Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a633a3a2f34382d3438203d3e203137343930.roa
File:                     323430313a396130303a633a3a2f34382d3438203d3e203137343930.roa (raw, json)
Hash identifier:          cyhqHUx7FxY/klJoThrEUSrLal/Y8cWq0DRRV24hHu4=
Subject key identifier:   DF:89:06:AF:86:FC:BD:15:65:3F:3F:30:13:E7:AE:79:7C:3E:2F:64
Certificate issuer:       /CN=5253565A27C06C800009631402F5A6EE85C46456
Certificate serial:       5516F82C9A9A01575AD826B300A532848828243D
Authority key identifier: 52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a633a3a2f34382d3438203d3e203137343930.roa
Signing time:             Mon 01 Jun 2026 02:17:12 +0000
ROA not before:           Mon 01 Jun 2026 02:12:12 +0000
ROA not after:            Mon 31 May 2027 02:17:12 +0000
asID:                     17490
IP address blocks:        2401:9a00:c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 07:28:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:16:f8:2c:9a:9a:01:57:5a:d8:26:b3:00:a5:32:84:88:28:24:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5253565A27C06C800009631402F5A6EE85C46456
        Validity
            Not Before: Jun  1 02:12:12 2026 GMT
            Not After : May 31 02:17:12 2027 GMT
        Subject: CN=DF8906AF86FCBD15653F3F3013E7AE797C3E2F64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:13:23:fd:bb:da:46:1f:ca:83:24:f4:95:70:
                    3e:ac:3d:7c:42:50:c8:72:07:97:8a:28:2d:f2:2f:
                    82:f6:94:a3:8c:7a:d8:47:d4:0b:75:d3:96:10:47:
                    3e:4d:9b:56:38:3b:65:40:b1:ff:b2:31:85:07:49:
                    0b:67:8d:9e:30:bf:df:ed:3e:75:56:ba:68:2d:c5:
                    df:47:16:05:f4:a2:8e:8a:f9:6f:4c:00:0b:e7:ee:
                    09:7d:a6:f4:4d:8e:b1:97:fa:70:91:5b:12:15:db:
                    fc:40:a4:a3:ac:ae:e3:e7:37:e5:9e:2c:0a:80:61:
                    5d:84:35:40:14:78:04:2f:f8:69:06:e9:fa:f1:c3:
                    a9:16:9f:98:4b:d3:5d:d6:4e:d7:15:13:7e:24:1f:
                    51:a2:51:90:f5:33:89:c5:06:15:64:4a:18:83:1c:
                    83:0c:41:c7:ec:1b:1c:a5:44:04:e7:64:f8:aa:a7:
                    b6:77:45:79:7c:fe:45:c6:0a:e8:c3:4d:bd:bf:1e:
                    eb:9b:31:ad:e7:2e:f6:af:9d:4c:fd:ca:b6:ca:97:
                    76:cb:61:79:cf:7a:9f:d1:8a:fd:ae:29:92:2b:4b:
                    8a:03:6b:06:4a:79:3c:4d:1d:03:fa:5e:f7:bc:4c:
                    58:cc:75:e5:90:b1:81:66:dd:01:63:e9:47:65:14:
                    f9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:89:06:AF:86:FC:BD:15:65:3F:3F:30:13:E7:AE:79:7C:3E:2F:64
            X509v3 Authority Key Identifier:
                keyid:52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a633a3a2f34382d3438203d3e203137343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:9a00:c::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:e0:49:40:5a:26:21:f6:38:ff:96:4a:79:a7:2d:32:22:0a:
         ac:16:80:c7:a0:91:4b:36:b8:7f:a3:0f:d2:ef:d8:88:72:6b:
         56:5f:78:46:c6:4c:93:7f:cf:12:62:a9:20:bb:33:80:74:eb:
         b6:d3:d9:7d:b7:c3:e7:63:39:ea:82:17:4f:2c:5d:f5:09:3f:
         51:0a:af:0c:c5:19:ea:ea:4b:3f:14:05:df:a9:0f:d9:cb:31:
         54:52:c4:f2:37:37:d5:d6:dd:e4:4e:3d:5c:ca:f0:0f:3c:4b:
         fb:a5:26:39:25:65:c7:53:01:18:40:a2:40:92:c1:71:6d:6d:
         c0:8b:d3:5c:cd:b0:d5:ef:87:e9:74:eb:d1:b8:aa:49:9a:d6:
         97:49:a7:c7:d4:3a:a8:c9:25:25:e3:4c:cb:2c:c7:89:1f:b1:
         8a:42:b1:45:15:73:dd:ad:ae:7d:71:bf:fc:ba:73:66:78:65:
         d7:cd:9c:49:0a:ec:5a:86:04:3c:8c:84:f0:b2:bb:59:30:e7:
         8f:ea:4f:db:a1:9c:fd:89:0b:01:88:9d:97:16:92:e3:3a:cb:
         7c:62:57:63:f5:5d:bf:ef:f8:b0:b2:d8:2f:b0:4b:e2:e6:7b:
         8f:e6:d1:c4:7c:16:8b:04:e6:f5:bd:48:6a:b8:e1:ce:cc:5e:
         16:b2:8f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:02:32 2026 by rpki-client