Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/323430313a376438303a3a2f33322d3332203d3e2030.roa
File:                     323430313a376438303a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier:          jdtYoW8ZHExPzhCvIERDf5p0YE3WyLH/OCprc9HBcS0=
Subject key identifier:   05:11:C3:EE:7E:B9:2F:1E:B7:27:CB:A3:EE:AB:02:E9:EC:8F:3D:2E
Certificate issuer:       /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Certificate serial:       6633077A66A950B5E6FF36086CCDBAB78A32AF1A
Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/323430313a376438303a3a2f33322d3332203d3e2030.roa
Signing time:             Wed 15 Apr 2026 03:18:53 +0000
ROA not before:           Wed 15 Apr 2026 03:13:53 +0000
ROA not after:            Wed 14 Apr 2027 03:18:53 +0000
asID:                     0
IP address blocks:        2401:7d80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 17:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:33:07:7a:66:a9:50:b5:e6:ff:36:08:6c:cd:ba:b7:8a:32:af:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
        Validity
            Not Before: Apr 15 03:13:53 2026 GMT
            Not After : Apr 14 03:18:53 2027 GMT
        Subject: CN=0511C3EE7EB92F1EB727CBA3EEAB02E9EC8F3D2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:af:5d:42:b5:25:b5:a7:31:1d:0b:3c:6b:13:
                    78:0c:6d:db:4a:f4:69:d9:5c:0a:08:ac:24:3a:d8:
                    5c:d5:72:e7:30:ae:d2:37:4f:be:5e:4b:55:e2:1b:
                    10:e0:7d:1a:2e:67:09:21:1d:ea:a5:4e:aa:d2:e4:
                    0e:41:26:73:1a:29:0e:23:e6:69:ce:2b:82:54:39:
                    47:f9:8f:29:a5:ea:ec:4d:87:a3:e1:95:b8:69:d1:
                    bb:7f:55:37:c9:85:1a:c7:68:c9:a7:c5:d0:39:df:
                    c9:7a:a7:ed:27:a9:10:85:eb:fa:12:5e:41:1d:9f:
                    b9:20:a7:44:8d:6f:90:bd:7f:bd:ac:aa:b8:e3:be:
                    81:dd:29:f2:f2:e2:e2:8a:a1:e0:95:f4:a2:27:38:
                    2a:f1:37:62:5b:04:20:75:7d:91:9c:50:20:c2:af:
                    73:16:53:7c:e1:5e:57:56:fe:4c:46:a2:5e:bb:4a:
                    32:e9:de:25:96:af:b1:05:9d:37:10:e7:b7:23:96:
                    8d:44:68:d3:c8:84:50:fd:a2:99:4e:57:2e:b5:a3:
                    d3:d4:62:01:46:02:d2:96:76:7e:ad:44:fd:e2:43:
                    be:c0:d1:fe:48:39:9f:51:5d:a9:8c:f8:52:db:5c:
                    7a:77:e2:fb:b0:9f:36:b6:6e:9a:06:6d:57:f3:9d:
                    d2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:11:C3:EE:7E:B9:2F:1E:B7:27:CB:A3:EE:AB:02:E9:EC:8F:3D:2E
            X509v3 Authority Key Identifier:
                keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/323430313a376438303a3a2f33322d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:8c:38:bd:6e:4b:17:c5:9e:60:88:a1:80:cd:cb:84:85:bb:
         46:2a:6d:98:56:55:d8:a9:3a:df:d8:48:84:98:a4:3b:25:60:
         04:87:22:09:87:51:20:81:7f:50:19:52:eb:80:d5:4e:29:1e:
         b5:72:05:5c:9b:83:36:fb:d0:87:47:4b:d6:aa:47:4f:fe:17:
         9a:bd:eb:41:b7:2d:00:c1:48:41:82:3a:d4:43:b0:1e:11:64:
         aa:37:f9:a6:4d:13:cc:7a:e6:5b:1e:0f:39:60:5b:a1:54:2e:
         72:73:a2:2d:04:60:5e:69:86:57:86:7b:91:58:00:de:8e:12:
         da:5e:c6:a7:9c:c4:ad:1e:93:f8:83:07:e6:e1:20:8e:19:63:
         c8:60:89:06:23:8c:8d:19:d1:43:59:8d:bc:af:ea:18:8e:e2:
         cb:c3:46:78:e8:65:4d:74:cf:4f:5d:3b:0e:47:99:1e:15:35:
         b5:3a:49:4e:b1:f9:eb:8c:e7:23:53:62:c6:af:4f:73:75:63:
         38:76:5f:0b:0c:0e:9a:d8:3f:f1:a7:21:da:45:2a:e3:13:17:
         de:b7:17:de:04:f6:0c:00:1c:28:03:f7:2e:b1:64:7e:9d:e2:
         c7:ab:90:73:3a:56:81:3f:d4:6b:6f:c0:eb:d4:8e:48:6e:b4:
         4f:db:da:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:36:04 2026 by rpki-client