Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a396330303a3a2f34382d3438203d3e203234343233.roa
File:                     323430323a343434303a396330303a3a2f34382d3438203d3e203234343233.roa (raw, json)
Hash identifier:          qtyqe0+FZBxyZixkJ98sy0dX8gOtPvzFGnQ1Lc5fjds=
Subject key identifier:   22:B9:4F:50:FB:39:20:1E:BC:79:EC:32:7A:85:08:61:64:0C:1B:E9
Certificate issuer:       /CN=050FFFF977C2D4CDECAE9AD46790A6C5631235A9
Certificate serial:       222299965D90C28E9A68082F0B88A09DEEBC0654
Authority key identifier: 05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a396330303a3a2f34382d3438203d3e203234343233.roa
Signing time:             Wed 15 Apr 2026 01:59:32 +0000
ROA not before:           Wed 15 Apr 2026 01:54:32 +0000
ROA not after:            Wed 14 Apr 2027 01:59:32 +0000
asID:                     24423
IP address blocks:        2402:4440:9c00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:22:99:96:5d:90:c2:8e:9a:68:08:2f:0b:88:a0:9d:ee:bc:06:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050FFFF977C2D4CDECAE9AD46790A6C5631235A9
        Validity
            Not Before: Apr 15 01:54:32 2026 GMT
            Not After : Apr 14 01:59:32 2027 GMT
        Subject: CN=22B94F50FB39201EBC79EC327A850861640C1BE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ab:1f:0b:17:2d:b4:58:67:ce:3f:49:07:df:
                    04:8d:3b:4c:80:54:65:a0:58:f8:0c:f1:b4:e9:4e:
                    91:be:2f:df:89:19:a8:7f:bb:c6:34:e1:6e:39:72:
                    63:e9:86:dd:92:98:7e:d6:f7:1e:f8:63:ef:ce:23:
                    ec:40:89:10:29:67:5e:85:3b:55:83:95:0e:d7:f3:
                    01:1c:13:91:3c:d2:15:0f:33:9a:71:d1:ff:50:1d:
                    5f:91:69:49:7c:c3:e6:d5:23:2e:cb:f8:cd:f1:bc:
                    c3:cd:28:57:47:69:f0:98:95:2f:6a:4a:59:a3:29:
                    fa:76:ec:f7:f7:44:b2:11:5e:f1:6b:20:f5:a1:98:
                    6a:e0:c8:d1:21:03:2d:db:64:48:c2:f8:29:aa:b3:
                    01:ee:48:94:78:0e:68:75:45:6f:d0:33:4a:34:33:
                    9f:fe:05:2d:6a:a4:27:1a:0c:0c:73:a4:66:23:09:
                    5b:06:5e:d3:12:8c:75:d3:df:f0:c5:0c:48:c0:ae:
                    b2:95:31:ab:39:04:2b:56:5d:30:e7:6f:81:e7:73:
                    5a:46:b9:80:02:a5:ab:6c:f5:e2:49:29:42:5a:05:
                    33:67:2a:cd:24:0d:ff:64:af:b2:e1:64:c7:e2:51:
                    67:5f:c2:c5:cb:32:56:1d:01:1b:7d:e5:a6:76:b6:
                    2d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B9:4F:50:FB:39:20:1E:BC:79:EC:32:7A:85:08:61:64:0C:1B:E9
            X509v3 Authority Key Identifier:
                keyid:05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a396330303a3a2f34382d3438203d3e203234343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4440:9c00::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:4d:29:0b:f4:81:02:40:08:4d:08:45:33:13:87:8b:b8:58:
         6f:4d:ca:dc:72:46:97:82:12:5b:c5:3c:09:0f:43:99:06:0d:
         25:31:00:9a:81:cc:2d:7e:d5:0c:52:28:b0:90:f6:56:e7:77:
         42:bc:4b:b1:23:5c:6d:9c:cc:d9:9d:c5:44:78:3f:ca:6a:7c:
         02:2f:55:c1:54:99:9c:38:c6:b3:86:9e:ba:59:84:30:c4:ef:
         bb:83:68:8d:d0:86:94:78:a5:e7:dd:36:f5:8d:1f:d4:8f:b3:
         76:f3:4f:74:8c:9f:42:d5:69:e4:32:eb:c4:85:ca:52:be:c8:
         af:df:6f:be:01:37:22:4d:e7:f5:0a:d3:9f:ff:9c:83:c0:ae:
         96:d9:df:86:67:94:d1:b9:91:e9:d4:42:ad:72:10:82:88:45:
         8e:b5:e7:ba:92:a7:ba:54:eb:e3:9d:62:7f:85:8e:92:56:b7:
         f6:1d:f7:96:a4:3c:2d:37:15:e2:4e:43:9c:5c:9a:33:17:90:
         6d:b9:d9:d8:63:cf:ec:3d:b0:37:45:60:ba:fb:b7:66:e9:bb:
         1b:7d:41:06:eb:c9:f6:15:42:8b:dd:71:b1:be:d4:7a:dc:dc:
         28:79:c1:c2:a2:06:ce:55:27:ad:04:58:e7:14:3c:05:75:d8:
         87:96:40:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:15:11 2026 by rpki-client