Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096993931276582914/0/323430313a633032303a3a2f33322d3332203d3e20313531323736.roa
File:                     323430313a633032303a3a2f33322d3332203d3e20313531323736.roa (raw, json)
Hash identifier:          sWyLgWj9a8RCb7kKBNUwmHI7X2u5++ri+kUpNqQ/hsk=
Subject key identifier:   7E:9B:8C:BA:02:ED:A5:C9:10:88:73:3E:DF:21:25:94:3D:3A:46:70
Certificate issuer:       /CN=D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682
Certificate serial:       381576178B13793AA5E13A7729D856C6E6ED763D
Authority key identifier: D0:8B:5F:D1:41:F6:E4:B4:E8:21:9F:F3:E8:D9:79:CA:4B:9A:D6:82
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/323430313a633032303a3a2f33322d3332203d3e20313531323736.roa
Signing time:             Thu 16 Apr 2026 03:08:12 +0000
ROA not before:           Thu 16 Apr 2026 03:03:12 +0000
ROA not after:            Thu 15 Apr 2027 03:08:12 +0000
asID:                     151276
IP address blocks:        2401:c020::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 16:10:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:15:76:17:8b:13:79:3a:a5:e1:3a:77:29:d8:56:c6:e6:ed:76:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682
        Validity
            Not Before: Apr 16 03:03:12 2026 GMT
            Not After : Apr 15 03:08:12 2027 GMT
        Subject: CN=7E9B8CBA02EDA5C91088733EDF2125943D3A4670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:62:d3:88:f3:0d:79:dc:02:28:df:94:63:9d:
                    1c:c9:1a:2c:be:2e:8c:6c:76:ff:fe:9f:70:42:0c:
                    35:b3:e9:cb:1d:d4:7d:44:7b:06:db:3a:53:27:5c:
                    92:2f:a8:52:3d:e4:e1:1e:48:86:8a:d2:68:ec:02:
                    3f:b9:2b:0c:b8:e0:0a:5b:8e:46:4b:d5:80:26:ce:
                    c9:b6:4b:ef:d7:b6:f6:64:35:35:e1:7e:e9:e7:74:
                    ea:01:33:18:c4:95:40:aa:f8:7e:71:dd:f3:4d:93:
                    91:7b:19:59:d2:e3:94:b9:e0:5c:89:27:2e:43:9d:
                    5e:18:e2:2c:19:2f:43:cd:9a:d4:e1:a5:35:38:69:
                    56:a6:9d:88:df:22:c7:56:01:c6:d3:1d:cc:47:49:
                    89:48:45:34:07:cf:d0:ee:a6:27:32:54:23:76:2f:
                    6d:a4:5d:e1:6b:c1:1f:d0:af:1b:bc:ce:d4:bb:ce:
                    bd:2f:85:fe:75:e4:a8:e8:a7:1c:b3:79:16:db:5b:
                    17:d0:af:bf:9b:96:4e:15:d2:d9:e6:70:53:bb:24:
                    ba:c7:62:1f:a3:c6:35:ed:d2:3e:20:ff:32:90:e1:
                    41:cc:13:c8:20:45:36:38:b4:4b:a2:66:f6:39:a1:
                    f9:89:aa:62:87:5c:32:2a:6c:7f:6a:a5:e3:55:2a:
                    1b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9B:8C:BA:02:ED:A5:C9:10:88:73:3E:DF:21:25:94:3D:3A:46:70
            X509v3 Authority Key Identifier:
                keyid:D0:8B:5F:D1:41:F6:E4:B4:E8:21:9F:F3:E8:D9:79:CA:4B:9A:D6:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/323430313a633032303a3a2f33322d3332203d3e20313531323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:c020::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:e8:b2:98:9d:48:2a:28:49:72:20:c1:c8:dd:11:d4:9c:c0:
         3f:7b:da:16:3f:31:46:4c:87:68:fb:85:86:a3:83:83:f2:4d:
         20:69:9f:b2:a7:58:85:6f:20:74:d7:00:fa:95:61:ee:64:b4:
         0a:92:2e:c7:5f:dd:02:ea:03:5d:53:20:29:b7:aa:d9:82:84:
         08:97:10:99:3a:1d:dd:11:ba:38:6f:54:0c:3b:f7:5a:98:5e:
         7b:86:d3:01:18:2a:a9:8e:27:f6:13:f8:d2:6b:36:f6:e6:0f:
         32:6e:c4:49:d0:b8:dc:21:bb:b3:3c:bc:00:b5:79:45:6a:d0:
         ae:b5:45:9f:97:fb:16:67:1f:aa:4c:20:69:86:b7:50:9d:2c:
         46:4b:ec:5e:42:4c:35:7b:87:f7:7e:4b:68:49:44:2a:41:c7:
         bd:07:5f:e8:db:21:f2:b4:48:d2:28:88:c5:9c:91:f7:1e:91:
         e0:5a:90:10:a0:ad:b0:08:19:61:b9:f3:26:13:c9:b7:e6:c5:
         5e:d5:42:fd:b7:e6:0f:37:29:e4:77:9b:53:ed:57:df:ea:65:
         41:38:66:30:f8:06:42:58:e0:08:28:ca:4a:fb:c1:a7:d9:58:
         a4:af:d4:14:e5:07:e9:bf:03:15:0e:57:48:1e:b8:24:f3:c5:
         4b:63:41:6b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 18 05:31:37 2026 by rpki-client