Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3230322e36392e32392e302f32342d3234203d3e203233383438.roa
File:                     3230322e36392e32392e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier:          xaaI2zCCIf7PFihABNoLXYdKUhurdg0V4C8DxAADTcI=
Subject key identifier:   5F:13:58:EB:0A:56:A8:04:47:5E:F4:BD:FA:3A:23:F1:5C:78:54:8F
Certificate issuer:       /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial:       6ABD52186606FF3CE324FD27C92BFE4BBDC06D3C
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3230322e36392e32392e302f32342d3234203d3e203233383438.roa
Signing time:             Thu 16 Apr 2026 09:07:33 +0000
ROA not before:           Thu 16 Apr 2026 09:02:33 +0000
ROA not after:            Thu 15 Apr 2027 09:07:33 +0000
asID:                     23848
IP address blocks:        202.69.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:bd:52:18:66:06:ff:3c:e3:24:fd:27:c9:2b:fe:4b:bd:c0:6d:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
        Validity
            Not Before: Apr 16 09:02:33 2026 GMT
            Not After : Apr 15 09:07:33 2027 GMT
        Subject: CN=5F1358EB0A56A804475EF4BDFA3A23F15C78548F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:44:6f:38:75:70:bb:d1:3e:38:6d:29:d7:ce:
                    11:08:93:92:52:f9:be:29:2c:5a:b3:a1:3b:77:b0:
                    95:89:3f:15:7d:f3:ec:01:d7:44:a5:b5:3e:2a:99:
                    f6:72:56:d4:08:4b:8c:4c:38:f4:38:a8:05:62:0c:
                    68:cc:3b:a8:a8:53:eb:9a:f8:c5:51:5a:87:9a:3c:
                    19:04:5c:56:33:7a:21:dc:58:7b:dc:44:bf:c2:85:
                    58:5f:be:80:c2:89:2d:a6:cc:30:3e:0c:51:36:dd:
                    ec:96:57:80:30:03:e1:0f:c1:48:75:46:28:0c:50:
                    d4:31:40:e8:8f:63:53:06:36:b1:72:41:99:b5:70:
                    42:06:94:b8:b0:41:3b:b5:27:96:5c:47:ae:b3:a4:
                    18:32:48:9a:d8:7f:79:2a:e2:8e:70:78:fa:ec:0a:
                    73:d5:3e:de:bf:02:9e:cb:f4:3f:d8:e9:75:f3:52:
                    44:7b:fa:30:64:f2:98:6e:3e:26:2f:82:54:b9:53:
                    f6:b8:40:d5:0e:e2:93:2a:91:dc:ea:b8:a2:d6:9f:
                    88:46:ee:5e:78:9d:d5:46:0f:db:24:7b:55:ff:5f:
                    14:83:81:54:c4:a3:2f:c1:13:7d:e6:76:4d:c2:d2:
                    f1:b5:49:73:95:48:95:00:c3:bb:52:8b:b5:73:9b:
                    01:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:13:58:EB:0A:56:A8:04:47:5E:F4:BD:FA:3A:23:F1:5C:78:54:8F
            X509v3 Authority Key Identifier:
                keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3230322e36392e32392e302f32342d3234203d3e203233383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.69.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:5f:91:ac:ac:c3:4d:78:7b:b1:a1:75:b3:c1:68:23:e8:f9:
         63:f6:3e:a6:0a:61:4a:59:38:1f:a7:8f:06:24:d6:90:59:2e:
         72:83:be:ae:e8:29:83:7c:45:65:35:c5:fb:f2:5f:5f:e4:77:
         81:aa:98:bd:08:66:4b:f4:0d:dc:ff:e8:76:d5:2b:59:01:d7:
         43:2c:33:82:33:6f:38:a9:12:17:a8:69:d5:cd:c3:df:f0:d3:
         ec:4c:8f:82:bb:f8:11:6c:d0:b8:ce:0c:74:4a:36:e9:3c:1c:
         43:c6:93:d0:61:fa:9b:48:77:3c:57:e5:a6:79:c7:04:50:c3:
         d1:04:e1:b4:f1:7d:64:2d:9d:3e:84:68:75:4b:88:3e:77:94:
         6b:6d:6b:c8:89:97:53:62:75:a1:50:c7:75:de:cb:72:34:ec:
         5d:39:65:5f:00:69:b1:89:58:e8:d5:d5:aa:06:fa:1e:83:3e:
         75:dd:2d:9a:c9:fa:5c:83:91:9e:7b:ff:66:b3:7b:45:18:9a:
         92:1e:43:da:7c:2f:59:3e:a4:fb:e6:c0:12:fe:ab:03:27:34:
         ca:ad:b2:87:be:3a:31:47:c1:c2:7e:00:30:8b:21:76:5b:5b:
         0a:2d:85:44:cc:18:b5:6e:67:3f:97:11:98:c7:87:4e:61:e9:
         b3:86:fa:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:53:15 2026 by rpki-client