Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a353a3a2f34382d3438203d3e203137343930.roa
File:                     323430313a396130303a353a3a2f34382d3438203d3e203137343930.roa (raw, json)
Hash identifier:          4WychwwCHETIc36fWKONOxE90QNLPpoRYeH8tjTiyTU=
Subject key identifier:   6D:3C:98:53:6B:A5:8C:77:22:01:3C:EF:26:31:A8:D1:14:47:7C:57
Certificate issuer:       /CN=5253565A27C06C800009631402F5A6EE85C46456
Certificate serial:       79435BF5D2FA058EAA2ED7E075AD09BAE5BC7EA5
Authority key identifier: 52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a353a3a2f34382d3438203d3e203137343930.roa
Signing time:             Mon 01 Jun 2026 02:14:49 +0000
ROA not before:           Mon 01 Jun 2026 02:09:49 +0000
ROA not after:            Mon 31 May 2027 02:14:49 +0000
asID:                     17490
IP address blocks:        2401:9a00:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:43:5b:f5:d2:fa:05:8e:aa:2e:d7:e0:75:ad:09:ba:e5:bc:7e:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5253565A27C06C800009631402F5A6EE85C46456
        Validity
            Not Before: Jun  1 02:09:49 2026 GMT
            Not After : May 31 02:14:49 2027 GMT
        Subject: CN=6D3C98536BA58C7722013CEF2631A8D114477C57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:92:26:01:e5:b0:ac:97:e3:46:c1:1b:64:4c:
                    bc:0b:d7:47:26:7f:d0:15:17:f1:95:37:e6:9d:91:
                    ac:53:4f:55:a4:a4:f0:16:e8:1e:a3:ef:3f:64:2e:
                    88:80:fb:44:ac:2a:fc:5a:48:c5:55:da:45:60:e1:
                    62:bf:7d:ec:43:2b:08:cd:88:68:06:fe:2f:d8:11:
                    97:2c:e2:35:01:1a:06:dd:14:1f:46:54:50:34:f8:
                    9a:4f:a6:45:06:e2:26:d9:ed:1a:84:e3:69:53:35:
                    dd:52:ce:85:9b:37:07:9a:4a:aa:8c:4b:dd:2d:8a:
                    99:c8:5e:01:5f:0b:fa:1f:82:0b:fc:1e:5b:34:db:
                    ca:02:66:88:17:54:a7:4b:11:96:26:54:fc:c6:ee:
                    eb:f2:dc:8e:ba:48:b6:3e:80:95:62:5b:97:79:29:
                    ca:87:b4:3f:59:0a:ff:f0:45:4f:b8:65:9c:f1:76:
                    1d:d9:07:d0:74:40:2c:10:6d:3d:80:9b:3e:4a:a9:
                    ae:d1:f9:eb:a0:bb:cd:39:ac:56:86:10:de:9c:02:
                    f6:d5:e7:c2:c9:13:18:5c:a7:ee:7d:14:af:ae:b9:
                    3e:8f:fc:b4:a2:54:1b:79:5a:ab:42:aa:dd:57:55:
                    4f:6a:12:1a:b3:90:2f:c0:39:2d:35:84:bf:02:64:
                    9e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3C:98:53:6B:A5:8C:77:22:01:3C:EF:26:31:A8:D1:14:47:7C:57
            X509v3 Authority Key Identifier:
                keyid:52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a353a3a2f34382d3438203d3e203137343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:9a00:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:c6:e7:9f:dc:34:2c:e1:29:c5:9f:9d:f0:c6:a4:82:97:85:
         48:bb:6d:5f:5f:e1:77:97:aa:bd:0d:c6:38:ac:42:f7:68:32:
         69:bb:85:5d:73:8b:7c:98:8f:1c:0e:02:81:c1:ca:72:11:56:
         86:0e:cb:dc:8d:ce:6b:f8:ac:f7:4d:74:4d:e8:33:9c:28:db:
         79:a0:78:e1:bd:ca:af:4a:92:fc:0e:7a:a0:5c:2a:ac:bd:00:
         1a:39:54:9a:96:0b:0e:79:51:f6:e7:02:8b:12:d9:fd:02:35:
         c9:ed:0f:e2:5f:35:d0:59:e5:99:4f:d9:0d:a4:25:8b:57:9a:
         23:0d:02:09:05:da:a4:ff:93:d9:cf:17:9a:85:6d:d5:16:1a:
         3d:e4:41:a9:12:ce:f7:37:5b:e3:6f:93:33:63:de:36:8e:1d:
         3e:17:2e:d3:ab:a4:a2:ef:9e:cd:89:b6:0d:27:89:9d:64:cb:
         dd:13:8e:07:e3:c1:ba:01:cb:3f:a0:3b:f7:cc:f4:7b:ac:b9:
         9c:dc:1c:58:fa:51:eb:96:9d:41:22:0a:64:11:98:93:b9:45:
         9b:82:8c:f2:46:a9:9e:8e:76:bc:f7:e5:e6:89:ff:dd:38:e1:
         69:b0:be:36:9f:b5:e3:cb:69:ef:b3:2c:d1:d8:7a:c2:7f:66:
         ab:e2:a3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:24:07 2026 by rpki-client