Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a613830303a3a2f34362d3436203d3e203234343233.roa
File:                     323430323a343434303a613830303a3a2f34362d3436203d3e203234343233.roa (raw, json)
Hash identifier:          niXOoiH5dHCA4+uyKGvIZrgvFizwkLTA/Fd9nG3ofak=
Subject key identifier:   24:C1:3C:A3:D7:DD:89:D5:2B:19:10:D9:4E:C4:03:D5:7A:97:8B:CB
Certificate issuer:       /CN=050FFFF977C2D4CDECAE9AD46790A6C5631235A9
Certificate serial:       6414E58DCD541AD0E32C91A987A817AD58CC69CA
Authority key identifier: 05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a613830303a3a2f34362d3436203d3e203234343233.roa
Signing time:             Wed 15 Apr 2026 01:59:33 +0000
ROA not before:           Wed 15 Apr 2026 01:54:33 +0000
ROA not after:            Wed 14 Apr 2027 01:59:33 +0000
asID:                     24423
IP address blocks:        2402:4440:a800::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:14:e5:8d:cd:54:1a:d0:e3:2c:91:a9:87:a8:17:ad:58:cc:69:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050FFFF977C2D4CDECAE9AD46790A6C5631235A9
        Validity
            Not Before: Apr 15 01:54:33 2026 GMT
            Not After : Apr 14 01:59:33 2027 GMT
        Subject: CN=24C13CA3D7DD89D52B1910D94EC403D57A978BCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:67:11:65:ee:8b:f2:3a:d4:95:98:58:d8:6f:
                    e7:d9:d5:a5:dd:1e:95:fe:ad:00:0a:19:aa:98:76:
                    2c:d1:c6:50:41:88:37:71:df:a2:2a:5c:1c:3b:0e:
                    0f:74:66:b3:91:5b:72:ff:86:78:f8:f4:b8:85:b6:
                    1c:96:56:07:cb:de:ea:44:b4:db:12:ab:af:92:39:
                    e4:61:87:65:44:83:f6:c7:53:72:50:47:fb:aa:9c:
                    a1:4e:4c:ed:c9:21:0d:51:f3:4b:3b:e5:ef:d0:a0:
                    8b:00:fe:05:aa:ef:da:8e:0d:99:f4:cf:7d:66:38:
                    7e:18:bd:60:1e:14:5d:3d:db:b4:dd:2c:6e:2c:5a:
                    04:29:73:bf:92:05:ae:91:98:2b:15:32:3d:6b:7f:
                    59:df:9d:06:d0:97:b5:21:47:37:5a:4b:da:68:c0:
                    17:4a:5c:e3:41:e5:70:73:5b:d2:31:c3:0f:cd:49:
                    9c:8b:cf:97:65:54:50:7b:89:75:be:96:1d:88:ca:
                    fb:0b:a2:d7:2a:3b:7d:64:25:b1:58:1e:fe:d6:23:
                    1d:12:97:18:1e:9c:ba:c1:d9:97:31:72:90:fc:2b:
                    42:51:aa:78:ee:bb:ff:50:4c:4c:18:ed:f2:49:c0:
                    db:25:66:1b:d9:7e:42:06:70:99:2f:e3:be:76:4a:
                    1a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C1:3C:A3:D7:DD:89:D5:2B:19:10:D9:4E:C4:03:D5:7A:97:8B:CB
            X509v3 Authority Key Identifier:
                keyid:05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a613830303a3a2f34362d3436203d3e203234343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4440:a800::/46

    Signature Algorithm: sha256WithRSAEncryption
         3b:11:5c:39:fd:5a:47:57:30:71:1d:d2:bc:dc:46:1c:e9:84:
         2b:ef:cf:24:41:38:56:7e:8d:3b:10:76:59:c5:3c:08:7b:87:
         f0:8c:a0:8b:3f:50:35:d0:dc:c6:c9:18:47:8e:e0:e0:a1:44:
         a1:dc:cf:7b:f6:49:b4:43:e2:61:fc:c3:67:76:fb:b1:84:12:
         44:d2:48:7c:d4:c0:d4:4d:6d:43:35:21:37:db:e9:4f:4a:4e:
         5c:73:5c:5b:41:e4:c1:1e:05:aa:7f:f2:a8:a8:53:48:e0:df:
         88:57:28:07:72:e1:c0:6a:ea:8f:6d:8e:2c:a9:69:45:fd:f8:
         22:a3:f9:3d:3e:e9:9c:ce:05:db:7c:a9:3f:29:c9:85:d2:68:
         fa:67:5f:1a:33:c1:15:51:21:23:8b:f7:83:36:ea:e7:59:88:
         73:a3:82:65:91:20:dd:7c:a6:3d:9b:09:ba:57:f6:d1:35:bb:
         30:40:5e:70:04:9b:95:49:13:29:dd:20:17:11:95:32:58:bc:
         dd:09:76:69:30:06:ee:1f:95:7b:8f:13:c1:a2:83:9b:36:02:
         44:3b:63:ad:23:53:85:89:60:a0:37:31:2f:a4:1c:1f:e8:0f:
         86:01:8f:f2:da:3a:06:f1:a2:52:d0:eb:dd:5a:71:3d:be:a4:
         a7:6f:a7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:15:13 2026 by rpki-client