Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/323430353a653030303a3a2f33322d3438203d3e203337393633.roa
File:                     323430353a653030303a3a2f33322d3438203d3e203337393633.roa (raw, json)
Hash identifier:          LLk+wL4dYmNtV+Ttmv8QW35kUZaNPcs2hOl7TcDkV+Y=
Subject key identifier:   78:FB:AF:6F:2B:B4:FA:B6:C7:FF:E5:2F:CF:45:50:7C:12:7E:AB:04
Certificate issuer:       /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
Certificate serial:       228E4EFEE9AA9DB6FA0BAAA8EA62BEEE9651F8E3
Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/323430353a653030303a3a2f33322d3438203d3e203337393633.roa
Signing time:             Thu 26 Feb 2026 03:17:51 +0000
ROA not before:           Thu 26 Feb 2026 03:12:51 +0000
ROA not after:            Thu 25 Feb 2027 03:17:51 +0000
asID:                     37963
IP address blocks:        2405:e000::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Mar 2026 23:48:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:8e:4e:fe:e9:aa:9d:b6:fa:0b:aa:a8:ea:62:be:ee:96:51:f8:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
        Validity
            Not Before: Feb 26 03:12:51 2026 GMT
            Not After : Feb 25 03:17:51 2027 GMT
        Subject: CN=78FBAF6F2BB4FAB6C7FFE52FCF45507C127EAB04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:37:9c:e6:b9:c7:e1:b6:2b:1e:79:a6:e4:f2:
                    56:7c:97:37:8c:53:bc:f9:04:27:d6:07:4f:94:53:
                    b4:25:46:76:f1:b6:9f:80:b0:20:be:71:69:86:4b:
                    8b:71:75:aa:22:4c:80:5a:52:61:22:14:f8:aa:e7:
                    13:7d:97:41:bc:39:26:4f:b0:e5:c4:aa:93:40:ec:
                    ee:ed:23:45:90:e3:84:1f:3b:72:78:87:ba:b7:5e:
                    8e:b4:cf:c7:d9:db:23:66:7f:ae:38:71:96:d4:70:
                    93:27:ed:92:61:70:d0:12:71:f6:5f:b7:64:6e:34:
                    42:66:53:3c:e2:9b:24:64:db:da:21:92:4a:1a:10:
                    42:19:29:06:fd:ea:40:80:57:f5:22:be:f8:cb:a2:
                    6a:9b:9e:04:fb:b1:90:81:e0:94:25:48:a3:30:35:
                    11:50:d7:ec:63:b2:3d:56:c5:9d:5e:4b:5e:f7:36:
                    47:ee:28:41:77:0f:2a:1d:48:b0:79:b9:03:0e:ed:
                    54:5c:09:55:2b:68:6d:73:50:98:e9:af:11:16:f5:
                    d9:03:45:8b:da:4f:c6:7d:5d:fd:00:c0:fd:e4:0f:
                    bb:9a:41:fc:5f:f6:f8:6b:b9:f8:25:88:75:ee:97:
                    12:23:17:ac:5d:59:7e:32:80:07:01:d5:8a:0d:b0:
                    59:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:FB:AF:6F:2B:B4:FA:B6:C7:FF:E5:2F:CF:45:50:7C:12:7E:AB:04
            X509v3 Authority Key Identifier:
                keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/323430353a653030303a3a2f33322d3438203d3e203337393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:e000::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:b8:38:d3:e1:82:af:b6:2b:9e:ee:b2:a9:c3:0a:5f:56:81:
         58:f7:27:54:34:88:ae:05:03:d6:f8:e2:82:c4:b1:0d:7e:30:
         cc:f4:e4:32:14:7d:f0:07:3d:77:81:0e:36:41:64:23:a3:cf:
         59:ad:e3:83:9c:25:cc:d2:9d:91:16:9e:28:53:d5:ea:ef:bf:
         f3:40:61:0f:40:e3:0b:e3:60:89:12:61:2e:b0:db:09:96:3c:
         94:7d:6b:2d:51:67:ac:27:a6:44:7d:f2:fa:28:e0:1d:96:c3:
         a0:54:b8:a5:9c:da:6d:ea:b4:ed:23:68:90:25:0e:97:9b:38:
         81:07:bd:63:65:53:25:88:2a:02:99:8b:32:fa:f0:fa:7f:01:
         d3:f3:2d:47:2b:16:07:a7:6b:d7:6f:24:ed:8f:74:57:35:08:
         46:1a:0c:5e:44:98:00:2c:19:4f:4d:fb:36:57:09:33:85:e0:
         53:56:c6:22:a5:35:12:05:8d:67:16:f6:15:28:09:eb:f4:d2:
         3c:08:cf:58:1a:da:d1:9b:a4:47:98:f6:26:07:4f:f5:b1:1f:
         57:0d:ae:54:dd:4f:b9:36:06:a7:25:b4:50:fc:2d:e9:93:d8:
         20:d0:7e:83:b8:fd:91:49:f1:84:90:a4:f0:b3:dc:4c:b6:1e:
         ad:b2:2a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:24:33 2026 by rpki-client