Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3230322e36392e32332e302f32342d3234203d3e203233383438.roa
File:                     3230322e36392e32332e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier:          DqdaRJggpLfVXTzG8XBJOudeH4ZMWmI6/lY4lK4pBvc=
Subject key identifier:   38:7A:BE:21:CE:78:1A:3C:7D:06:3E:A6:5A:AD:DB:88:D7:E3:2E:05
Certificate issuer:       /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial:       244C62405F4F5090A36BEBAF12D525BF853EAF65
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3230322e36392e32332e302f32342d3234203d3e203233383438.roa
Signing time:             Thu 16 Apr 2026 09:07:32 +0000
ROA not before:           Thu 16 Apr 2026 09:02:32 +0000
ROA not after:            Thu 15 Apr 2027 09:07:32 +0000
asID:                     23848
IP address blocks:        202.69.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:4c:62:40:5f:4f:50:90:a3:6b:eb:af:12:d5:25:bf:85:3e:af:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
        Validity
            Not Before: Apr 16 09:02:32 2026 GMT
            Not After : Apr 15 09:07:32 2027 GMT
        Subject: CN=387ABE21CE781A3C7D063EA65AADDB88D7E32E05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:82:c1:73:04:d2:c4:fd:00:8c:28:cd:b7:4e:
                    2d:8e:3e:00:b8:60:20:37:cd:c4:65:78:e5:54:72:
                    8e:87:a1:94:1f:da:e9:55:81:c1:69:78:25:0c:93:
                    c3:91:f2:8d:0a:4e:79:90:15:4a:09:8b:e5:ee:b1:
                    55:7d:04:44:1f:6c:55:00:dc:90:26:dd:b8:e4:ec:
                    dd:1c:cb:63:58:f8:39:40:b5:b3:83:e7:39:53:20:
                    bc:3b:5b:06:ba:f6:16:4e:18:e6:c4:92:f8:ba:62:
                    7a:75:4d:8b:72:77:e6:f9:4e:d3:c9:1b:c5:ae:fe:
                    47:fa:e3:e8:d6:8c:f1:d0:34:67:7c:49:58:1c:27:
                    62:c6:2c:ad:fa:94:ee:dc:13:6b:b7:09:2a:08:45:
                    ae:d8:2a:bb:ea:c5:71:85:2c:b7:68:73:a4:08:1f:
                    5a:f2:78:4b:d1:26:0e:17:7b:62:4c:d6:83:28:c2:
                    98:a6:59:c0:b5:02:da:1b:34:2f:ef:00:78:ca:30:
                    e9:5e:05:2e:f5:77:00:ed:f3:44:d9:c3:07:95:7d:
                    ae:61:05:71:84:c9:9c:22:c1:e9:04:38:b5:fc:15:
                    43:f5:d6:40:41:04:6c:0b:da:3b:5e:40:e6:a2:46:
                    fb:4f:72:78:8e:6c:1d:92:5c:53:43:98:d1:90:0b:
                    b4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7A:BE:21:CE:78:1A:3C:7D:06:3E:A6:5A:AD:DB:88:D7:E3:2E:05
            X509v3 Authority Key Identifier:
                keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3230322e36392e32332e302f32342d3234203d3e203233383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.69.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:c8:95:97:00:64:d1:7b:61:f0:3f:fb:89:6f:e8:0f:4a:d3:
         0f:a9:4c:ee:8d:bd:7c:87:ff:23:02:35:49:fb:a1:77:30:e5:
         df:0b:04:29:38:bd:19:4a:00:c7:77:c0:da:bb:75:b1:53:30:
         29:ff:eb:6f:8b:10:aa:aa:6f:cf:ca:39:be:8b:fd:2c:48:23:
         fe:6d:8b:59:89:2f:1c:c0:34:9b:c4:1e:eb:bb:21:29:5c:b5:
         49:04:5f:a0:2c:a8:a7:63:1b:c2:74:e8:cc:c6:4e:0d:69:a4:
         36:2b:0c:eb:93:38:21:63:81:40:2a:71:41:c8:b5:e3:8d:27:
         9c:46:8e:e2:d6:73:30:d3:d7:aa:c6:9d:6c:04:dd:9f:c0:e5:
         cd:8b:09:9a:78:30:9c:32:99:74:c3:0c:38:9d:f8:12:48:61:
         de:31:37:bc:c0:c5:04:bf:57:6c:dc:32:33:a9:4b:9f:05:ab:
         cc:3d:ae:88:e6:5d:6f:30:c7:7e:13:91:b5:c9:fa:d8:d0:62:
         6d:bf:e2:29:a6:9e:e5:b0:85:66:f2:df:c0:a1:f6:6a:41:fc:
         b1:53:c4:29:7e:61:bc:61:38:de:de:25:04:9b:9e:5d:19:74:
         9c:c3:62:71:fb:b9:8f:2e:15:76:98:3e:85:2f:66:9d:1c:74:
         be:99:72:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:59:14 2026 by rpki-client