Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a393a3a2f34382d3438203d3e203137343930.roa
File:                     323430313a396130303a393a3a2f34382d3438203d3e203137343930.roa (raw, json)
Hash identifier:          iTrXfILKpX9nf1Oxuo48nIwZr8cg+TV+XoxRLsRYWbg=
Subject key identifier:   E9:44:A0:23:40:8D:C2:00:5B:E2:07:C1:D1:44:37:9D:CB:2C:B7:8D
Certificate issuer:       /CN=5253565A27C06C800009631402F5A6EE85C46456
Certificate serial:       4A966C0B6D7C720BB1214C88A5347D1D035F169A
Authority key identifier: 52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a393a3a2f34382d3438203d3e203137343930.roa
Signing time:             Mon 01 Jun 2026 02:14:48 +0000
ROA not before:           Mon 01 Jun 2026 02:09:48 +0000
ROA not after:            Mon 31 May 2027 02:14:48 +0000
asID:                     17490
IP address blocks:        2401:9a00:9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:96:6c:0b:6d:7c:72:0b:b1:21:4c:88:a5:34:7d:1d:03:5f:16:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5253565A27C06C800009631402F5A6EE85C46456
        Validity
            Not Before: Jun  1 02:09:48 2026 GMT
            Not After : May 31 02:14:48 2027 GMT
        Subject: CN=E944A023408DC2005BE207C1D144379DCB2CB78D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:04:63:65:00:9b:39:14:31:c0:f4:9f:0f:51:
                    98:e5:42:6a:a0:2e:d3:90:37:d4:8c:7d:93:19:5c:
                    63:57:cf:86:c7:89:c9:5f:31:50:d2:e8:2a:14:72:
                    33:dd:20:45:f1:67:64:83:22:b6:37:a3:19:b7:0f:
                    cd:dc:eb:7d:25:df:33:58:8e:e0:dc:ef:24:df:e8:
                    53:3f:fc:01:c7:92:73:1a:ca:9b:3b:ae:f3:56:75:
                    0e:4e:98:2f:e0:60:e8:6d:70:4b:17:a1:8f:2b:d9:
                    fa:b4:f7:8c:b0:47:99:7a:14:ad:6e:bc:f5:9e:5d:
                    df:ab:e2:7b:76:47:73:c3:5a:3b:72:d0:0d:57:1b:
                    1f:d3:f7:cc:e5:73:db:76:4c:fb:43:bd:57:25:1a:
                    c0:52:9c:c7:f2:c6:f2:bd:72:52:5d:02:58:93:b8:
                    a2:a5:0d:5e:96:97:c9:94:27:d3:77:ac:9a:65:31:
                    14:fa:9c:70:52:b4:ed:a8:54:29:29:9e:d7:47:d2:
                    21:94:17:9b:aa:75:cd:30:cc:9a:c6:b8:f3:3a:0e:
                    6d:c1:83:2c:f4:8c:99:e7:c7:ec:ab:d0:95:e5:23:
                    d3:8d:56:04:ee:f0:fc:bb:48:5f:d0:83:d0:36:08:
                    de:a4:78:69:9c:8e:4d:9a:40:e0:0e:c1:3f:e1:b4:
                    bf:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:44:A0:23:40:8D:C2:00:5B:E2:07:C1:D1:44:37:9D:CB:2C:B7:8D
            X509v3 Authority Key Identifier:
                keyid:52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a393a3a2f34382d3438203d3e203137343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:9a00:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:28:57:8e:36:0f:9b:66:59:61:ac:d9:07:a3:4f:91:e0:8f:
         cd:16:f1:d2:72:e4:2f:9f:19:00:c8:e0:df:8b:ba:bd:04:f3:
         7b:db:60:f3:36:90:e0:11:d5:b0:49:9d:b1:49:9c:52:a3:23:
         59:be:92:23:86:54:fd:f9:90:4d:b0:0b:9a:0c:e1:e3:48:67:
         63:b8:2d:b4:c9:93:0f:8e:a8:fa:29:8d:56:3e:b9:56:c9:fd:
         13:b0:27:58:27:78:b0:64:2f:37:3e:7e:64:5d:cd:04:a9:d1:
         eb:6f:85:16:24:9d:39:68:bd:f7:b8:2a:1a:61:3f:39:16:8f:
         f3:87:c3:7e:c1:70:04:f4:52:1f:df:11:cb:fb:d4:37:b1:d1:
         e1:f6:93:56:94:f2:28:6e:f7:06:f7:c8:1b:ce:97:20:64:16:
         e3:a9:ed:8c:a4:92:e8:c7:ba:f5:f6:28:b4:21:e1:26:52:99:
         52:b2:bc:bd:b8:45:c3:fa:f9:ae:10:bb:7e:21:b8:a1:39:ce:
         8d:45:eb:23:f0:89:73:80:09:63:62:ad:e9:0c:e4:47:87:4b:
         e8:77:d6:84:78:33:c6:37:21:76:78:dd:d0:a9:29:66:77:bf:
         08:1d:3f:80:9e:e3:63:ea:05:29:7c:e7:29:9c:1c:50:47:8d:
         8b:66:bc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:24:06 2026 by rpki-client