Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a31323a3a2f34382d3438203d3e203536303431.roa
File:                     323430323a396238303a31323a3a2f34382d3438203d3e203536303431.roa (raw, json)
Hash identifier:          y14cfiqJLAv4aOeLmcwPQJcRoSmId2qZeC9IrnsghN0=
Subject key identifier:   F3:E6:1E:6E:A3:A7:FD:E8:E6:B7:33:B0:8C:34:D8:C2:8F:AD:68:EF
Certificate issuer:       /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Certificate serial:       792911CB6E3DA3A03D3CAD78B5394E6E4E00081E
Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a31323a3a2f34382d3438203d3e203536303431.roa
Signing time:             Wed 15 Apr 2026 09:35:30 +0000
ROA not before:           Wed 15 Apr 2026 09:30:30 +0000
ROA not after:            Wed 14 Apr 2027 09:35:30 +0000
asID:                     56041
IP address blocks:        2402:9b80:12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:29:11:cb:6e:3d:a3:a0:3d:3c:ad:78:b5:39:4e:6e:4e:00:08:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
        Validity
            Not Before: Apr 15 09:30:30 2026 GMT
            Not After : Apr 14 09:35:30 2027 GMT
        Subject: CN=F3E61E6EA3A7FDE8E6B733B08C34D8C28FAD68EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8c:ad:d8:23:88:d7:f3:85:8d:de:80:59:80:
                    c1:f2:c9:50:6e:7b:82:26:9e:ec:71:4a:33:77:88:
                    0f:d4:af:ea:8c:f2:62:1e:0a:b7:3a:4d:ea:2f:0d:
                    58:ff:ed:48:24:9b:f0:66:b5:bd:75:10:51:15:30:
                    0b:62:e0:70:ff:4c:55:6e:e7:62:f4:9d:b3:be:4a:
                    b4:a1:53:4d:cb:47:9d:2f:21:8e:74:a4:17:e0:46:
                    97:ca:8e:1f:ca:14:bc:c8:59:54:35:00:76:43:9f:
                    6e:17:ad:0a:23:6c:ec:55:9f:ff:dd:d3:f7:1e:4e:
                    21:49:2e:88:95:a2:69:4e:27:06:17:64:1f:05:7d:
                    30:5b:d6:f0:3b:37:0c:35:90:d2:97:85:a3:41:38:
                    7e:e0:e9:6c:35:a6:ad:9d:09:17:5b:cc:89:59:4e:
                    6a:f2:ea:52:99:03:af:fd:20:63:83:c5:2f:f4:3c:
                    d8:aa:7a:51:1a:71:76:92:cd:70:a9:c9:33:51:ff:
                    ff:6c:c5:45:46:b9:03:f9:2d:41:7b:f1:69:2e:54:
                    e4:40:7c:23:ab:7d:37:1c:d1:20:38:01:b6:a0:14:
                    ca:f0:64:de:b7:83:56:cb:01:9b:89:8d:51:81:3b:
                    8c:1f:84:4b:9c:3c:60:0e:e2:8a:72:38:b9:b1:e0:
                    d9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E6:1E:6E:A3:A7:FD:E8:E6:B7:33:B0:8C:34:D8:C2:8F:AD:68:EF
            X509v3 Authority Key Identifier:
                keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a31323a3a2f34382d3438203d3e203536303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9b80:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         d3:f9:d4:8a:0c:ba:ae:f9:fa:23:27:48:36:8a:3d:3b:f2:3b:
         af:3c:44:4b:38:e4:a8:d7:bc:1a:61:e0:e0:aa:47:fd:d9:20:
         b5:2d:4a:55:51:63:ce:98:7d:ec:a5:75:56:bc:b6:b4:e9:e9:
         a2:28:e8:8d:d8:8b:dd:e2:b6:a6:1c:22:8c:e9:07:89:ac:1a:
         45:09:84:b0:7b:f6:b4:2f:05:b2:59:eb:38:11:bc:c9:03:88:
         6e:57:7c:7a:2d:c8:c8:a8:3d:a4:9b:39:cb:ae:70:4b:19:ca:
         45:f4:6f:7f:f3:ef:49:66:13:4e:3c:d5:c1:21:02:3a:88:da:
         d9:b1:40:ff:bd:68:77:95:d8:c0:f0:ca:43:73:43:7b:02:ae:
         b0:37:f4:04:c1:a1:bf:96:87:83:e5:1c:31:58:4e:04:14:9b:
         f9:4c:17:69:4a:e4:ed:cd:2c:f3:44:a9:43:57:df:3d:a8:a2:
         43:5a:b7:89:68:53:23:8c:28:44:61:b0:51:a8:b4:5a:35:2f:
         8a:70:98:45:83:3a:c6:06:b6:3b:cb:81:cb:98:71:1e:8e:8c:
         27:1f:cd:b0:0c:6f:5c:8d:f5:5b:2f:65:e7:28:b3:9f:88:83:
         f2:9c:8e:e6:e6:8b:db:ac:4f:96:85:22:f7:6e:fa:6b:cb:ec:
         fa:76:a1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:43:52 2026 by rpki-client