Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094151769384026113/0/323430333a633938303a3a2f33322d3332203d3e203633353631.roa
File:                     323430333a633938303a3a2f33322d3332203d3e203633353631.roa (raw, json)
Hash identifier:          LnEW+MqErgFvFR2MVyYR/WeWy4hulmeFDFQj7VfGAzM=
Subject key identifier:   0F:49:92:14:71:49:64:6D:B6:AB:D2:8B:D5:21:E5:41:34:4C:5A:74
Certificate issuer:       /CN=6741F95ED93FC3D5B5930C845F43187AE27BCF32
Certificate serial:       2F505B2D49364ACDCAE265C81A6F954FE1C01FE9
Authority key identifier: 67:41:F9:5E:D9:3F:C3:D5:B5:93:0C:84:5F:43:18:7A:E2:7B:CF:32
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6741F95ED93FC3D5B5930C845F43187AE27BCF32.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094151769384026113/0/323430333a633938303a3a2f33322d3332203d3e203633353631.roa
Signing time:             Fri 10 Apr 2026 01:41:23 +0000
ROA not before:           Fri 10 Apr 2026 01:36:23 +0000
ROA not after:            Fri 09 Apr 2027 01:41:23 +0000
asID:                     63561
IP address blocks:        2403:c980::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094151769384026113/0/6741F95ED93FC3D5B5930C845F43187AE27BCF32.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094151769384026113/0/6741F95ED93FC3D5B5930C845F43187AE27BCF32.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6741F95ED93FC3D5B5930C845F43187AE27BCF32.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 03:09:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:50:5b:2d:49:36:4a:cd:ca:e2:65:c8:1a:6f:95:4f:e1:c0:1f:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6741F95ED93FC3D5B5930C845F43187AE27BCF32
        Validity
            Not Before: Apr 10 01:36:23 2026 GMT
            Not After : Apr  9 01:41:23 2027 GMT
        Subject: CN=0F4992147149646DB6ABD28BD521E541344C5A74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fd:f9:af:96:17:12:44:a6:78:67:9c:2d:9d:
                    3a:40:cd:3d:2a:1b:cf:94:5d:88:d1:bf:ed:2e:23:
                    0e:33:a4:bb:a4:fa:88:e6:af:db:c9:50:48:60:57:
                    18:8d:62:66:22:68:28:3d:b2:8f:99:da:1d:5c:ba:
                    02:7a:8c:3b:65:2f:38:a7:a8:83:a4:f7:57:48:9e:
                    cb:4b:c4:0d:76:82:5d:5e:11:c3:32:bb:1a:22:8e:
                    23:a7:b4:b3:6e:93:24:3c:e9:53:e3:31:ae:43:86:
                    4f:c5:aa:68:6d:71:f4:04:03:77:2c:f8:44:05:9d:
                    72:10:f1:55:e7:4d:72:db:d4:03:c6:79:f3:a4:d1:
                    d5:e4:99:9a:bb:e0:bf:97:05:ec:fd:67:7e:75:3e:
                    dc:8a:cb:48:82:2f:41:ba:fc:17:dd:8b:a2:4e:56:
                    db:ff:9e:43:7d:f7:65:18:c7:6d:93:a5:a6:66:55:
                    d4:a8:5e:8d:9c:58:3e:b0:d4:80:69:8d:99:06:33:
                    01:52:45:b8:73:9a:ac:56:4e:70:62:8c:89:4d:7a:
                    52:f8:9d:8e:77:2e:07:8e:0b:16:94:b0:5c:3b:ad:
                    70:87:47:80:8c:1c:6d:d0:81:c7:65:7c:47:bd:33:
                    9b:a8:75:de:3f:cf:05:d6:31:12:f6:7a:f1:14:99:
                    56:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:49:92:14:71:49:64:6D:B6:AB:D2:8B:D5:21:E5:41:34:4C:5A:74
            X509v3 Authority Key Identifier:
                keyid:67:41:F9:5E:D9:3F:C3:D5:B5:93:0C:84:5F:43:18:7A:E2:7B:CF:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094151769384026113/0/6741F95ED93FC3D5B5930C845F43187AE27BCF32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6741F95ED93FC3D5B5930C845F43187AE27BCF32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094151769384026113/0/323430333a633938303a3a2f33322d3332203d3e203633353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:c980::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:c5:92:b4:b3:e1:6c:5d:18:ed:fd:45:22:5e:b9:92:51:eb:
         c5:61:a8:68:d1:3d:85:b3:bc:11:3f:0a:0a:c2:b7:07:8b:95:
         b0:4d:ff:c6:76:5e:35:7e:6c:8b:aa:c7:47:4c:24:fd:96:aa:
         a5:c1:8c:9e:c2:03:a7:f6:6f:cf:13:1d:83:28:b9:6d:85:b7:
         fc:45:b7:9a:55:c3:ee:8e:77:fb:d8:9f:09:a4:8a:2b:e9:9b:
         13:5c:7a:f7:6e:ee:18:2a:58:12:e6:b2:40:af:7d:93:90:12:
         05:96:28:70:89:21:7b:2b:c3:eb:8d:21:89:a0:c6:38:43:30:
         38:ff:f4:d4:03:95:b1:7e:82:66:49:d7:c5:f0:7a:07:c2:d8:
         e6:af:29:b2:b8:77:f9:bf:73:0a:b7:bf:a6:af:15:3b:c4:6c:
         ca:a8:e2:29:ea:36:ff:f9:52:41:40:7f:2a:81:1b:cc:cc:9c:
         a3:d3:18:30:fa:b2:ab:f4:4d:3b:ec:b4:00:58:38:45:d7:72:
         a6:fe:72:e4:40:2d:11:f5:65:e1:0d:5c:83:1e:32:3f:d0:f2:
         1f:0d:44:bf:0a:37:61:f4:4d:da:dd:52:03:e3:3a:2f:ef:4c:
         3a:a3:00:3b:30:de:af:48:3a:80:88:23:e0:f9:23:1b:18:19:
         b1:e6:1c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:33:03 2026 by rpki-client