Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a393930303a3a2f34382d3438203d3e203234343233.roa
File:                     323430323a343434303a393930303a3a2f34382d3438203d3e203234343233.roa (raw, json)
Hash identifier:          ndblkSIAewMS9P14Jm2nCsebMTy0SpRMEqUNQPxXwIM=
Subject key identifier:   52:B5:E3:A6:05:17:30:6D:68:B2:94:86:96:12:A9:D8:E3:2D:E2:33
Certificate issuer:       /CN=050FFFF977C2D4CDECAE9AD46790A6C5631235A9
Certificate serial:       01F20ED021715ED6AECE41554B1F1FE7E676CAE2
Authority key identifier: 05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a393930303a3a2f34382d3438203d3e203234343233.roa
Signing time:             Wed 15 Apr 2026 01:59:32 +0000
ROA not before:           Wed 15 Apr 2026 01:54:32 +0000
ROA not after:            Wed 14 Apr 2027 01:59:32 +0000
asID:                     24423
IP address blocks:        2402:4440:9900::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f2:0e:d0:21:71:5e:d6:ae:ce:41:55:4b:1f:1f:e7:e6:76:ca:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050FFFF977C2D4CDECAE9AD46790A6C5631235A9
        Validity
            Not Before: Apr 15 01:54:32 2026 GMT
            Not After : Apr 14 01:59:32 2027 GMT
        Subject: CN=52B5E3A60517306D68B294869612A9D8E32DE233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:82:af:f9:1d:51:a8:15:2a:84:cf:a5:ce:b5:
                    1e:df:27:20:23:19:30:32:a7:85:64:70:49:27:d6:
                    42:cf:5c:33:ca:70:01:06:03:22:0d:83:bf:2f:4a:
                    fc:f0:35:b4:64:d3:5f:2d:0c:da:19:e7:cf:87:03:
                    e8:05:bb:a7:a0:a1:06:26:c2:8e:5b:5c:5a:81:eb:
                    b2:13:c1:a4:b5:af:d0:bb:ea:72:d6:01:86:8b:ca:
                    dd:e7:09:9c:35:9e:70:fe:d2:ca:96:02:eb:68:e5:
                    d8:da:09:ae:07:71:37:48:56:11:77:47:95:92:00:
                    32:7e:9c:35:91:fc:cb:5b:4a:47:13:0f:86:7d:d4:
                    28:80:9f:46:ae:58:23:8e:a0:61:94:44:8b:66:c6:
                    76:5b:f0:c2:b2:5b:c1:be:17:c8:ba:99:ea:bf:47:
                    85:4a:03:c2:de:d1:8e:45:70:98:d7:b4:81:2c:b8:
                    86:f2:0e:9e:53:30:fa:2b:bc:4b:2e:9d:bb:89:93:
                    af:9e:9a:15:aa:55:66:40:d7:d4:b9:1c:d6:dc:e8:
                    48:d5:b3:27:78:3c:23:3e:eb:6c:c4:e0:1f:0a:a9:
                    0c:37:b1:e3:6e:d0:da:3e:94:22:43:c8:a2:24:7b:
                    6c:5b:f0:af:95:cb:80:b1:ba:98:62:c3:63:bd:0f:
                    29:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B5:E3:A6:05:17:30:6D:68:B2:94:86:96:12:A9:D8:E3:2D:E2:33
            X509v3 Authority Key Identifier:
                keyid:05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a393930303a3a2f34382d3438203d3e203234343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4440:9900::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:bf:30:0f:a3:b2:00:47:c5:8f:0c:b5:63:f5:5e:a2:1d:0a:
         a8:43:6e:2e:e7:15:45:fa:2e:1d:67:1d:dc:26:40:f9:64:04:
         f5:b6:13:6b:9c:14:e2:9c:0f:4c:df:12:4a:70:e9:19:8a:86:
         90:13:84:7e:7e:6c:b0:0f:6d:0c:82:a5:65:67:77:fa:3c:8f:
         82:49:4e:0c:47:7c:1a:3b:a4:51:ae:56:b2:04:70:cc:e6:ca:
         11:75:06:10:16:78:8f:f6:c2:51:05:86:bc:4e:c6:0a:3c:9f:
         89:1a:b8:b6:cd:3c:70:a3:85:bc:a2:8a:a3:a9:f9:db:2d:cc:
         8e:ef:4c:7e:ba:a0:f9:90:3d:9c:c2:92:14:3d:dc:3b:3a:23:
         f9:31:90:ff:5e:c3:57:07:85:84:50:57:de:46:b5:1d:d8:61:
         a6:db:0c:5c:49:30:1f:49:00:dd:5c:d2:c2:75:72:2a:1f:f6:
         ba:e2:8b:79:00:a3:1a:45:e4:c3:b9:91:c5:b6:aa:98:94:d2:
         66:47:72:31:1b:13:ba:b9:90:56:89:3f:76:b1:c0:1b:93:6a:
         01:62:7f:4a:ea:bf:a5:62:6e:68:1c:7b:d4:b2:33:55:2b:d6:
         ad:e8:64:44:71:92:6e:60:15:56:2f:56:99:60:fe:a1:f6:28:
         eb:63:4f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:15:10 2026 by rpki-client