Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094871149650640897/0/323430333a373538303a3a2f33322d3332203d3e203338333634.roa
File:                     323430333a373538303a3a2f33322d3332203d3e203338333634.roa (raw, json)
Hash identifier:          kmvkwlJ7w+pkja0hVcX0tlL6TVc6mN3qMP/ouy0N+b8=
Subject key identifier:   FE:69:0A:36:77:AA:8D:DF:92:FA:04:3B:9F:75:36:56:1C:39:26:99
Certificate issuer:       /CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
Certificate serial:       09FA226275105B9410C2A555F551E1DB430E8506
Authority key identifier: 29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/323430333a373538303a3a2f33322d3332203d3e203338333634.roa
Signing time:             Wed 15 Apr 2026 02:50:22 +0000
ROA not before:           Wed 15 Apr 2026 02:45:22 +0000
ROA not after:            Wed 14 Apr 2027 02:50:22 +0000
asID:                     38364
IP address blocks:        2403:7580::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 13:38:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:fa:22:62:75:10:5b:94:10:c2:a5:55:f5:51:e1:db:43:0e:85:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
        Validity
            Not Before: Apr 15 02:45:22 2026 GMT
            Not After : Apr 14 02:50:22 2027 GMT
        Subject: CN=FE690A3677AA8DDF92FA043B9F7536561C392699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bc:b5:63:54:5f:5d:42:45:5b:cf:b2:95:2b:
                    36:28:4c:45:78:e1:29:bc:87:47:74:f5:fd:66:3d:
                    89:20:92:00:f6:45:42:a6:12:1b:7c:f8:8c:8d:50:
                    4e:7c:42:4f:29:96:c9:0a:e0:c7:8b:09:66:c2:58:
                    34:1b:64:17:32:c4:89:0d:fe:a7:2b:93:c9:bb:d6:
                    af:ad:47:bb:9a:5a:51:0f:19:8d:af:4d:56:36:8f:
                    1b:5c:07:43:d9:1f:32:82:ef:3b:b1:e2:0f:29:ac:
                    e6:0f:21:5c:92:3c:70:56:19:81:a9:84:97:52:9b:
                    48:48:d9:8c:c8:f7:98:a8:0f:d9:84:8c:62:97:f9:
                    9b:6f:e9:a1:62:cc:f9:f8:65:bb:7c:f3:6b:55:6a:
                    36:eb:f9:e0:70:fd:24:6d:bb:d7:22:6a:19:5a:2f:
                    0d:e4:56:b4:e5:90:28:3a:b9:3f:a3:0b:d2:02:7c:
                    05:c0:a5:eb:4d:d0:3a:fb:5a:2e:cb:85:cf:3e:e5:
                    fc:7a:61:c1:93:d1:70:86:5c:9d:7f:56:5c:95:5e:
                    f3:70:df:73:d1:b1:69:82:be:26:70:bc:a3:08:9b:
                    12:bd:f1:43:6f:ec:eb:ca:32:4b:8d:89:43:06:83:
                    ab:e7:4b:80:fb:0f:c3:b7:22:d2:47:da:d4:61:bd:
                    d9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:69:0A:36:77:AA:8D:DF:92:FA:04:3B:9F:75:36:56:1C:39:26:99
            X509v3 Authority Key Identifier:
                keyid:29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/323430333a373538303a3a2f33322d3332203d3e203338333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:7580::/32

    Signature Algorithm: sha256WithRSAEncryption
         d9:2b:af:cd:0e:b6:91:28:79:98:42:5c:cb:fe:21:a9:f0:71:
         51:ef:bd:0a:34:cc:d9:54:55:0b:a9:d4:10:12:0e:66:59:b7:
         91:8c:ff:0d:a6:7d:af:0c:20:b4:52:0d:b6:93:e8:3e:a4:8e:
         12:72:35:2e:4c:44:e7:ce:00:cc:8c:95:b4:ed:2e:4f:c0:62:
         4d:e3:b4:f0:bf:cc:4b:66:78:03:8a:73:7e:9d:fe:d3:f3:a3:
         0d:e7:cf:7b:7d:5e:dc:f1:de:46:ad:f7:a7:d3:48:7d:f2:59:
         c0:ce:98:3f:75:e2:3f:f0:59:17:ca:b2:ac:a9:47:a1:c8:a7:
         b7:de:a4:d4:a8:4b:45:42:13:87:68:c9:53:7a:1e:d9:af:69:
         da:68:47:79:f4:eb:10:4b:2e:7f:2d:30:4c:b5:f1:b2:93:6a:
         5f:19:08:04:0c:c2:4c:f2:16:29:50:02:8e:55:01:cd:46:d3:
         28:21:e1:29:ed:32:7f:d6:89:b0:d6:fe:9e:11:8e:fb:a6:4b:
         d2:1b:7d:a2:b7:33:bc:ac:0f:1a:d1:69:a1:59:14:2f:27:b4:
         39:c2:be:95:99:47:db:10:55:05:fe:04:da:94:7a:21:56:59:
         48:27:98:5b:9f:35:b7:6e:36:21:82:10:6e:e6:07:23:96:20:
         0b:6d:b8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:01:24 2026 by rpki-client