Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714881025/0/323430363a383838303a3a2f33322d3332203d3e20313531323936.roa
File:                     323430363a383838303a3a2f33322d3332203d3e20313531323936.roa (raw, json)
Hash identifier:          VM1qHITDY0vlR5ts4U5Mlsvp4cbzTSQCBviUKQgtlBQ=
Subject key identifier:   47:73:85:88:FF:4B:02:1F:DB:D5:64:9A:C2:15:05:AB:88:CC:D6:6C
Certificate issuer:       /CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Certificate serial:       3F22C613C1691E7F0758E30C9FC8BAA8385AACEF
Authority key identifier: 79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/323430363a383838303a3a2f33322d3332203d3e20313531323936.roa
Signing time:             Fri 17 Apr 2026 07:58:08 +0000
ROA not before:           Fri 17 Apr 2026 07:53:08 +0000
ROA not after:            Fri 16 Apr 2027 07:58:08 +0000
asID:                     151296
IP address blocks:        2406:8880::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:22:c6:13:c1:69:1e:7f:07:58:e3:0c:9f:c8:ba:a8:38:5a:ac:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
        Validity
            Not Before: Apr 17 07:53:08 2026 GMT
            Not After : Apr 16 07:58:08 2027 GMT
        Subject: CN=47738588FF4B021FDBD5649AC21505AB88CCD66C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:69:3b:45:07:71:52:d4:1d:1c:38:d1:ce:a3:
                    9d:1b:ce:ee:a9:4b:28:1e:da:af:ce:05:08:58:20:
                    d3:6c:86:e4:c6:79:91:fd:d2:b5:f8:62:87:ba:c2:
                    96:66:b3:85:35:1e:29:68:81:92:51:af:0c:7a:54:
                    70:d9:58:0f:c7:03:46:98:f0:e3:f4:90:80:26:ad:
                    31:57:60:80:8f:17:3a:4b:92:f6:87:a8:3f:53:e8:
                    38:e9:f6:0b:9a:c6:53:86:86:85:1a:e7:d9:fc:db:
                    d1:96:23:61:0b:f5:52:24:b0:63:21:53:47:83:fb:
                    dc:e8:3d:f1:9b:28:cd:04:e7:c0:5e:99:bd:55:ce:
                    a9:58:b1:d4:72:2c:f5:2b:3c:62:68:80:76:b0:91:
                    17:6b:30:bb:7d:83:b3:34:74:12:91:66:f3:f3:43:
                    72:8c:b3:cc:d5:9a:42:24:a9:37:8f:92:34:49:ad:
                    64:2f:fa:b4:9a:47:81:38:2a:f4:b5:ef:92:09:2d:
                    2c:c5:97:e1:a5:cc:05:c9:19:ce:31:f2:51:7d:c2:
                    45:4a:c9:aa:1e:86:34:b8:c7:24:4e:9b:22:aa:44:
                    a0:04:5a:75:b5:24:6b:92:b3:74:f7:6e:22:30:b8:
                    b1:96:fa:06:46:25:1d:10:6e:6a:0a:71:6a:22:d0:
                    39:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:73:85:88:FF:4B:02:1F:DB:D5:64:9A:C2:15:05:AB:88:CC:D6:6C
            X509v3 Authority Key Identifier:
                keyid:79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/323430363a383838303a3a2f33322d3332203d3e20313531323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:8880::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:f5:0c:a9:92:aa:6a:9e:b9:6f:48:4c:0d:bf:4c:ac:87:65:
         44:ca:7c:44:15:28:30:91:b9:5a:f0:98:3d:5d:61:de:26:e8:
         17:db:f3:ec:db:24:22:79:79:39:fa:59:a0:71:02:ce:0e:42:
         03:5d:25:82:9f:39:b1:d9:ec:8e:6e:96:3a:79:a7:9b:49:5a:
         70:bc:be:b8:1e:de:3c:9a:9a:ea:56:9c:82:59:aa:02:d0:f6:
         03:dd:d7:40:59:91:f9:05:d8:7d:d3:ea:56:eb:1b:ff:fb:c1:
         76:15:99:d0:db:b5:89:25:c2:53:56:5e:fa:4b:63:08:f1:fd:
         20:9d:83:1a:b7:56:ff:16:95:2e:87:76:23:1a:0c:ae:07:3d:
         36:38:1c:7b:52:82:68:c5:fa:22:ee:ea:15:40:db:6f:a4:d7:
         c4:12:53:2d:27:81:be:1f:35:79:02:19:e5:e5:4c:83:6c:68:
         d0:80:85:90:3d:76:55:99:b1:e1:8b:42:28:a4:fe:62:ae:26:
         8a:9c:ad:98:83:d9:77:fc:fa:5f:9c:a7:f1:02:07:c3:9d:cf:
         cb:05:53:9b:19:4e:c2:c7:50:04:56:90:0f:71:9a:eb:56:87:
         dd:ab:d9:aa:0a:3b:45:ac:4f:fd:9a:29:a5:39:34:d0:2c:18:
         81:db:5b:07
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:32:20 2026 by rpki-client