Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097052342001336322/0/323430373a656338303a3a2f33322d3332203d3e2030.roa
File:                     323430373a656338303a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier:          I2H6S+PDHCuYueVmdvA596FpUYTeqGn4cwFc/hTD/Qs=
Subject key identifier:   4F:85:70:8B:77:67:09:6F:58:6D:BE:7F:B0:40:78:46:DD:F4:88:B6
Certificate issuer:       /CN=6ABD7F185CF85906D0796D3C7AA359D61F5C6847
Certificate serial:       78D7EC77165E805C0539EDAE09B042F850F77B11
Authority key identifier: 6A:BD:7F:18:5C:F8:59:06:D0:79:6D:3C:7A:A3:59:D6:1F:5C:68:47
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6ABD7F185CF85906D0796D3C7AA359D61F5C6847.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097052342001336322/0/323430373a656338303a3a2f33322d3332203d3e2030.roa
Signing time:             Thu 16 Apr 2026 06:55:20 +0000
ROA not before:           Thu 16 Apr 2026 06:50:20 +0000
ROA not after:            Thu 15 Apr 2027 06:55:20 +0000
asID:                     0
IP address blocks:        2407:ec80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097052342001336322/0/6ABD7F185CF85906D0796D3C7AA359D61F5C6847.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097052342001336322/0/6ABD7F185CF85906D0796D3C7AA359D61F5C6847.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6ABD7F185CF85906D0796D3C7AA359D61F5C6847.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 08:45:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d7:ec:77:16:5e:80:5c:05:39:ed:ae:09:b0:42:f8:50:f7:7b:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ABD7F185CF85906D0796D3C7AA359D61F5C6847
        Validity
            Not Before: Apr 16 06:50:20 2026 GMT
            Not After : Apr 15 06:55:20 2027 GMT
        Subject: CN=4F85708B7767096F586DBE7FB0407846DDF488B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d9:35:ef:20:7e:69:9c:16:77:18:82:94:85:
                    32:38:38:f6:c8:dd:a2:41:0c:c8:fa:0b:aa:66:1e:
                    53:bf:aa:df:e3:b2:dd:13:9b:13:56:e8:92:56:e3:
                    c6:b4:3f:ab:e8:27:e1:f3:ed:c4:ea:41:5b:65:ec:
                    d5:24:3c:a0:c9:4c:fa:36:78:43:d1:27:4b:96:bf:
                    82:81:d8:d3:af:ca:38:c8:dc:0c:5a:02:6a:9e:c5:
                    2e:64:c5:cd:e4:75:bb:de:d8:e4:a7:b8:ab:0a:0e:
                    a6:73:73:68:7a:5a:a8:3e:d7:70:0f:52:a6:bc:50:
                    96:92:95:35:59:2e:d6:3f:03:aa:a5:24:4d:47:64:
                    9f:ac:a5:8c:5b:1a:96:d3:dd:f7:3a:eb:df:e5:97:
                    3f:fd:a3:9d:33:ca:85:a9:35:d8:e5:42:d5:9c:52:
                    a1:c0:98:a5:8e:a9:9b:11:57:23:86:af:1a:5f:7b:
                    25:0f:8b:c6:b1:f8:b2:f9:20:fd:74:b6:26:c6:cd:
                    34:64:26:dd:b5:dc:ef:fb:f1:29:20:00:29:26:37:
                    1c:d3:9e:1a:47:00:04:d0:31:41:db:fd:65:bc:f5:
                    8d:cc:57:2b:b5:bc:ce:19:a1:e1:d9:31:e9:e3:c6:
                    7c:f0:6c:e8:b4:59:af:65:05:60:dc:6e:f2:38:24:
                    fb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:85:70:8B:77:67:09:6F:58:6D:BE:7F:B0:40:78:46:DD:F4:88:B6
            X509v3 Authority Key Identifier:
                keyid:6A:BD:7F:18:5C:F8:59:06:D0:79:6D:3C:7A:A3:59:D6:1F:5C:68:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097052342001336322/0/6ABD7F185CF85906D0796D3C7AA359D61F5C6847.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6ABD7F185CF85906D0796D3C7AA359D61F5C6847.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097052342001336322/0/323430373a656338303a3a2f33322d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:ec80::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:b6:c7:5c:7a:e7:cd:7d:88:35:35:60:fc:10:81:a8:54:11:
         aa:7b:c5:6f:88:50:dc:93:ea:34:8f:62:2d:f2:3e:80:d4:43:
         e6:9d:7f:54:3a:d6:e4:b6:7d:21:d8:22:dd:c7:b1:ab:9e:72:
         a3:e4:9d:d3:05:7f:e5:b3:e0:ff:83:79:4a:dc:83:10:92:18:
         22:2c:fe:79:e4:d7:2b:42:41:73:ba:79:cb:70:84:a2:ce:b7:
         be:59:fc:23:ae:9b:31:fc:2f:85:bf:a9:b2:c4:1b:41:7f:9b:
         27:84:0c:c1:c4:38:b9:f6:b3:92:3d:7b:57:dc:90:02:5b:7e:
         26:08:6b:ff:1a:5b:5f:ca:76:18:ac:d8:ad:be:4b:0d:d3:d3:
         06:d5:e5:82:00:76:95:a5:ca:21:4a:e0:82:ce:10:07:96:55:
         f9:c5:50:9b:e8:96:0b:d3:da:7f:3c:63:cf:fd:54:28:d5:75:
         e7:ed:7e:dd:2b:e9:a1:c0:8f:be:70:17:0f:0a:59:60:37:17:
         77:33:64:f8:46:7b:02:97:51:8f:12:0a:cc:55:c1:37:b5:f5:
         43:8b:3f:5c:78:98:7e:e6:bc:d5:bb:36:99:a1:31:03:e4:9a:
         3a:7a:94:ae:68:8a:a4:3d:dd:d7:30:ba:b9:58:9a:ec:8e:a7:
         df:55:13:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:36:04 2026 by rpki-client