Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3230322e36392e32362e302f32342d3234203d3e203233383438.roa
File:                     3230322e36392e32362e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier:          H4/z7NeHelp2WHk0aOZ0a+uDZVDUnUtVBbWbWiiKZQs=
Subject key identifier:   7D:D7:5D:CF:72:79:17:EC:3A:72:06:F4:A7:48:57:83:E2:45:85:1A
Certificate issuer:       /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial:       6248185C0BBCF31420400AC29A8EC1852E3D237B
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3230322e36392e32362e302f32342d3234203d3e203233383438.roa
Signing time:             Thu 16 Apr 2026 09:07:32 +0000
ROA not before:           Thu 16 Apr 2026 09:02:32 +0000
ROA not after:            Thu 15 Apr 2027 09:07:32 +0000
asID:                     23848
IP address blocks:        202.69.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 05:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:48:18:5c:0b:bc:f3:14:20:40:0a:c2:9a:8e:c1:85:2e:3d:23:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
        Validity
            Not Before: Apr 16 09:02:32 2026 GMT
            Not After : Apr 15 09:07:32 2027 GMT
        Subject: CN=7DD75DCF727917EC3A7206F4A7485783E245851A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:90:b8:6f:1f:38:2c:12:a2:99:88:a3:ac:43:
                    3f:1d:2f:6f:ae:1f:3a:3e:50:88:ff:53:6e:8f:db:
                    e7:cf:be:be:93:c9:69:2a:91:36:31:af:b0:f4:a2:
                    3d:ca:36:18:9d:be:b4:ff:2e:69:43:f3:53:75:23:
                    a1:65:eb:35:7f:a4:cd:e1:fd:47:4f:5b:ea:fe:74:
                    5b:19:2a:55:b4:f2:fe:78:58:6c:e7:e8:48:38:47:
                    1e:29:4e:8a:61:e4:a2:b2:8f:11:18:60:4b:e1:81:
                    0a:07:43:50:a3:94:4c:76:1b:a5:a5:b0:61:62:0f:
                    45:78:05:ac:80:6b:cc:51:28:88:23:a2:3b:27:07:
                    0b:36:0d:c0:ad:4d:04:26:95:e6:23:7a:af:9c:c7:
                    9d:48:60:ab:5a:ed:fc:e2:70:a1:fb:f2:6c:b2:71:
                    09:c0:ba:6f:c5:4e:e6:d6:6a:f9:22:e1:d2:28:cd:
                    bc:4c:a1:de:19:0f:34:6a:d8:be:07:23:53:c9:49:
                    b3:cd:fc:cd:c6:34:75:e2:c6:74:40:8a:00:75:59:
                    eb:92:60:eb:c3:50:3c:91:3c:22:bc:db:6b:79:dd:
                    16:b2:3a:10:c2:f7:63:84:98:dd:41:18:59:49:1a:
                    78:f2:58:50:9c:81:5b:37:40:aa:86:e8:46:7f:d1:
                    2d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D7:5D:CF:72:79:17:EC:3A:72:06:F4:A7:48:57:83:E2:45:85:1A
            X509v3 Authority Key Identifier:
                keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3230322e36392e32362e302f32342d3234203d3e203233383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.69.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:26:0e:c9:23:3a:a3:77:f3:e6:10:a7:94:cd:25:57:83:a5:
         64:99:95:c1:41:d2:4f:82:0e:bc:ec:94:46:66:7e:a3:f9:17:
         f9:20:41:7c:28:3c:5a:96:fa:24:01:14:83:59:cc:a3:49:35:
         ee:f0:78:21:ee:b3:0f:b8:fd:54:91:6b:07:c7:2d:99:43:d0:
         29:be:c6:11:c0:33:fe:38:47:84:bb:0e:b6:c2:ae:44:aa:f6:
         5b:ef:bc:fa:ab:a8:90:b0:03:17:c5:e6:51:d7:97:9d:6a:fd:
         cd:44:bd:ca:c8:48:bd:17:28:e3:3c:43:45:cc:65:7f:08:85:
         5a:af:60:fb:d9:6f:14:33:9b:6c:3f:e6:9f:69:17:95:d1:80:
         c5:13:8d:33:3b:7a:a1:08:4f:89:ba:d0:dc:e2:e1:20:d5:9e:
         50:d8:39:b8:2e:eb:25:f4:09:f8:fd:78:11:02:5d:4e:34:de:
         8b:0b:e0:fd:6c:c9:29:57:21:e7:bb:6b:4a:76:78:da:58:0e:
         27:a1:83:90:97:ad:d1:8c:54:04:c5:46:47:62:55:df:18:70:
         d5:95:10:7a:60:25:b4:4b:01:04:11:8e:11:c6:7b:ed:65:06:
         98:c8:9f:23:e1:0b:52:1c:ce:65:48:cd:d8:99:a9:3e:20:d8:
         dc:eb:93:26
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUYkgYXAu88xQgQArCmo7BhS49I3swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURBODg0QTc5NzQ4RDU3RUI0OTM2NjcwNENCNkE4MTEw
RTI3MDQyRDAeFw0yNjA0MTYwOTAyMzJaFw0yNzA0MTUwOTA3MzJaMDMxMTAvBgNV
BAMTKDdERDc1RENGNzI3OTE3RUMzQTcyMDZGNEE3NDg1NzgzRTI0NTg1MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDskLhvHzgsEqKZiKOsQz8dL2+u
Hzo+UIj/U26P2+fPvr6TyWkqkTYxr7D0oj3KNhidvrT/LmlD81N1I6Fl6zV/pM3h
/UdPW+r+dFsZKlW08v54WGzn6Eg4Rx4pToph5KKyjxEYYEvhgQoHQ1CjlEx2G6Wl
sGFiD0V4BayAa8xRKIgjojsnBws2DcCtTQQmleYjeq+cx51IYKta7fzicKH78myy
cQnAum/FTubWavki4dIozbxMod4ZDzRq2L4HI1PJSbPN/M3GNHXixnRAigB1WeuS
YOvDUDyRPCK822t53RayOhDC92OEmN1BGFlJGnjyWFCcgVs3QKqG6EZ/0S25AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUfdddz3J5F+w6cgb0p0hXg+JFhRowHwYDVR0j
BBgwFoAU7aiEp5dI1X60k2ZwTLaoEQ4nBC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzA4MzUzMjM1NTgyOTc2My8wL0VEQTg4NEE3OTc0OEQ1N0VCNDkzNjY3MDRDQjZB
ODExMEUyNzA0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRURBODg0QTc5NzQ4RDU3RUI0OTM2NjcwNENCNkE4MTEwRTI3MDQyRC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk3MDgzNTMyMzU1ODI5NzYzLzAvMzIzMDMyMmUzNjM5
MmUzMjM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM4MzQzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMpFGjANBgkqhkiG9w0BAQsFAAOCAQEAACYOySM6o3fz5hCnlM0lV4OlZJmV
wUHST4IOvOyURmZ+o/kX+SBBfCg8Wpb6JAEUg1nMo0k17vB4Ie6zD7j9VJFrB8ct
mUPQKb7GEcAz/jhHhLsOtsKuRKr2W++8+quokLADF8XmUdeXnWr9zUS9yshIvRco
4zxDRcxlfwiFWq9g+9lvFDObbD/mn2kXldGAxRONMzt6oQhPibrQ3OLhINWeUNg5
uC7rJfQJ+P14EQJdTjTeiwvg/WzJKVch57trSnZ42lgOJ6GDkJet0YxUBMVGR2JV
3xhw1ZUQemAltEsBBBGOEcZ77WUGmMifI+ELUhzOZUjN2JmpPiDY3OuTJg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:27:25 2026 by rpki-client