Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3230322e36392e32372e302f32342d3234203d3e203233383438.roa
File:                     3230322e36392e32372e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier:          6HAq5trok9TcrWFg3PdDStEXBe+BXLs8nFSzPbAjMUk=
Subject key identifier:   61:0B:F3:79:21:10:BB:66:DC:97:89:9D:25:D7:9D:52:A0:B7:DB:0D
Certificate issuer:       /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial:       1DE792E1EECF430BF0FC6C6514796D0BF609009A
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3230322e36392e32372e302f32342d3234203d3e203233383438.roa
Signing time:             Thu 16 Apr 2026 09:07:31 +0000
ROA not before:           Thu 16 Apr 2026 09:02:31 +0000
ROA not after:            Thu 15 Apr 2027 09:07:31 +0000
asID:                     23848
IP address blocks:        202.69.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 05:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:e7:92:e1:ee:cf:43:0b:f0:fc:6c:65:14:79:6d:0b:f6:09:00:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
        Validity
            Not Before: Apr 16 09:02:31 2026 GMT
            Not After : Apr 15 09:07:31 2027 GMT
        Subject: CN=610BF3792110BB66DC97899D25D79D52A0B7DB0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:47:94:d6:d0:15:d2:6d:40:6f:fb:82:92:12:
                    6b:c3:59:0f:15:2c:f8:9e:cb:53:81:d9:6c:e2:17:
                    6a:21:af:b2:fc:1c:ad:95:d2:87:63:32:5d:db:78:
                    f6:17:d6:19:eb:f7:f1:19:3a:4c:43:10:c8:f2:11:
                    11:b4:00:02:e6:9d:1b:39:a2:6a:85:79:5b:80:8b:
                    e8:2c:3f:fe:f4:1a:f5:24:c8:e4:25:13:65:1c:7b:
                    b1:81:37:8a:ab:b0:52:2b:54:2f:cf:9b:4f:23:86:
                    9d:a1:33:24:c7:b3:03:5e:ff:f5:35:3e:2f:8b:49:
                    23:01:b2:1b:96:ab:4c:d2:5f:d5:7d:30:9f:f3:02:
                    5d:cc:35:e1:e8:2e:a5:d7:29:94:ba:df:d9:a9:e6:
                    31:8a:ab:b2:a8:ed:d8:6f:ad:96:73:f8:05:57:1f:
                    d4:df:52:0e:35:ec:bd:79:56:ea:b5:0e:c1:2e:b1:
                    0a:e2:d6:c9:7a:32:ae:e6:79:c2:38:49:f8:20:a7:
                    97:e3:9e:b3:6f:0c:78:df:f4:19:32:d7:5d:a5:d6:
                    1b:18:71:00:8e:74:c8:31:1c:2a:ad:1e:69:d1:80:
                    07:67:50:7b:2e:23:1f:43:21:ce:2a:7b:ff:70:c7:
                    ed:ac:73:b6:a9:2a:c5:ec:a4:27:27:f6:2a:ff:68:
                    ba:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:0B:F3:79:21:10:BB:66:DC:97:89:9D:25:D7:9D:52:A0:B7:DB:0D
            X509v3 Authority Key Identifier:
                keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3230322e36392e32372e302f32342d3234203d3e203233383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.69.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:4e:be:fc:5d:f9:d4:13:c1:dc:96:55:86:9d:75:bd:39:a9:
         2e:67:76:9f:00:d7:75:a6:6f:38:2d:cb:8e:64:85:c9:7f:68:
         4e:fc:21:e3:f4:d2:2c:c2:a9:0b:c3:5a:55:a2:38:f6:31:cd:
         5e:a4:4b:db:e4:86:e2:e3:e4:2c:de:78:9d:bd:67:35:0b:64:
         17:a2:ee:b2:42:56:c5:7a:30:3a:29:7e:4b:f8:41:ef:d1:cc:
         3e:02:7d:31:c6:98:0a:3f:f2:09:a7:c0:78:d5:94:d9:1b:f6:
         9b:48:38:38:fb:ea:b7:f3:0e:3a:70:43:0f:28:5f:f5:5d:26:
         cd:aa:3a:5c:90:8c:9e:ca:41:3f:e9:a5:23:20:b6:8f:78:38:
         e4:1e:9a:67:6b:1d:ff:aa:1a:ac:bf:4e:03:0f:ee:da:f0:27:
         d3:66:a7:15:22:66:40:76:cd:30:26:ae:f7:78:f3:d7:db:36:
         db:df:31:75:7f:90:95:40:6f:8a:76:a4:44:57:9c:30:dc:b5:
         73:ca:5f:ae:af:20:f6:ed:f1:06:16:25:38:c1:d5:38:36:12:
         f9:b1:94:bc:25:d1:66:95:34:1e:bc:fe:21:44:65:5f:7b:f1:
         9a:b3:d8:6e:60:8a:04:fb:77:56:5c:38:e7:c4:69:07:63:0f:
         cb:21:66:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:12:33 2026 by rpki-client