Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a363a3a2f34382d3438203d3e203137343930.roa
File:                     323430313a396130303a363a3a2f34382d3438203d3e203137343930.roa (raw, json)
Hash identifier:          K5GFCeRtG5eFgO77/YBKJJ0Xp/CpMEePW3+Bb4pst68=
Subject key identifier:   C9:9C:4E:79:02:6F:BF:C9:60:A8:F0:C6:DA:71:A0:F9:A8:EF:EB:3D
Certificate issuer:       /CN=5253565A27C06C800009631402F5A6EE85C46456
Certificate serial:       328F46745CC4FBD6FECD31A82126FF10E62E3180
Authority key identifier: 52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a363a3a2f34382d3438203d3e203137343930.roa
Signing time:             Mon 01 Jun 2026 02:14:48 +0000
ROA not before:           Mon 01 Jun 2026 02:09:48 +0000
ROA not after:            Mon 31 May 2027 02:14:48 +0000
asID:                     17490
IP address blocks:        2401:9a00:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 07:28:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:8f:46:74:5c:c4:fb:d6:fe:cd:31:a8:21:26:ff:10:e6:2e:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5253565A27C06C800009631402F5A6EE85C46456
        Validity
            Not Before: Jun  1 02:09:48 2026 GMT
            Not After : May 31 02:14:48 2027 GMT
        Subject: CN=C99C4E79026FBFC960A8F0C6DA71A0F9A8EFEB3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:01:f3:37:ab:bd:12:28:7d:ae:99:63:bd:1d:
                    ee:81:f0:f1:29:a8:1d:3a:61:f8:91:58:37:f5:d7:
                    1a:4a:af:e4:c2:6d:84:29:fc:5d:3c:92:5b:44:a5:
                    80:ca:1a:7c:4e:bf:e0:d2:a4:6c:6e:af:f7:93:40:
                    5a:a9:e0:5a:af:38:0b:80:8d:a5:b6:58:a4:be:76:
                    37:84:b3:be:49:d7:f1:8a:60:d4:52:23:40:e8:0a:
                    18:8e:d3:5a:ee:6c:7b:0d:e7:b6:01:40:55:82:59:
                    71:d8:1a:47:4b:5d:d7:6c:29:fa:00:01:67:f8:cd:
                    9c:6f:78:cd:74:c0:04:e7:ac:d0:31:ba:dc:77:05:
                    d5:9a:7d:a8:99:90:13:78:af:07:1b:56:62:83:fa:
                    d1:25:2b:f5:e4:3b:f3:65:0b:94:63:84:9c:01:fb:
                    50:11:18:3e:d5:c6:62:90:67:6d:30:0c:a5:1d:1d:
                    96:28:df:9e:26:5d:8c:95:5d:49:53:02:ba:0b:cf:
                    ba:bc:68:9d:99:49:20:79:be:45:6c:da:f9:e9:b4:
                    e5:9c:53:8d:50:45:18:68:17:dd:bf:80:e2:96:20:
                    c3:43:fb:dd:76:4b:1d:2c:ab:57:60:6d:f9:3a:4b:
                    74:30:90:02:37:1e:ac:1d:13:64:f9:22:42:e6:bf:
                    d2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:9C:4E:79:02:6F:BF:C9:60:A8:F0:C6:DA:71:A0:F9:A8:EF:EB:3D
            X509v3 Authority Key Identifier:
                keyid:52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a363a3a2f34382d3438203d3e203137343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:9a00:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:f3:cd:ae:74:24:3e:a9:9c:8d:1d:57:a2:cd:5d:3e:12:0f:
         c9:bd:14:ea:9f:5c:56:fd:57:8f:65:de:32:f1:c8:d2:af:ea:
         4f:49:61:af:f6:0d:6a:83:d7:95:52:15:34:9a:ed:27:1b:77:
         a1:eb:eb:23:eb:cc:91:0b:54:37:44:a3:d0:03:45:0c:8a:4b:
         21:df:5b:57:d7:eb:10:b5:03:85:4f:c8:c1:a7:a7:fb:da:5e:
         e1:9c:01:f9:f0:a5:cb:ed:1d:48:74:bf:98:4a:62:b5:68:70:
         16:ad:98:35:bb:06:8d:88:2d:0d:41:16:e3:fa:d9:32:a6:ca:
         e8:55:88:29:28:0f:49:ef:c2:01:08:6f:14:ad:80:10:11:74:
         0f:4d:84:52:79:a6:39:e3:11:17:c4:97:3e:35:30:aa:e0:71:
         17:a5:c9:50:7b:b2:e2:f9:c9:c0:58:c3:76:95:c5:c9:c8:8c:
         21:83:26:5a:d5:e3:54:c1:a1:6c:b5:6b:db:cd:64:4e:46:59:
         3e:b2:96:24:c6:8a:96:1f:aa:55:02:b9:c5:f8:a5:b9:e3:b0:
         f7:bc:a6:d9:fd:c9:fc:4d:14:e9:7a:eb:1a:eb:e6:9c:4c:bc:
         2e:b9:8b:88:73:db:d3:6d:4a:38:be:0f:24:35:cb:99:a6:81:
         6d:fa:76:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:02:03 2026 by rpki-client