Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/323430333a346338303a3a2f34382d3438203d3e203233373234.roa
File:                     323430333a346338303a3a2f34382d3438203d3e203233373234.roa (raw, json)
Hash identifier:          sjXPx2W8FA2lwA4lPp9dbO6vjQOZbUVExJ17HnTJgb0=
Subject key identifier:   6D:45:F0:A1:DB:C2:A1:0D:AF:2F:E6:84:E7:D4:3B:1F:56:39:41:0B
Certificate issuer:       /CN=098D421CB46F292F13CE71DF3D685D5E82893289
Certificate serial:       1A606C3F25B9C525CC23E14ACBC3AE1F8DA1BBA7
Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/323430333a346338303a3a2f34382d3438203d3e203233373234.roa
Signing time:             Tue 02 Jun 2026 07:55:20 +0000
ROA not before:           Tue 02 Jun 2026 07:50:20 +0000
ROA not after:            Tue 01 Jun 2027 07:55:20 +0000
asID:                     23724
IP address blocks:        2403:4c80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 14:23:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:60:6c:3f:25:b9:c5:25:cc:23:e1:4a:cb:c3:ae:1f:8d:a1:bb:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289
        Validity
            Not Before: Jun  2 07:50:20 2026 GMT
            Not After : Jun  1 07:55:20 2027 GMT
        Subject: CN=6D45F0A1DBC2A10DAF2FE684E7D43B1F5639410B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a5:be:3d:76:e1:05:f6:4a:a1:cc:59:90:69:
                    5e:8c:e3:ab:94:55:b9:66:c8:12:af:ac:c5:4f:3a:
                    5b:77:9e:ac:5e:ad:d9:29:b2:ef:82:76:3b:96:0d:
                    e7:3f:66:db:dd:d9:1e:cf:45:53:05:eb:88:c6:13:
                    ac:82:2a:9f:2f:36:53:92:76:c0:1d:4f:9c:12:a3:
                    a9:d4:8d:47:5d:23:92:89:3b:6a:2c:da:9c:8d:a3:
                    6a:d8:58:ee:c7:3e:cb:85:1f:b5:e0:e5:e3:e0:84:
                    b0:9f:0e:39:bc:dc:25:37:d3:b0:e7:f4:9b:c1:2b:
                    b6:ce:04:9a:02:8e:d5:20:f8:66:ec:f2:e5:4a:93:
                    3a:dd:00:31:2f:44:68:ab:78:80:dd:6c:ce:ff:31:
                    7d:aa:38:52:b2:c4:43:20:f2:ca:7a:e6:37:06:20:
                    44:fb:ff:13:3c:13:c5:60:82:7c:d8:71:2b:3b:6b:
                    a4:13:b7:a7:0f:e7:55:67:f5:4b:61:5c:2c:96:f0:
                    aa:bb:ea:dd:2b:83:33:35:4d:82:f9:71:c1:6c:81:
                    67:ab:bc:18:89:9b:64:c4:c6:0e:b8:ae:0a:f5:01:
                    66:72:00:a5:2a:a3:38:4a:33:de:fc:66:63:4d:09:
                    ea:11:58:79:45:4e:50:76:53:58:7d:39:d6:3a:b8:
                    c0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:45:F0:A1:DB:C2:A1:0D:AF:2F:E6:84:E7:D4:3B:1F:56:39:41:0B
            X509v3 Authority Key Identifier:
                keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/323430333a346338303a3a2f34382d3438203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:4c80::/48

    Signature Algorithm: sha256WithRSAEncryption
         c1:3d:17:92:74:f6:36:ec:bb:0b:50:fc:88:1a:1a:b9:ae:eb:
         2f:71:97:dd:30:75:44:6b:a1:d7:08:df:e2:fd:d9:f1:93:18:
         5d:3f:38:97:22:14:84:7a:40:5d:da:ff:05:5f:c4:47:c6:33:
         5b:bd:cf:54:9c:8a:a0:e0:f2:a1:a3:c8:58:9d:d3:92:a2:cb:
         40:74:a2:3c:bd:0f:0e:4b:bc:66:ec:13:c4:5b:bf:cd:8c:71:
         83:3e:04:5e:e5:8c:a8:f8:84:5a:88:67:26:54:13:63:97:f2:
         96:4c:17:7b:40:9a:ea:32:ba:2b:21:eb:88:3c:05:93:32:02:
         d1:52:df:ea:80:df:a5:93:6d:b8:a0:c2:c8:4e:08:29:56:6b:
         a4:79:29:48:a5:04:c1:37:07:e2:fe:16:ac:57:4e:f9:33:22:
         50:b9:1e:8c:aa:51:99:f2:4a:57:fc:e9:fe:48:71:0c:13:cc:
         d4:9b:15:56:7e:6b:ab:2e:5b:7a:a0:59:19:54:4a:1c:45:92:
         85:3d:79:2b:13:cf:af:47:d9:09:78:1b:2a:1b:a2:c1:eb:38:
         9d:24:47:d3:2c:06:39:6c:f1:7a:a3:65:e4:76:59:7b:ce:57:
         aa:a0:b3:c8:ca:73:7e:56:e9:81:be:b0:c8:dd:74:25:46:34:
         55:53:3b:19
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:36:30 2026 by rpki-client