Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/323430373a323363303a3a2f34382d3438203d3e20313331353136.roa
File:                     323430373a323363303a3a2f34382d3438203d3e20313331353136.roa (raw, json)
Hash identifier:          wcGi4BVAeDcAp/nOf2xkGsZ/mRWopZ/upq8jqtv04OM=
Subject key identifier:   AB:45:9E:D0:84:FE:36:5B:DA:36:E9:5F:83:4D:D4:89:08:1E:5F:19
Certificate issuer:       /CN=25C6596195B162409A5AFAA92570F258BAD3C42D
Certificate serial:       4930966C2252768073976C6EE6851881716E462D
Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/323430373a323363303a3a2f34382d3438203d3e20313331353136.roa
Signing time:             Fri 12 Jun 2026 17:53:20 +0000
ROA not before:           Fri 12 Jun 2026 17:48:20 +0000
ROA not after:            Fri 11 Jun 2027 17:53:20 +0000
asID:                     131516
IP address blocks:        2407:23c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 14:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:30:96:6c:22:52:76:80:73:97:6c:6e:e6:85:18:81:71:6e:46:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D
        Validity
            Not Before: Jun 12 17:48:20 2026 GMT
            Not After : Jun 11 17:53:20 2027 GMT
        Subject: CN=AB459ED084FE365BDA36E95F834DD489081E5F19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:13:25:69:86:d0:6d:ea:88:18:d9:69:9a:68:
                    66:e9:57:b7:e4:f0:47:df:86:bc:d9:a6:34:87:e4:
                    a4:47:4f:6b:4e:60:53:e0:50:08:73:56:4f:0a:43:
                    74:e7:af:f0:94:d2:53:a5:20:1b:40:c3:42:44:11:
                    a7:27:c3:55:1f:b5:61:ef:a5:79:51:67:01:aa:e3:
                    0d:64:ee:53:1c:ff:a7:31:0d:62:8b:6a:0d:2d:e8:
                    3e:f4:68:08:f4:4e:89:eb:8c:43:e0:f7:e5:60:c0:
                    f4:b0:4e:49:04:15:f9:c1:da:dd:29:4c:52:80:56:
                    c6:cf:4c:70:e0:00:9d:5e:2b:b8:18:54:85:73:7a:
                    bf:5b:e9:30:f5:7c:62:33:55:1f:13:08:31:f7:e7:
                    34:08:0e:e7:c4:2f:37:ef:11:1e:d0:cd:1f:0f:a5:
                    2f:4d:0e:53:6d:93:9c:48:d4:f8:fc:ba:3b:28:f3:
                    64:e2:bc:72:47:7d:8c:78:a1:de:a7:1f:0e:94:1f:
                    c5:e9:f9:18:30:92:75:c5:c4:10:06:fe:47:01:f7:
                    9d:aa:6f:75:7b:42:2d:9f:c3:fd:45:4e:90:1c:8e:
                    29:69:bc:06:44:e6:d3:74:c6:ea:b1:b7:86:63:22:
                    39:a3:d7:70:81:ef:a4:65:1a:95:e1:be:9b:e0:aa:
                    b2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:45:9E:D0:84:FE:36:5B:DA:36:E9:5F:83:4D:D4:89:08:1E:5F:19
            X509v3 Authority Key Identifier:
                keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/323430373a323363303a3a2f34382d3438203d3e20313331353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:23c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:4f:e4:07:96:46:4a:7f:c4:ce:90:76:59:61:e9:46:e5:1b:
         62:b2:a6:c0:cc:3c:99:3f:b2:08:af:c5:ae:71:2d:6a:2c:3e:
         67:ca:d2:cf:85:44:0f:21:e2:21:36:4d:e6:71:64:91:f6:7c:
         b8:6c:05:c5:be:a5:f4:7e:6e:62:18:eb:3a:d0:7e:93:8f:b5:
         50:9e:8b:b4:b7:35:a6:ba:1c:d6:04:52:b2:fa:39:31:f4:bb:
         65:77:d0:d5:65:c3:ad:af:bf:5c:b5:dc:d7:42:00:14:26:b3:
         0c:3f:23:f3:7b:6b:ff:21:4a:8e:ca:d9:4a:2f:b0:bf:60:90:
         67:9a:da:8b:3c:3f:bc:53:5e:3b:6f:db:82:95:0f:1f:32:1e:
         1e:b6:ef:d7:c6:99:3e:1c:bf:f6:b4:23:c7:01:19:6c:f9:1f:
         0c:c0:cb:c4:38:5a:2a:37:23:48:36:1d:ec:c5:42:02:fa:c0:
         75:fe:62:f8:1c:ec:77:56:34:42:72:7e:97:0e:26:a7:6c:04:
         82:09:2a:37:ee:80:c7:5c:e2:1c:1b:e1:e7:1d:92:38:bf:f3:
         b6:3f:23:be:cf:ec:4d:84:3f:51:bc:e7:34:38:dd:86:26:20:
         a6:84:60:25:ca:6e:df:0a:45:54:56:f5:a4:94:89:ef:11:c3:
         d7:8e:16:68
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUSTCWbCJSdoBzl2xu5oUYgXFuRi0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThC
QUQzQzQyRDAeFw0yNjA2MTIxNzQ4MjBaFw0yNzA2MTExNzUzMjBaMDMxMTAvBgNV
BAMTKEFCNDU5RUQwODRGRTM2NUJEQTM2RTk1RjgzNERENDg5MDgxRTVGMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsEyVphtBt6ogY2WmaaGbpV7fk
8EffhrzZpjSH5KRHT2tOYFPgUAhzVk8KQ3Tnr/CU0lOlIBtAw0JEEacnw1UftWHv
pXlRZwGq4w1k7lMc/6cxDWKLag0t6D70aAj0TonrjEPg9+VgwPSwTkkEFfnB2t0p
TFKAVsbPTHDgAJ1eK7gYVIVzer9b6TD1fGIzVR8TCDH35zQIDufELzfvER7QzR8P
pS9NDlNtk5xI1Pj8ujso82TivHJHfYx4od6nHw6UH8Xp+RgwknXFxBAG/kcB952q
b3V7Qi2fw/1FTpAcjilpvAZE5tN0xuqxt4ZjIjmj13CB76RlGpXhvpvgqrIPAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUq0We0IT+NlvaNulfg03UiQgeXxkwHwYDVR0j
BBgwFoAUJcZZYZWxYkCaWvqpJXDyWLrTxC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNjk5NjM1NS8wLzI1QzY1OTYxOTVCMTYyNDA5QTVBRkFBOTI1NzBG
MjU4QkFEM0M0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThCQUQzQzQyRC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4NTkxMTIxNjk5NjM1NS8wLzMyMzQzMDM3M2Ez
MjMzNjMzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzMTM1MzEzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQC
AAIwCQMHACQHI8AAADANBgkqhkiG9w0BAQsFAAOCAQEAYE/kB5ZGSn/EzpB2WWHp
RuUbYrKmwMw8mT+yCK/FrnEtaiw+Z8rSz4VEDyHiITZN5nFkkfZ8uGwFxb6l9H5u
YhjrOtB+k4+1UJ6LtLc1proc1gRSsvo5MfS7ZXfQ1WXDra+/XLXc10IAFCazDD8j
83tr/yFKjsrZSi+wv2CQZ5raizw/vFNeO2/bgpUPHzIeHrbv18aZPhy/9rQjxwEZ
bPkfDMDLxDhaKjcjSDYd7MVCAvrAdf5i+Bzsd1Y0QnJ+lw4mp2wEggkqN+6Ax1zi
HBvh5x2SOL/ztj8jvs/sTYQ/UbznNDjdhiYgpoRgJcpu3wpFVFb1pJSJ7xHD144W
aA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:25 2026 by rpki-client