.roa
File:                     323430363a646438303a3a2f33322d3338203d3e20333938373034.roa (raw, json)
Hash identifier:          ENP5tby2AQP2mIEBBre2hkAZ950/9PGnJK3kH/gWR+s=
Subject key identifier:   6C:77:AB:5C:8B:23:1D:D3:04:29:5E:98:5C:4F:2F:2E:8A:67:D4:DE
Certificate issuer:       /CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20
Certificate serial:       4E2620ABE264A130A308434A2D71789B55726B7F
Authority key identifier: 7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/323430363a646438303a3a2f33322d3338203d3e20333938373034.roa
Signing time:             Fri 12 Jun 2026 07:10:15 +0000
ROA not before:           Fri 12 Jun 2026 07:05:15 +0000
ROA not after:            Fri 11 Jun 2027 07:10:15 +0000
asID:                     398704
IP address blocks:        2406:dd80::/32 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:26:20:ab:e2:64:a1:30:a3:08:43:4a:2d:71:78:9b:55:72:6b:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20
        Validity
            Not Before: Jun 12 07:05:15 2026 GMT
            Not After : Jun 11 07:10:15 2027 GMT
        Subject: CN=6C77AB5C8B231DD304295E985C4F2F2E8A67D4DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4a:9d:03:05:33:d0:e0:68:c6:25:36:af:8e:
                    83:17:12:20:d6:62:63:53:05:db:66:d6:8f:cd:8c:
                    8c:e5:c2:ee:e0:6b:50:9d:c9:16:2b:b5:e8:43:67:
                    ba:64:d2:6c:01:9e:f3:9f:e7:2e:e4:2b:0a:13:f2:
                    cc:3c:6d:eb:bb:17:d1:54:5e:b7:5f:35:62:51:31:
                    05:55:3a:a9:9a:6e:7e:53:12:0f:14:d5:8e:3c:5b:
                    ab:26:77:ab:da:46:bd:bb:55:01:f6:a2:15:4c:52:
                    7f:45:1f:da:30:e3:66:73:4a:30:d0:70:15:c7:11:
                    08:83:09:22:48:9e:b4:14:f8:6f:2f:ff:57:31:30:
                    a7:0d:04:1a:c2:2d:f4:58:c5:70:75:86:34:d1:20:
                    9b:39:fc:97:f0:bc:aa:51:86:84:45:75:f6:d6:43:
                    55:fc:8b:1d:26:b5:bf:cd:e0:21:00:23:64:35:da:
                    11:3c:0f:36:97:82:07:21:6d:82:95:12:d0:ac:e0:
                    c8:75:64:5e:3a:db:d6:81:7e:50:08:08:39:64:b9:
                    b4:de:ce:51:f1:13:ea:2d:6a:2f:6a:ed:3a:c0:22:
                    bc:e6:60:2d:ea:16:e1:b9:f6:b0:6c:1c:19:3a:2d:
                    94:ff:c5:af:66:6e:6f:b7:21:16:b9:a9:c5:3c:fd:
                    cb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:77:AB:5C:8B:23:1D:D3:04:29:5E:98:5C:4F:2F:2E:8A:67:D4:DE
            X509v3 Authority Key Identifier:
                keyid:7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/323430363a646438303a3a2f33322d3338203d3e20333938373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:d0:7f:a1:b8:99:81:9d:bc:e9:17:c8:83:6c:f5:5f:cc:d3:
         8e:90:4a:34:0d:4c:01:7a:31:2a:87:c2:a9:4d:cf:81:c3:8e:
         57:d7:a2:90:cc:c4:be:a9:b7:e0:4a:de:df:10:5b:93:fd:2d:
         0c:0a:c6:b4:7e:cc:47:0e:13:9b:e1:3b:81:74:12:ea:8f:80:
         c0:e7:8a:08:e8:fe:6f:cf:82:58:08:22:00:07:9c:bb:0f:75:
         a1:5a:9a:de:6c:b1:fb:a3:82:ca:1d:60:eb:01:b2:7f:3f:0f:
         86:05:55:23:1a:35:59:2d:6a:1b:e9:d4:f8:85:f6:0c:aa:f4:
         87:93:dc:ae:70:7a:0d:76:3e:62:31:22:d8:8f:71:60:92:6f:
         47:89:b5:09:4f:20:d4:7a:18:d6:ee:6d:8c:0e:eb:2a:58:bf:
         aa:0d:31:31:01:fb:a7:02:b8:49:25:c6:22:90:84:8e:fa:0d:
         0a:2b:5a:ed:d6:37:5d:c2:2b:bd:b2:91:3e:af:cc:31:01:6c:
         44:fe:af:bd:d5:3d:0b:45:2e:60:28:0d:13:20:a4:c8:4f:aa:
         c1:4a:65:e7:0a:ba:d0:88:87:35:27:74:b4:5f:30:60:8d:9b:
         b0:e7:24:e7:75:b0:5c:3e:49:69:01:af:f3:a6:59:e1:68:b5:
         8c:ec:7f:ba
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:05:55 2026 by rpki-client