Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079616203099471874/0/323430323a343036303a3a2f33322d3438203d3e20313337373731.roa
File:                     323430323a343036303a3a2f33322d3438203d3e20313337373731.roa (raw, json)
Hash identifier:          QjKlANhm0tw5r7xV3H/kvkMSIsu/YeG6xVH49RnDv8g=
Subject key identifier:   0B:A1:55:83:54:A7:DB:2D:F5:49:B6:20:2D:DA:8F:C3:1D:0F:7A:57
Certificate issuer:       /CN=725E239772427EC7CCCA2C395A80836945A01BD5
Certificate serial:       2B09F5349E0890B0483A3F02D01332E0B299B968
Authority key identifier: 72:5E:23:97:72:42:7E:C7:CC:CA:2C:39:5A:80:83:69:45:A0:1B:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/323430323a343036303a3a2f33322d3438203d3e20313337373731.roa
Signing time:             Fri 27 Feb 2026 04:11:42 +0000
ROA not before:           Fri 27 Feb 2026 04:06:42 +0000
ROA not after:            Fri 26 Feb 2027 04:11:42 +0000
asID:                     137771
IP address blocks:        2402:4060::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 04:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:09:f5:34:9e:08:90:b0:48:3a:3f:02:d0:13:32:e0:b2:99:b9:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725E239772427EC7CCCA2C395A80836945A01BD5
        Validity
            Not Before: Feb 27 04:06:42 2026 GMT
            Not After : Feb 26 04:11:42 2027 GMT
        Subject: CN=0BA1558354A7DB2DF549B6202DDA8FC31D0F7A57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b3:5d:4e:81:4f:a5:ca:7c:f5:30:33:62:e9:
                    2f:11:f4:52:5a:d9:96:c7:0b:76:51:7d:8b:f6:19:
                    73:33:94:4b:cb:e1:5b:ed:cb:f2:e9:97:41:7a:74:
                    72:45:0e:22:35:78:2e:84:b2:8b:09:14:ee:de:78:
                    0e:a0:86:db:1a:64:36:dc:7c:c8:b1:e3:a8:1a:33:
                    f1:70:f1:57:1a:e9:bc:7a:62:17:8c:39:29:86:c8:
                    b9:e3:ea:cf:6a:44:37:85:41:45:b7:db:d2:6a:4e:
                    9f:98:f1:df:cc:60:0b:78:bc:ce:5f:f1:39:47:bf:
                    0a:46:12:a5:ce:5b:c2:3f:ad:07:c2:ff:fc:c9:25:
                    41:40:f6:c1:f0:ed:27:20:e6:ec:ba:97:75:ac:a4:
                    0e:4a:1e:c4:10:2f:5a:47:8f:9a:c4:ba:cd:54:70:
                    43:f4:7e:57:5f:55:9c:75:b7:19:42:7c:08:f3:f3:
                    24:b5:43:69:48:7d:89:75:98:a6:ad:f3:71:f6:d1:
                    ac:a1:a5:f9:f4:bf:70:13:fe:39:52:02:95:0f:b0:
                    57:d2:05:1d:ff:72:9b:74:c0:d2:b6:00:7f:f0:ef:
                    80:e6:f1:a3:a4:bd:d0:e5:d8:0e:5b:9b:b6:92:ef:
                    9a:f1:6e:bb:4b:2d:44:08:3a:0d:b3:c0:a1:aa:29:
                    e1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A1:55:83:54:A7:DB:2D:F5:49:B6:20:2D:DA:8F:C3:1D:0F:7A:57
            X509v3 Authority Key Identifier:
                keyid:72:5E:23:97:72:42:7E:C7:CC:CA:2C:39:5A:80:83:69:45:A0:1B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/323430323a343036303a3a2f33322d3438203d3e20313337373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4060::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:1f:7e:fe:ec:49:3f:dd:6f:74:88:a5:d8:25:3d:87:5b:d3:
         85:45:a6:1f:a4:5c:6a:07:47:8e:29:fa:89:d4:3d:46:7e:68:
         69:d6:fb:2e:e4:27:2f:34:71:b3:64:7c:f3:3f:2d:a4:12:f5:
         85:00:4a:8e:94:1f:8e:58:93:01:13:ce:68:d7:1f:54:b2:70:
         66:e2:ab:d2:aa:b3:82:8d:78:ef:0f:23:ea:a9:8b:aa:14:73:
         7f:d6:b6:46:30:83:ab:87:ca:db:aa:35:3d:8f:5b:1f:26:51:
         d1:63:7f:b8:2d:8a:ca:bc:74:c8:e7:22:8d:25:c7:ab:5c:d3:
         9d:3e:f3:46:88:ba:a5:a6:c7:d9:48:5f:86:00:9d:31:b0:5f:
         27:00:08:49:10:db:8b:0c:f0:70:04:60:6a:c8:51:72:28:28:
         80:a2:cd:12:02:02:87:2b:a4:a8:c3:12:dc:53:c9:d4:61:9c:
         bd:48:9c:09:2f:41:6e:9d:ee:01:11:f3:0f:1a:85:9f:f9:ae:
         47:04:76:37:b1:af:f9:ac:7b:76:e3:1b:11:19:31:cc:9c:02:
         58:dd:d5:6d:43:bb:32:69:9e:8b:7b:bc:8c:e0:6e:1f:dc:41:
         72:65:ce:60:63:0a:63:fd:6f:b2:cf:84:fe:01:34:79:3a:49:
         8f:42:a3:8e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:29:44 2026 by rpki-client