Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096700400205037570/0/323430323a666663303a3a2f33322d313238203d3e20313337373935.roa
File:                     323430323a666663303a3a2f33322d313238203d3e20313337373935.roa (raw, json)
Hash identifier:          KTy4mQXfQF/bSwV80iNhpUCiYJrAX6vXxjisC+VZBco=
Subject key identifier:   93:40:BD:36:69:63:8B:61:21:50:38:4E:B3:47:74:E8:AB:CA:0D:35
Certificate issuer:       /CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
Certificate serial:       54590A15D2A2872404853E3E75FFCD72A976D198
Authority key identifier: 94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/323430323a666663303a3a2f33322d313238203d3e20313337373935.roa
Signing time:             Wed 15 Apr 2026 07:41:23 +0000
ROA not before:           Wed 15 Apr 2026 07:36:23 +0000
ROA not after:            Wed 14 Apr 2027 07:41:23 +0000
asID:                     137795
IP address blocks:        2402:ffc0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:59:0a:15:d2:a2:87:24:04:85:3e:3e:75:ff:cd:72:a9:76:d1:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
        Validity
            Not Before: Apr 15 07:36:23 2026 GMT
            Not After : Apr 14 07:41:23 2027 GMT
        Subject: CN=9340BD3669638B612150384EB34774E8ABCA0D35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ec:7e:20:b5:36:52:81:46:93:58:b2:9f:f6:
                    09:52:db:67:82:d1:86:ed:51:40:dc:16:77:36:19:
                    5c:21:5d:15:dd:fc:46:58:5b:fb:fc:bf:35:ce:23:
                    ec:44:36:60:13:71:ad:05:65:af:7a:49:49:30:81:
                    0d:b2:6e:d1:0c:ad:b7:3a:9a:f5:ef:6c:17:b0:41:
                    c2:3f:7f:4a:5c:be:e6:cb:7b:0a:06:23:9b:35:3b:
                    b4:12:38:30:a5:07:6d:5c:f4:66:7d:97:fe:20:53:
                    57:f6:90:e2:8d:ce:ea:83:07:9c:86:3e:37:1d:ba:
                    e4:4d:a3:a7:31:e6:b3:bf:19:75:70:ed:2f:cf:7a:
                    5c:8c:46:98:d7:3d:95:29:a3:2e:ec:5a:7f:34:64:
                    17:cd:89:0a:11:3c:37:d2:1f:0a:1b:8a:42:ec:c0:
                    5b:b6:3b:4b:f1:6e:c1:e9:63:ba:07:34:22:1c:23:
                    30:38:22:ef:fe:23:23:7f:8d:23:69:a2:e9:e6:aa:
                    1b:7e:c7:3b:99:a6:0d:a5:fc:8a:1e:19:52:0d:92:
                    8f:c2:3e:e1:a2:0a:25:78:a2:18:71:d0:09:7a:e0:
                    23:8b:80:05:e9:70:d5:a3:25:57:e6:46:2a:92:7e:
                    1c:a0:94:0d:19:54:c7:82:01:75:da:72:6a:43:06:
                    81:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:40:BD:36:69:63:8B:61:21:50:38:4E:B3:47:74:E8:AB:CA:0D:35
            X509v3 Authority Key Identifier:
                keyid:94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/323430323a666663303a3a2f33322d313238203d3e20313337373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:ffc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:01:1b:e3:74:0a:66:6d:47:3c:d4:2d:36:7e:ec:ed:97:4b:
         ff:e7:ea:f7:a2:d7:71:07:c7:67:f1:0a:ea:9a:32:da:d7:db:
         08:95:40:33:4b:bb:f9:66:17:59:97:8b:0d:5f:cd:20:e0:5f:
         16:de:23:ba:4b:e8:41:b5:26:d0:b8:78:66:12:49:37:67:31:
         da:cb:b7:cf:32:eb:16:da:c6:3b:ef:cc:44:52:a0:74:39:ef:
         4d:f1:8e:87:f8:1e:a6:b9:64:8d:da:dd:5e:53:78:72:3c:6a:
         8d:6f:f8:4a:13:0b:80:4e:61:b0:9f:2a:f5:48:60:5d:2f:e6:
         24:e2:f3:35:dc:02:f2:67:e9:c4:4d:e9:1e:37:4a:53:ae:c2:
         1a:a3:5c:d8:ba:2c:40:a1:83:f1:22:2e:de:fd:55:ff:4e:74:
         90:19:d3:c0:9c:e3:d0:ec:cf:13:70:2f:97:91:ed:c6:0e:eb:
         d8:4e:45:67:e2:17:96:f8:4c:5e:f4:1f:2e:b5:51:e8:e8:d7:
         5f:0a:c6:16:71:66:8f:fd:49:a8:bf:3b:47:6e:b8:2d:bd:f6:
         9b:87:35:37:76:d7:02:31:9c:59:09:59:e4:e2:40:46:76:b7:
         89:3f:50:c3:e2:de:2f:cb:3e:7f:ac:0b:65:11:c8:9d:b4:9c:
         02:44:e4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:15:14 2026 by rpki-client