Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a613831303a3a2f34362d3436203d3e203234343233.roa
File:                     323430323a343434303a613831303a3a2f34362d3436203d3e203234343233.roa (raw, json)
Hash identifier:          oZslET4okXM3ap75C5LyZB36Fp8jO6sMBXVAodKO14Y=
Subject key identifier:   F1:F8:58:81:8D:85:FA:DE:06:4A:F9:2C:8F:D0:54:71:8B:E4:6F:22
Certificate issuer:       /CN=050FFFF977C2D4CDECAE9AD46790A6C5631235A9
Certificate serial:       2C73A9DD8DF4A0DB021A8665223C97716DAF7F7D
Authority key identifier: 05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a613831303a3a2f34362d3436203d3e203234343233.roa
Signing time:             Wed 15 Apr 2026 01:59:33 +0000
ROA not before:           Wed 15 Apr 2026 01:54:33 +0000
ROA not after:            Wed 14 Apr 2027 01:59:33 +0000
asID:                     24423
IP address blocks:        2402:4440:a810::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:73:a9:dd:8d:f4:a0:db:02:1a:86:65:22:3c:97:71:6d:af:7f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050FFFF977C2D4CDECAE9AD46790A6C5631235A9
        Validity
            Not Before: Apr 15 01:54:33 2026 GMT
            Not After : Apr 14 01:59:33 2027 GMT
        Subject: CN=F1F858818D85FADE064AF92C8FD054718BE46F22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dc:ae:7c:18:b2:48:4c:ec:06:e9:29:c9:b5:
                    5d:be:57:0e:29:b0:a8:72:1b:df:b1:b6:3f:22:f0:
                    83:c9:96:f2:e0:ea:6e:9d:a3:0c:53:72:9b:52:2a:
                    d5:f1:c7:01:a4:7d:73:54:28:4f:f9:c4:4d:42:8e:
                    2d:b8:69:0d:50:d7:f1:55:fe:83:12:3f:e2:73:b8:
                    08:8d:39:d5:7b:70:26:db:7c:8b:e1:cb:bd:b8:43:
                    5f:e2:85:41:e9:13:54:91:4a:e8:36:4f:93:a7:0c:
                    75:e0:1d:83:fa:53:0d:c0:b7:cc:9a:5b:c3:cd:22:
                    82:04:89:cd:3d:45:ae:ec:7b:1d:71:04:44:60:23:
                    81:5e:e7:30:0e:58:61:e5:48:39:af:05:72:ff:5d:
                    7f:51:1d:a2:f2:e2:b3:ab:88:b9:a0:4f:49:33:e3:
                    5f:86:60:ef:5d:48:ee:6c:c3:1d:38:4f:40:fc:44:
                    bc:d5:85:a0:f8:f9:e6:84:96:bd:65:23:e1:80:d7:
                    0e:1d:8d:e3:e2:66:4b:ed:98:7f:ee:8d:b2:6f:e0:
                    94:00:3b:c4:df:a1:9c:87:d0:f4:4f:6c:a5:af:1e:
                    b4:e4:03:fc:3e:43:51:df:f4:d9:cc:d6:23:26:d4:
                    e2:ed:6c:1b:4a:92:22:25:08:be:c6:32:27:40:3d:
                    2e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F8:58:81:8D:85:FA:DE:06:4A:F9:2C:8F:D0:54:71:8B:E4:6F:22
            X509v3 Authority Key Identifier:
                keyid:05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/323430323a343434303a613831303a3a2f34362d3436203d3e203234343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4440:a810::/46

    Signature Algorithm: sha256WithRSAEncryption
         8d:51:f0:ce:c0:6a:ed:22:2e:56:2a:92:6a:cf:de:86:b4:32:
         63:41:60:62:74:33:cc:5d:a3:7f:27:39:6d:a1:a6:11:2e:91:
         c2:29:bf:c4:b4:88:cc:94:2e:50:cf:a4:35:2c:06:eb:59:f7:
         fa:f2:11:8e:a9:d8:bd:7a:03:f7:0e:e8:10:8d:0a:a4:3f:9c:
         13:d9:ca:8c:82:e1:3f:25:20:5a:99:6c:bc:16:12:40:19:1a:
         b8:69:88:ee:a9:29:45:35:c6:23:3e:e8:22:ca:48:6e:c5:24:
         c1:8a:77:2d:6a:77:f7:1f:a0:c2:cf:0e:c9:df:0f:ba:23:2f:
         e5:e3:db:d1:12:9d:72:a4:f3:2d:1e:73:eb:30:5b:f7:a7:40:
         8c:51:32:18:3d:0e:a2:46:f5:23:5a:53:99:41:85:b7:83:52:
         24:31:fb:81:12:7b:dc:33:4f:47:40:05:57:d4:0e:a2:56:15:
         c1:73:92:94:0f:e3:bb:47:19:fc:5b:19:ff:3f:44:80:84:66:
         73:26:92:d9:82:55:d9:32:69:fa:ba:4f:6d:c5:ea:d2:01:69:
         92:78:e8:d7:10:c4:2d:3c:95:af:b1:e2:ba:49:c2:48:30:0c:
         9b:89:a4:d7:43:5a:d1:0c:33:6e:b0:a3:d1:fe:9b:a2:54:b4:
         a7:17:0c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:15:11 2026 by rpki-client