Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a396430303a3a2f34382d3438203d3e203234343233.roa
File:                     323430323a343434303a396430303a3a2f34382d3438203d3e203234343233.roa (raw, json)
Hash identifier:          P5YYgWs/7ycN5yG6h2nQeut46/vvsiCv4hZRTy40IOU=
Subject key identifier:   D4:41:3A:9D:BD:14:37:BF:12:BE:CA:CF:8F:52:66:F5:40:87:58:6D
Certificate issuer:       /CN=050FFFF977C2D4CDECAE9AD46790A6C5631235A9
Certificate serial:       78B5866A577B81EB3C7591A7B6CE6DA131D743CE
Authority key identifier: 05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a396430303a3a2f34382d3438203d3e203234343233.roa
Signing time:             Wed 15 Apr 2026 01:59:32 +0000
ROA not before:           Wed 15 Apr 2026 01:54:32 +0000
ROA not after:            Wed 14 Apr 2027 01:59:32 +0000
asID:                     24423
IP address blocks:        2402:4440:9d00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b5:86:6a:57:7b:81:eb:3c:75:91:a7:b6:ce:6d:a1:31:d7:43:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050FFFF977C2D4CDECAE9AD46790A6C5631235A9
        Validity
            Not Before: Apr 15 01:54:32 2026 GMT
            Not After : Apr 14 01:59:32 2027 GMT
        Subject: CN=D4413A9DBD1437BF12BECACF8F5266F54087586D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e6:75:71:94:e2:3b:fc:68:6d:e3:36:90:0a:
                    ec:a1:6c:4c:c9:e5:99:a1:b0:a2:60:a2:7b:ee:6d:
                    33:7d:12:fb:03:19:48:3b:a9:81:aa:82:63:0d:22:
                    b8:ca:a7:4b:53:00:0b:98:d3:36:21:19:95:cd:7a:
                    e7:3a:ab:5f:0f:67:df:f2:8a:0e:5f:a1:1c:04:10:
                    ae:7c:57:4b:bc:fb:a4:fe:b6:66:d6:5c:5e:15:cf:
                    61:66:72:8a:18:eb:21:cc:0a:bf:ac:86:52:27:75:
                    35:cd:17:c1:12:48:0c:bf:82:5b:c5:e7:68:3b:75:
                    b1:85:50:8d:07:dc:6d:6d:91:54:69:1d:1d:8c:5a:
                    07:46:bd:60:ec:74:e6:3e:0a:e9:be:7f:28:25:26:
                    c9:53:97:cd:38:02:9b:e9:01:dc:4b:64:4a:2f:d1:
                    0e:74:00:06:f9:66:49:18:fd:5b:64:55:29:f2:a8:
                    d3:b2:57:3d:5c:da:13:cd:65:8e:ca:17:af:cb:dc:
                    6d:98:e6:f0:d5:72:60:c6:b9:ee:28:9b:cd:92:23:
                    02:1b:e2:49:b9:69:66:c5:5e:83:45:97:27:06:73:
                    3e:98:d9:c2:8e:a7:86:e2:ba:84:49:11:17:59:88:
                    b3:d7:19:d0:fc:97:b5:10:3c:3f:35:00:7d:93:9e:
                    76:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:41:3A:9D:BD:14:37:BF:12:BE:CA:CF:8F:52:66:F5:40:87:58:6D
            X509v3 Authority Key Identifier:
                keyid:05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a396430303a3a2f34382d3438203d3e203234343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4440:9d00::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:a5:cd:a3:a6:94:0f:3c:33:8a:8a:b1:6f:29:7b:45:d3:90:
         91:ba:63:79:4c:74:31:ec:73:33:c3:d0:15:46:dc:c0:d7:ba:
         c1:57:18:29:dc:07:0b:a7:c9:7e:0e:31:1a:ec:6d:1f:ce:ad:
         31:ac:30:3b:99:d6:ee:4f:e2:e3:e0:e1:d9:2c:9a:0f:28:d7:
         a4:99:f8:3a:50:2b:0a:89:ee:6a:b2:31:c3:a8:08:06:b4:7f:
         7a:11:0e:6b:0a:70:5c:39:56:e5:12:25:5b:33:3c:bd:cb:c8:
         b3:66:78:09:60:1a:06:5d:dc:3d:10:fc:ce:2d:4b:b3:e1:71:
         a2:03:d4:29:18:89:d5:0c:df:61:17:d4:53:bc:71:0b:36:b3:
         e8:eb:20:e1:63:2a:65:4b:e9:aa:66:2e:ff:7a:78:1b:0d:70:
         0a:ba:26:a7:3b:1e:93:65:f7:47:dc:6b:a9:69:3f:39:4a:ec:
         7c:db:c4:eb:81:25:a6:3b:d4:b0:fd:d5:bc:be:36:0a:c5:b8:
         04:7b:ae:38:0e:49:ea:6c:40:c7:76:9d:43:6b:0b:f3:67:67:
         b0:05:fe:32:af:b5:5e:32:47:65:1b:34:09:8d:60:6e:81:df:
         f4:d0:ad:21:9e:c5:bb:06:90:97:ec:cf:1b:07:f5:b5:b6:b6:
         24:e7:76:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:15:10 2026 by rpki-client