Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a393831303a3a2f34382d3438203d3e203234343233.roa
File:                     323430323a343434303a393831303a3a2f34382d3438203d3e203234343233.roa (raw, json)
Hash identifier:          1rq5Q0GIxov8aynz0B+gZY8lEOGWYXs8+hz2fvaF798=
Subject key identifier:   59:FC:C2:53:46:B7:D4:0B:C0:48:5A:0B:F9:F3:57:B0:94:C2:98:CB
Certificate issuer:       /CN=050FFFF977C2D4CDECAE9AD46790A6C5631235A9
Certificate serial:       0F963645DB9BBA67435B60134A181D655BAA64D3
Authority key identifier: 05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a393831303a3a2f34382d3438203d3e203234343233.roa
Signing time:             Wed 15 Apr 2026 01:59:33 +0000
ROA not before:           Wed 15 Apr 2026 01:54:33 +0000
ROA not after:            Wed 14 Apr 2027 01:59:33 +0000
asID:                     24423
IP address blocks:        2402:4440:9810::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:96:36:45:db:9b:ba:67:43:5b:60:13:4a:18:1d:65:5b:aa:64:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050FFFF977C2D4CDECAE9AD46790A6C5631235A9
        Validity
            Not Before: Apr 15 01:54:33 2026 GMT
            Not After : Apr 14 01:59:33 2027 GMT
        Subject: CN=59FCC25346B7D40BC0485A0BF9F357B094C298CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ee:2e:96:5d:8b:37:ce:92:58:f0:3a:e7:6a:
                    d6:8a:21:7c:88:20:99:20:03:0b:d5:cc:c2:65:09:
                    34:c1:5d:ea:dc:b0:8f:09:4c:c1:a3:71:01:23:eb:
                    4f:c6:79:46:31:68:1e:e1:54:fe:e7:d7:d5:22:c5:
                    ca:e6:5c:99:64:36:ed:88:cb:aa:9c:f0:29:5e:c9:
                    b0:82:9a:49:92:a9:96:ff:d5:6b:bb:50:44:79:3e:
                    95:2f:b1:73:25:58:e2:63:71:71:f9:de:84:64:a7:
                    01:2f:a9:72:7d:82:31:9e:54:70:83:2b:cb:61:5a:
                    4b:e1:50:ae:9d:88:5b:1c:a7:ec:44:47:a1:76:8b:
                    27:c7:26:eb:a9:60:73:82:26:f1:9b:37:f3:a4:51:
                    b0:a2:95:60:46:8d:c9:a9:7f:6d:59:63:99:f9:d8:
                    d3:ad:ec:0a:30:a7:47:76:ec:aa:02:f5:ab:7e:2a:
                    f8:d9:ca:fb:b6:66:d7:20:db:1a:a3:c0:7d:07:0c:
                    90:1b:7b:24:fb:f9:4b:79:d2:81:f3:df:11:bb:0b:
                    f6:7b:49:36:ea:78:7b:d3:3a:ec:38:a4:4c:50:cf:
                    ee:6f:67:1b:35:08:98:57:98:55:4e:37:8c:4c:74:
                    78:b7:3b:e0:8c:fc:3a:62:7f:c9:db:69:dc:be:cb:
                    b5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FC:C2:53:46:B7:D4:0B:C0:48:5A:0B:F9:F3:57:B0:94:C2:98:CB
            X509v3 Authority Key Identifier:
                keyid:05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a393831303a3a2f34382d3438203d3e203234343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4440:9810::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:c4:d3:78:b0:2c:31:db:68:67:d7:cb:39:af:d7:d2:fc:39:
         5c:a1:0c:68:b8:06:77:66:02:23:e1:36:67:e0:eb:f9:e7:27:
         28:f8:13:9b:92:6a:5d:7d:e9:72:cd:e4:5a:db:61:86:71:5c:
         48:7a:61:d9:43:08:d4:9b:06:23:a4:1d:61:9d:72:41:0d:e0:
         3d:23:35:ed:0f:a7:68:08:0e:66:92:7d:75:1c:eb:6d:5a:a4:
         b1:89:36:bb:46:e1:b9:00:ff:f3:92:4e:9e:2a:ae:11:cf:91:
         8e:f2:e5:38:18:e9:28:2e:01:9b:66:94:b5:c5:30:dd:c3:be:
         7e:ea:e7:99:b5:b3:cd:29:6a:8a:84:20:f7:e2:ae:be:9c:5c:
         ba:37:68:ce:93:6c:ab:af:97:55:13:4d:c2:5c:82:2d:d8:00:
         f0:c2:a5:bd:e4:1e:b5:e9:1c:cd:1a:ab:b2:4a:55:5b:96:84:
         a3:11:d1:5e:af:50:34:27:97:2b:28:d7:62:62:2a:f4:61:ef:
         8c:05:49:e2:ed:67:44:14:86:e0:be:e2:4f:20:8b:13:d5:26:
         38:89:f1:99:3f:c6:b5:46:f5:19:a2:28:c7:ec:46:87:f7:92:
         41:67:ff:99:02:c9:1e:e0:0b:e0:fb:f1:b8:70:14:41:56:b8:
         dc:f0:42:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:15:10 2026 by rpki-client