Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096761453970456578/0/323430373a396263303a3a2f33322d3332203d3e20313436373436.roa
File:                     323430373a396263303a3a2f33322d3332203d3e20313436373436.roa (raw, json)
Hash identifier:          Oy/Z6kZQu3MFqdajWzdr4HEF6jg7aYQKFEno2tldjJE=
Subject key identifier:   76:B1:75:E3:A3:2F:D1:14:72:B6:C5:8C:5A:93:FD:37:6B:61:9F:D5
Certificate issuer:       /CN=FAD0AD5CC58FB4B3271569A16C805A53AB4A270D
Certificate serial:       25CC9DDAC94D056E4298545CEF9B21AC215CAB
Authority key identifier: FA:D0:AD:5C:C5:8F:B4:B3:27:15:69:A1:6C:80:5A:53:AB:4A:27:0D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/323430373a396263303a3a2f33322d3332203d3e20313436373436.roa
Signing time:             Wed 15 Apr 2026 11:40:02 +0000
ROA not before:           Wed 15 Apr 2026 11:35:02 +0000
ROA not after:            Wed 14 Apr 2027 11:40:02 +0000
asID:                     146746
IP address blocks:        2407:9bc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:cc:9d:da:c9:4d:05:6e:42:98:54:5c:ef:9b:21:ac:21:5c:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAD0AD5CC58FB4B3271569A16C805A53AB4A270D
        Validity
            Not Before: Apr 15 11:35:02 2026 GMT
            Not After : Apr 14 11:40:02 2027 GMT
        Subject: CN=76B175E3A32FD11472B6C58C5A93FD376B619FD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0b:9f:4a:1f:b5:5a:74:ae:17:73:06:2e:e7:
                    bb:57:dd:68:96:72:2f:16:d3:20:90:80:7f:89:f5:
                    4d:20:42:d2:5a:30:8c:5b:87:0f:c9:a6:5a:8c:1c:
                    b5:3e:68:02:45:34:69:16:5b:d9:48:f6:94:91:40:
                    05:69:f5:b7:2e:0a:74:e2:e7:81:0f:a5:0a:92:9d:
                    e9:c7:3e:50:75:ab:3d:66:e5:5c:88:37:7f:8f:35:
                    52:a9:13:8c:67:2c:48:6f:3d:60:72:6e:77:70:bb:
                    65:00:65:3e:df:ab:34:a4:66:4f:1b:fb:61:f2:cc:
                    bc:f0:b9:fb:4f:f0:2a:51:7f:93:58:3f:11:d8:04:
                    be:21:23:ec:38:f8:08:6f:74:52:56:c1:2b:f8:32:
                    1b:46:49:e2:8d:fc:32:e1:0e:d4:47:f6:68:35:8b:
                    37:55:97:4e:32:08:b9:75:ec:d2:c1:0e:0f:f5:2e:
                    bf:79:8e:34:a5:c9:18:82:21:24:5f:66:5d:24:ef:
                    27:06:ec:4e:aa:09:49:ae:cd:12:3c:e9:c8:6b:f2:
                    44:ac:21:41:b0:39:7f:c9:ac:d9:51:1a:4c:18:ea:
                    0d:d2:8f:03:10:82:b0:89:78:2b:fc:c9:b2:52:63:
                    6a:4a:a3:03:3f:4c:2e:21:0f:0f:35:a3:d7:20:f4:
                    05:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B1:75:E3:A3:2F:D1:14:72:B6:C5:8C:5A:93:FD:37:6B:61:9F:D5
            X509v3 Authority Key Identifier:
                keyid:FA:D0:AD:5C:C5:8F:B4:B3:27:15:69:A1:6C:80:5A:53:AB:4A:27:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/323430373a396263303a3a2f33322d3332203d3e20313436373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:9bc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:79:19:ce:88:87:af:f4:25:27:b6:41:1d:1d:93:14:91:1c:
         39:fd:1d:ef:9a:87:74:65:3e:e8:b0:6d:09:1d:ff:ea:5a:17:
         81:4c:e8:46:75:d9:eb:49:0d:e1:cc:db:11:29:fd:35:50:ea:
         4c:c4:ff:77:9d:74:f1:32:56:dc:92:75:09:22:f9:27:73:00:
         fa:f6:6a:bd:d3:e8:59:f5:9b:80:5f:69:67:cc:15:ee:38:f4:
         5a:c6:57:11:4d:0e:6b:57:1d:a0:05:fb:02:99:76:bd:dd:64:
         21:01:4f:90:b9:86:b3:f7:dc:c5:71:cf:ef:e9:8c:b9:af:91:
         33:7f:86:94:80:61:c7:f5:16:11:a4:92:64:29:ba:63:35:78:
         ba:fe:57:cd:d7:25:52:15:8e:af:44:7f:06:2f:f5:6c:b7:c9:
         d5:8e:a6:92:e6:38:0f:00:49:ec:f5:c6:d1:e0:29:c4:d6:9b:
         cb:a8:6d:78:4b:32:f8:a8:a6:e8:99:23:15:95:45:b3:5c:d2:
         e6:42:3b:07:7b:dc:84:f0:b5:d5:2d:ed:1f:72:9f:90:ff:5f:
         43:4b:7c:64:c7:0b:ca:cb:9f:a5:6b:21:6c:a3:f4:41:9d:d9:
         91:22:25:b4:10:73:ba:5c:ed:0d:73:75:f1:03:e3:4c:d5:86:
         5e:66:c9:da
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:55:58 2026 by rpki-client