Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a393230303a3a2f34382d3438203d3e203234343233.roa
File:                     323430323a343434303a393230303a3a2f34382d3438203d3e203234343233.roa (raw, json)
Hash identifier:          WaaCYjBbmiSH5COjqNt0++XiybnKxKpkdNCpIU//kPc=
Subject key identifier:   54:CA:1D:7C:97:2B:E3:39:59:4C:6B:F8:6E:38:FB:2A:D7:E2:FF:4B
Certificate issuer:       /CN=050FFFF977C2D4CDECAE9AD46790A6C5631235A9
Certificate serial:       03A9222172E7C0FBC4B9D6E3F632B735D4CC05DC
Authority key identifier: 05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a393230303a3a2f34382d3438203d3e203234343233.roa
Signing time:             Wed 15 Apr 2026 01:59:33 +0000
ROA not before:           Wed 15 Apr 2026 01:54:33 +0000
ROA not after:            Wed 14 Apr 2027 01:59:33 +0000
asID:                     24423
IP address blocks:        2402:4440:9200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a9:22:21:72:e7:c0:fb:c4:b9:d6:e3:f6:32:b7:35:d4:cc:05:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050FFFF977C2D4CDECAE9AD46790A6C5631235A9
        Validity
            Not Before: Apr 15 01:54:33 2026 GMT
            Not After : Apr 14 01:59:33 2027 GMT
        Subject: CN=54CA1D7C972BE339594C6BF86E38FB2AD7E2FF4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ec:07:32:66:98:2e:42:bd:a5:71:7c:3f:56:
                    87:ea:a9:c7:48:99:9f:cd:49:14:cf:cd:b9:38:56:
                    e7:b1:9f:47:c3:fc:76:c5:6d:0b:1f:18:38:d8:ac:
                    84:c2:7f:bf:ff:eb:f6:3e:1b:4e:57:61:fc:58:1b:
                    82:08:e4:c7:75:ac:70:27:f4:2b:dc:21:9f:4e:25:
                    85:f3:b8:a6:9c:55:de:a7:ae:4a:e4:d2:79:b0:e9:
                    1b:4f:e0:64:f1:52:6a:fc:45:b5:51:60:4a:8d:73:
                    36:64:fd:66:60:38:b5:31:02:ed:9f:03:6f:0b:b9:
                    57:f1:2d:c1:7d:fb:2e:39:df:88:48:56:9d:4d:81:
                    c1:19:6a:2d:1e:50:d2:78:11:04:24:c6:b2:b8:57:
                    de:72:77:d0:b3:05:f3:77:77:d9:10:b7:4c:ba:f4:
                    b5:51:fe:f6:0d:ed:cb:57:32:42:a6:5b:75:a8:61:
                    08:1c:21:ee:b9:cf:2b:26:4f:b0:05:d3:73:f9:15:
                    48:91:03:07:e2:3c:09:e3:29:a9:54:b2:de:e7:70:
                    ea:18:13:51:6a:b4:5f:96:c1:2d:e7:56:ea:44:32:
                    ab:7b:41:9a:78:2c:e7:89:99:29:1e:74:e4:66:2e:
                    20:8f:4a:7b:74:57:99:88:31:9c:0b:1b:e5:8d:30:
                    d2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CA:1D:7C:97:2B:E3:39:59:4C:6B:F8:6E:38:FB:2A:D7:E2:FF:4B
            X509v3 Authority Key Identifier:
                keyid:05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a393230303a3a2f34382d3438203d3e203234343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4440:9200::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:b6:a8:33:70:5b:05:a8:f4:4d:46:dd:11:36:1a:95:e7:1a:
         bd:d2:51:f5:c5:17:ec:47:69:e5:20:3c:3f:f9:21:c6:53:56:
         d1:66:ae:79:f4:e9:68:a7:5a:3e:59:f9:94:d2:be:6d:d4:ae:
         c7:7a:fa:b6:b1:e5:ee:7c:1b:6b:c5:b9:96:ad:c2:2f:2a:c7:
         8b:03:13:67:63:e1:93:7c:1c:e3:51:7a:64:63:d9:42:24:2f:
         7b:c9:ba:09:d3:65:aa:bf:eb:b0:3b:b7:e0:6d:73:53:24:1a:
         e2:7a:fc:f1:81:6f:ec:56:12:c5:a1:11:1a:3e:59:4c:1b:1f:
         a1:86:e2:a2:1a:5a:3f:ea:be:4a:00:61:2e:c9:f7:a0:44:5a:
         1d:c3:81:07:ff:ab:c7:2f:b2:ae:be:3b:42:54:15:37:c4:21:
         35:60:b0:d5:42:9a:42:be:69:2a:ce:b3:45:4f:ea:79:50:1c:
         5a:f4:21:34:bd:0e:73:a3:fb:38:c3:84:86:2c:3a:f9:3f:58:
         71:d6:6c:40:e5:4f:80:6c:a0:8c:5f:4e:c9:6a:a4:a1:0d:c0:
         5d:b4:a7:14:25:57:72:b7:67:7a:92:45:d4:dc:90:00:cf:e2:
         99:6d:39:09:54:77:c8:d0:99:24:34:96:dd:da:ef:1c:ff:66:
         51:49:fa:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:15:13 2026 by rpki-client