Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3230322e36392e33312e302f32342d3234203d3e203233383438.roa
File:                     3230322e36392e33312e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier:          JEYnqMo6R+z0PvsidiszfXgBY9xhkKnxfGyONlcBmVU=
Subject key identifier:   78:18:68:D7:ED:12:CA:39:25:33:4A:12:20:A7:12:A7:EF:01:8F:60
Certificate issuer:       /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial:       325DDD36DEEAE99A037779CEB2BE2A99C497C27C
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3230322e36392e33312e302f32342d3234203d3e203233383438.roa
Signing time:             Thu 16 Apr 2026 09:07:32 +0000
ROA not before:           Thu 16 Apr 2026 09:02:32 +0000
ROA not after:            Thu 15 Apr 2027 09:07:32 +0000
asID:                     23848
IP address blocks:        202.69.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 05:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:5d:dd:36:de:ea:e9:9a:03:77:79:ce:b2:be:2a:99:c4:97:c2:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
        Validity
            Not Before: Apr 16 09:02:32 2026 GMT
            Not After : Apr 15 09:07:32 2027 GMT
        Subject: CN=781868D7ED12CA3925334A1220A712A7EF018F60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ad:44:e5:8f:49:b1:e0:b9:bc:cb:88:5b:eb:
                    e5:f2:f6:be:46:d2:c5:7a:45:7e:2c:e7:43:70:b2:
                    28:59:a3:1d:9b:75:18:56:b2:55:2a:2e:fc:31:6b:
                    76:32:2a:64:c2:22:12:86:f4:f1:f4:b2:80:cd:d7:
                    ae:27:e2:e5:3c:a6:33:e6:e4:02:5e:66:cb:4c:cf:
                    7e:ae:bb:ee:0b:0f:73:13:1e:10:6b:fb:e1:1b:16:
                    61:d6:96:52:99:78:c7:f9:df:d0:d7:e1:d9:88:07:
                    d6:38:7e:d1:99:5d:ae:a1:ef:a3:ef:38:71:ca:79:
                    ea:9f:ba:35:98:d0:cb:a4:ed:fe:3f:b7:dd:9c:b7:
                    e9:6f:20:57:e0:4b:9f:c8:d6:a7:6d:06:d3:3a:56:
                    df:16:60:80:b1:84:44:b2:18:aa:ce:98:84:28:af:
                    e0:ea:a1:77:f0:f0:a3:8d:6a:5e:15:48:15:ed:8c:
                    43:d1:56:13:b8:3c:7a:1f:93:36:1c:98:15:4f:60:
                    f0:81:46:93:6e:10:79:36:fd:f2:58:5e:94:3e:03:
                    b4:22:b5:ca:d7:cb:e2:ef:17:4d:25:ca:37:ef:20:
                    1f:af:92:12:a6:e2:0c:0e:7c:af:47:af:0a:7b:3a:
                    08:f4:a8:b2:2c:03:b9:d2:f2:ed:f0:2c:9d:cf:4b:
                    d8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:18:68:D7:ED:12:CA:39:25:33:4A:12:20:A7:12:A7:EF:01:8F:60
            X509v3 Authority Key Identifier:
                keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3230322e36392e33312e302f32342d3234203d3e203233383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.69.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:d3:97:47:4c:e4:b8:de:c8:d1:84:aa:e9:e0:f5:ae:f7:92:
         54:c3:11:bd:86:6e:51:89:0d:2e:53:2e:9a:e1:18:fd:dd:f9:
         8f:43:ac:8b:c5:9c:66:eb:13:9b:1a:22:37:21:cc:86:76:f0:
         55:5f:9f:7a:63:23:36:f3:64:99:0d:00:3e:ea:8a:d2:81:d8:
         24:dd:19:ee:0f:e0:20:8f:c2:f8:1f:ed:e5:5e:fe:67:94:71:
         9b:37:e6:d7:30:fd:d7:7e:d5:be:6b:b1:7f:f1:4e:fd:80:16:
         dc:1c:fa:cb:eb:76:bb:46:cf:e6:a2:de:fb:9a:a2:e8:46:17:
         d2:9b:8d:67:a8:eb:15:66:d6:98:da:0c:76:02:69:42:42:87:
         cf:c1:df:08:36:c7:de:56:bb:b4:55:dc:13:30:d7:5e:00:8b:
         a2:ba:4d:95:a3:e0:bc:92:0d:7c:8c:63:75:fe:47:07:20:46:
         67:2a:75:17:57:a3:fb:09:8a:dc:b1:6e:35:ac:bb:93:8c:e4:
         ee:88:86:55:e4:66:f0:64:73:a9:d8:f3:72:4c:d6:55:04:96:
         a5:b9:5a:25:7a:75:92:f9:7e:68:2d:f0:67:49:a1:cc:1c:5c:
         d5:19:4d:9c:95:4f:f7:df:3f:bc:ba:61:6e:3f:85:c5:f5:26:
         a0:78:21:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:27:22 2026 by rpki-client