Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096700400205037570/0/323430333a333438303a3a2f33322d313238203d3e20313337373935.roa
File:                     323430333a333438303a3a2f33322d313238203d3e20313337373935.roa (raw, json)
Hash identifier:          01EQRfFNBLZtIBFUU+0+xXPUTEcW/BIBd90WQEzHptk=
Subject key identifier:   84:61:A2:B1:EA:4E:23:8F:F9:05:73:32:19:32:B9:43:C1:86:DB:5F
Certificate issuer:       /CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
Certificate serial:       660C0F6E2F07DED20EFDC7FB920847E076AEBBB4
Authority key identifier: 94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/323430333a333438303a3a2f33322d313238203d3e20313337373935.roa
Signing time:             Wed 15 Apr 2026 07:40:57 +0000
ROA not before:           Wed 15 Apr 2026 07:35:57 +0000
ROA not after:            Wed 14 Apr 2027 07:40:57 +0000
asID:                     137795
IP address blocks:        2403:3480::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:0c:0f:6e:2f:07:de:d2:0e:fd:c7:fb:92:08:47:e0:76:ae:bb:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
        Validity
            Not Before: Apr 15 07:35:57 2026 GMT
            Not After : Apr 14 07:40:57 2027 GMT
        Subject: CN=8461A2B1EA4E238FF90573321932B943C186DB5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e3:a4:ea:85:6d:00:4d:ce:37:e8:0d:2e:37:
                    a6:80:fe:90:6a:55:56:5a:42:d5:0c:40:2e:2f:de:
                    c4:66:c4:96:2f:a7:1d:df:12:3a:8c:a7:fc:ef:79:
                    5e:5c:90:57:7b:65:06:cf:ee:f3:17:8c:d3:e2:81:
                    6d:ba:9e:75:8c:4b:18:9b:18:bc:e3:9b:be:0a:26:
                    15:c9:50:15:32:5e:c6:3e:65:1b:86:fa:b9:98:fb:
                    7e:53:c0:aa:ba:9c:db:a3:2a:d2:e3:a9:27:5b:7b:
                    f9:ae:64:2c:41:3b:d3:a6:ab:c7:20:e8:b5:f1:9f:
                    9b:b2:01:16:8d:72:00:24:d0:5f:9f:a3:b9:31:35:
                    54:cd:50:73:fb:9e:87:de:35:07:2f:0a:74:aa:bc:
                    22:68:72:95:f7:2e:03:42:c8:9b:94:55:a1:90:20:
                    e1:85:9d:65:2e:ae:65:41:07:dc:28:29:2c:b7:2a:
                    98:0b:49:c0:1f:c8:57:56:23:e9:30:d6:61:9b:7f:
                    78:a0:30:3b:ae:bb:50:1e:41:38:c9:5b:0f:9a:1b:
                    46:fa:8f:c0:de:ca:56:e9:1c:b9:c1:9d:a0:6a:e4:
                    78:d7:fc:d2:9c:98:58:a9:a5:a3:84:57:0d:70:c6:
                    52:de:ab:07:47:ee:e1:e6:01:ab:ba:82:b6:96:bd:
                    71:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:61:A2:B1:EA:4E:23:8F:F9:05:73:32:19:32:B9:43:C1:86:DB:5F
            X509v3 Authority Key Identifier:
                keyid:94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/323430333a333438303a3a2f33322d313238203d3e20313337373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:3480::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:8b:e9:74:5e:7e:39:0f:92:37:4e:8e:e5:60:77:96:96:f9:
         a6:ad:b3:39:62:60:ca:e2:e6:58:da:e5:27:9e:f6:f7:45:5c:
         09:3e:b0:4f:6a:7a:0f:7a:65:33:34:01:88:1e:03:95:43:52:
         ec:b7:02:e1:a8:31:70:bf:ed:92:67:c2:15:09:51:2c:1f:30:
         4c:5e:10:52:46:81:91:a0:fd:68:c8:fd:69:9d:57:7a:59:19:
         75:d1:39:99:99:59:dc:b9:cd:fa:01:c6:9d:b7:7f:0d:ff:97:
         f1:3f:87:64:f1:b8:90:bc:5e:33:be:19:94:9f:87:6f:61:b1:
         5d:85:3b:47:13:bf:36:5a:88:cf:d2:cd:ac:0d:d3:4f:74:64:
         51:41:3c:7a:a5:68:a5:9f:ea:0a:46:48:5b:7c:92:f4:74:b9:
         9b:60:59:28:73:43:e3:6f:f4:ab:55:a3:b5:8f:b6:58:00:bb:
         bf:d6:e8:60:ac:07:60:9b:61:91:11:e0:b7:42:94:b4:58:0e:
         06:a3:b8:3b:0c:86:4b:d8:34:d0:eb:16:4e:3f:7a:cc:e6:e1:
         c4:9d:bb:eb:3c:6f:b8:35:c0:c4:78:08:57:f5:26:83:b8:74:
         64:63:b6:53:91:fb:fd:de:12:24:61:35:ce:9a:02:be:3e:07:
         3a:4f:36:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:42:56 2026 by rpki-client