Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096276598698606595/0/323430333a356338303a3a2f34382d3438203d3e203233373234.roa
File:                     323430333a356338303a3a2f34382d3438203d3e203233373234.roa (raw, json)
Hash identifier:          feocYP5cCmOSVObqhUoAuLxuAjF4l6CJn+NBIr43pCs=
Subject key identifier:   F5:91:73:DA:D0:6D:74:31:D8:12:1D:BF:23:DA:2C:32:23:48:AE:A8
Certificate issuer:       /CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Certificate serial:       12898D1F59371CF2C785DBDAACAC1FFBB1E0047F
Authority key identifier: 51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/323430333a356338303a3a2f34382d3438203d3e203233373234.roa
Signing time:             Tue 14 Apr 2026 06:47:49 +0000
ROA not before:           Tue 14 Apr 2026 06:42:49 +0000
ROA not after:            Tue 13 Apr 2027 06:47:49 +0000
asID:                     23724
IP address blocks:        2403:5c80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:89:8d:1f:59:37:1c:f2:c7:85:db:da:ac:ac:1f:fb:b1:e0:04:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
        Validity
            Not Before: Apr 14 06:42:49 2026 GMT
            Not After : Apr 13 06:47:49 2027 GMT
        Subject: CN=F59173DAD06D7431D8121DBF23DA2C322348AEA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e3:70:ac:88:76:3c:b9:e9:e6:38:24:6f:6a:
                    c3:f2:fb:a8:05:08:53:8b:d1:39:a8:cf:a6:2e:65:
                    40:19:96:7b:32:96:0a:e0:75:5e:98:df:60:fb:20:
                    8f:0d:66:f5:d8:e9:11:68:bd:90:0a:0c:e0:04:5b:
                    45:85:36:b6:b1:af:f6:04:c4:07:d4:e1:92:43:66:
                    5b:bf:84:50:57:a8:9d:86:7a:1d:56:48:6a:c8:43:
                    a8:2c:8c:2a:bd:97:0a:06:15:7f:aa:3a:7b:20:5b:
                    41:0f:25:eb:f8:b3:03:b4:c3:11:34:06:31:5a:f8:
                    e7:18:ed:08:51:22:20:11:28:8f:65:7f:d8:6d:0b:
                    8f:2c:95:e7:d3:cc:1f:98:cf:97:23:ab:95:b9:c8:
                    82:4c:31:d9:7f:4a:0e:2a:39:53:f6:77:91:04:31:
                    60:73:e5:8b:24:11:3d:0a:bb:7d:7a:b6:62:5d:f6:
                    db:16:e0:a3:4e:41:d6:2c:d6:be:6b:fd:f6:c0:c1:
                    b6:60:88:c8:d7:d6:83:a9:f6:75:07:11:42:f3:74:
                    ef:2e:51:73:ff:ee:f6:d0:80:d6:b9:b6:29:ba:0e:
                    97:68:c3:04:a3:46:80:19:63:68:97:7b:60:8c:0e:
                    60:30:3b:8a:20:a4:b9:89:7d:61:52:f3:68:63:e0:
                    8d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:91:73:DA:D0:6D:74:31:D8:12:1D:BF:23:DA:2C:32:23:48:AE:A8
            X509v3 Authority Key Identifier:
                keyid:51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/323430333a356338303a3a2f34382d3438203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:5c80::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:94:2e:63:17:87:7b:35:fd:49:0f:da:2c:82:60:d5:29:b5:
         dd:51:a1:c9:66:ac:d6:36:16:95:ec:05:6a:ff:71:25:55:e8:
         de:f2:7b:4d:35:43:c3:4b:5b:28:c3:c8:f0:15:a2:b7:0a:93:
         db:68:28:67:47:c6:a7:e9:80:9e:02:91:d9:60:a8:89:b3:ec:
         db:71:a1:e6:82:62:16:8e:7a:0b:48:15:32:af:f0:6c:d2:7a:
         12:50:ff:f0:2a:42:53:f5:51:c9:1d:77:b6:e9:b4:18:2b:cd:
         41:a9:0b:2f:ae:da:e2:2e:a8:28:39:98:53:91:73:f3:f9:c0:
         ad:c8:5b:64:60:fb:c8:e6:96:53:de:54:71:ba:db:da:54:2a:
         ea:15:41:14:43:ec:43:de:9d:38:87:82:f8:2a:96:f9:09:f3:
         93:c1:b5:d1:ef:1e:15:8a:a1:11:b7:0d:8d:e2:07:4c:ef:b6:
         fe:e4:62:8d:5f:a2:82:f7:4b:95:78:a9:6a:01:c9:ba:7b:47:
         0b:f3:b8:2f:7d:44:c9:e4:82:e0:5b:00:f1:d8:be:1e:ec:81:
         4b:40:b6:4b:99:ff:d3:5b:19:30:00:6e:e4:4c:7f:d1:6b:fc:
         0a:20:9e:53:92:92:06:32:94:af:6a:c0:b3:01:7e:9b:51:70:
         21:37:24:07
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:06:24 2026 by rpki-client