Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3230322e36392e32352e302f32342d3234203d3e203233383438.roa
File:                     3230322e36392e32352e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier:          PX8IdbRAePF/cbL8RUuUzRIXPY9sO2hAN9U4jfeLEsM=
Subject key identifier:   33:E0:8A:E5:60:17:AE:48:26:D9:A1:C4:A9:94:8F:82:5E:D5:0B:21
Certificate issuer:       /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial:       0C2A02FA7E1147D017907E8A8C827BA2D058FC63
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3230322e36392e32352e302f32342d3234203d3e203233383438.roa
Signing time:             Thu 16 Apr 2026 09:07:33 +0000
ROA not before:           Thu 16 Apr 2026 09:02:33 +0000
ROA not after:            Thu 15 Apr 2027 09:07:33 +0000
asID:                     23848
IP address blocks:        202.69.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 05:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:2a:02:fa:7e:11:47:d0:17:90:7e:8a:8c:82:7b:a2:d0:58:fc:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
        Validity
            Not Before: Apr 16 09:02:33 2026 GMT
            Not After : Apr 15 09:07:33 2027 GMT
        Subject: CN=33E08AE56017AE4826D9A1C4A9948F825ED50B21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b2:2d:7e:35:45:04:00:56:93:1f:8c:f5:6b:
                    01:65:13:31:0c:5f:22:56:91:99:a5:81:3e:e5:d9:
                    30:4a:27:ab:74:1e:21:d3:6d:8a:56:89:96:a1:95:
                    76:d7:b8:a2:51:56:22:03:d6:90:08:be:e0:d0:69:
                    b7:51:c4:3f:97:b7:7a:d0:9a:e6:1a:95:e9:34:42:
                    1e:a2:2b:1a:13:c9:d0:2e:ec:ba:38:01:da:ff:50:
                    28:0a:6d:fb:6b:98:a1:f0:d7:b8:3b:1a:ca:4f:c8:
                    92:48:75:88:c7:b4:ef:c6:64:0d:42:6c:14:a3:02:
                    3c:6c:7b:4e:db:cf:08:f0:f1:a9:f1:38:7f:49:95:
                    e8:cf:49:01:09:55:2e:1a:22:2b:8d:c5:a2:7b:96:
                    6e:bd:43:55:31:f9:d6:01:d9:fe:79:a9:34:9b:43:
                    61:b6:11:d1:c1:55:a7:3f:a0:52:88:37:a9:5b:9f:
                    f9:be:d1:00:c8:2f:9e:af:67:ac:b1:ea:69:3c:60:
                    6f:ae:ba:b0:28:1b:02:51:37:bc:8d:7d:e9:2d:87:
                    f7:55:9b:d1:16:89:15:73:b6:7f:d7:41:cf:1d:b9:
                    95:e1:92:70:14:08:e4:21:06:e2:9c:8f:2f:de:09:
                    31:3d:f1:b6:5f:0a:b6:43:8d:a9:17:14:4e:13:ed:
                    99:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E0:8A:E5:60:17:AE:48:26:D9:A1:C4:A9:94:8F:82:5E:D5:0B:21
            X509v3 Authority Key Identifier:
                keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3230322e36392e32352e302f32342d3234203d3e203233383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.69.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:7b:16:a9:9c:da:d9:93:ca:ba:16:e4:89:25:74:cf:1d:e5:
         d0:ce:85:f3:63:ab:2e:65:ed:88:c4:59:1d:6f:90:19:02:41:
         e5:1e:06:fe:18:cb:48:ae:af:19:07:ad:86:91:8a:da:09:04:
         88:67:fd:53:94:14:80:a6:05:26:ab:4b:fd:84:11:51:91:39:
         12:bc:9b:3a:1c:90:bd:5d:66:a3:c9:93:e2:de:de:ec:fd:37:
         c9:46:97:4a:5b:fb:30:c4:b0:0f:4d:62:dd:a4:a9:e9:59:28:
         36:5b:a8:15:e1:c3:0c:a1:d9:66:63:9a:e4:bd:2a:80:5e:30:
         f1:4c:ee:95:8a:b2:87:3b:dc:07:6e:d9:cc:f4:9f:7b:bb:02:
         f1:19:17:99:97:df:d6:f8:8c:94:36:a4:5e:69:08:63:5c:ce:
         74:76:ab:b7:d9:40:80:1d:fc:b5:d4:1d:46:87:75:75:18:8b:
         a0:58:4a:3e:00:cf:34:db:e3:2e:db:c0:de:e5:fb:ee:3a:d7:
         fc:53:56:f6:7e:07:4e:fd:55:d1:25:88:e9:cc:86:e5:16:62:
         90:ab:c1:dc:5e:53:eb:0d:a8:c2:a7:33:f0:e2:3c:3f:4f:66:
         6d:80:3d:04:ad:70:8e:c8:5d:a7:23:97:a3:c0:1c:85:4b:91:
         33:36:37:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:27:23 2026 by rpki-client