Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/323430303a613836303a313a3a2f34382d3438203d3e203633363437.roa
File:                     323430303a613836303a313a3a2f34382d3438203d3e203633363437.roa (raw, json)
Hash identifier:          COonzZG053Dm9ecVP49O7dSolVnbJXpi66s7GpvINRs=
Subject key identifier:   0E:CD:E6:6F:81:7B:30:BA:A3:D8:93:5D:43:88:C6:7D:A5:CA:5E:B4
Certificate issuer:       /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Certificate serial:       7DFDE7035B7F36B47B5BA3691D6963445F5674AD
Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/323430303a613836303a313a3a2f34382d3438203d3e203633363437.roa
Signing time:             Mon 13 Apr 2026 08:06:59 +0000
ROA not before:           Mon 13 Apr 2026 08:01:59 +0000
ROA not after:            Mon 12 Apr 2027 08:06:59 +0000
asID:                     63647
IP address blocks:        2400:a860:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:fd:e7:03:5b:7f:36:b4:7b:5b:a3:69:1d:69:63:44:5f:56:74:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
        Validity
            Not Before: Apr 13 08:01:59 2026 GMT
            Not After : Apr 12 08:06:59 2027 GMT
        Subject: CN=0ECDE66F817B30BAA3D8935D4388C67DA5CA5EB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:59:71:47:1c:3e:d0:23:4b:c8:06:26:74:dc:
                    81:ea:db:c0:19:6b:cc:61:24:91:e6:df:d3:20:06:
                    7b:9d:96:2f:5d:09:69:65:b3:32:4a:e0:76:a5:b0:
                    59:fb:f7:5c:78:bf:dc:46:5e:e0:88:3f:d7:04:52:
                    7d:3f:54:54:36:88:52:ed:f3:7c:44:68:f0:10:21:
                    cd:ff:53:f9:5f:a3:d0:34:3e:60:7c:22:0a:5e:c6:
                    cf:7c:64:89:53:26:cc:2b:74:ea:71:6c:2a:50:41:
                    b0:30:3d:1a:7b:94:9a:f2:bd:6a:0c:7e:f9:3c:64:
                    7e:a0:71:b6:16:5a:c3:d0:a0:bc:9b:31:4e:f4:71:
                    94:da:73:f9:a3:10:c3:3e:c4:59:68:9b:ee:88:74:
                    38:8a:31:01:d1:7f:80:b6:6c:42:1b:ca:e3:b7:bc:
                    37:d6:76:95:0a:a9:73:e0:3a:8f:ae:26:8c:32:55:
                    86:b4:c0:98:56:82:7d:52:1d:a3:cf:d2:70:c8:da:
                    55:40:e6:c5:56:49:4e:54:8f:70:3e:af:f5:02:c5:
                    a0:bd:ee:db:8c:7a:01:6e:66:b1:99:d2:a1:74:c3:
                    cb:f3:8e:2b:79:99:f9:a8:01:b6:a3:42:67:7c:ea:
                    cc:df:f0:e3:f9:88:eb:f3:53:2b:19:8f:68:90:5c:
                    b4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CD:E6:6F:81:7B:30:BA:A3:D8:93:5D:43:88:C6:7D:A5:CA:5E:B4
            X509v3 Authority Key Identifier:
                keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/323430303a613836303a313a3a2f34382d3438203d3e203633363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:a860:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:6a:de:5e:cb:a7:cf:24:7b:d3:38:6d:0b:2a:ce:51:7a:74:
         7c:1b:d3:51:35:37:3d:cf:43:dd:41:6a:61:02:c0:a6:c8:eb:
         ba:2a:91:77:5d:fc:d4:17:1c:9c:24:8a:cb:d9:03:2d:33:0a:
         98:2a:92:5a:88:21:e4:f2:1d:76:15:fa:90:f8:3b:11:ba:1c:
         fd:27:67:22:72:f6:42:1a:f4:66:ab:46:10:ee:6a:50:c1:07:
         85:1f:7f:fc:af:4b:aa:3f:e5:7c:d4:38:88:a2:5e:61:83:7e:
         2a:da:96:2a:e4:61:c6:03:45:00:c6:f8:98:a9:02:6a:ab:fc:
         fc:61:7e:a1:22:25:f3:1d:94:a6:51:01:4c:7b:29:e4:33:ce:
         0b:bd:0f:a4:2f:09:dd:36:2b:7d:bb:07:d5:f3:51:ce:7e:76:
         e3:d5:c1:5b:c5:ef:91:84:cd:06:fd:1d:c8:1f:f5:f1:60:ee:
         11:ab:ef:f8:27:6f:2b:8e:7b:bc:91:b2:8d:13:9e:6f:39:d5:
         67:73:fe:b7:d3:5f:0e:78:3a:4a:bc:dc:26:1f:97:0a:d1:a2:
         f2:ed:f5:8d:d2:48:1d:42:eb:3a:5a:0e:57:15:05:06:e8:81:
         0f:f5:89:b5:ac:b4:c7:2f:a8:d7:60:6d:85:a2:54:c8:7b:58:
         be:e9:ab:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:15:19 2026 by rpki-client