Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/323430343a373138303a613031303a3a2f34382d3438203d3e203233383438.roa
File:                     323430343a373138303a613031303a3a2f34382d3438203d3e203233383438.roa (raw, json)
Hash identifier:          FiGQSUJ04ahxkScS3FdH7IkS9pE23cNBBKjPFIVHjeM=
Subject key identifier:   43:40:61:64:CF:A3:C6:91:30:C6:55:F1:93:20:7C:90:D5:FB:C3:70
Certificate issuer:       /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial:       6AAB8B479C1F45E2B6A699F412967B47484690CD
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/323430343a373138303a613031303a3a2f34382d3438203d3e203233383438.roa
Signing time:             Thu 16 Apr 2026 09:17:57 +0000
ROA not before:           Thu 16 Apr 2026 09:12:57 +0000
ROA not after:            Thu 15 Apr 2027 09:17:57 +0000
asID:                     23848
IP address blocks:        2404:7180:a010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ab:8b:47:9c:1f:45:e2:b6:a6:99:f4:12:96:7b:47:48:46:90:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
        Validity
            Not Before: Apr 16 09:12:57 2026 GMT
            Not After : Apr 15 09:17:57 2027 GMT
        Subject: CN=43406164CFA3C69130C655F193207C90D5FBC370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:89:5f:34:0c:47:96:63:20:c0:05:c7:e9:fc:
                    96:3c:28:89:a2:1b:6f:eb:11:bc:d8:c8:9f:2b:7d:
                    7c:b2:0f:44:40:14:97:75:c9:5f:74:01:7e:2c:dd:
                    92:3a:a4:7d:83:b7:6f:5d:99:08:ac:95:20:bf:1f:
                    b4:d1:4d:85:8f:e0:aa:9d:60:77:80:81:c6:d2:48:
                    c1:7e:30:06:20:5a:90:f5:a4:96:02:25:8d:65:fb:
                    92:39:26:f0:27:7a:6d:af:4b:04:98:ba:62:4b:53:
                    fa:a5:7d:4a:a9:33:56:e4:ff:22:05:32:3c:7b:4e:
                    24:ed:31:1c:c1:6a:de:61:d4:82:5f:b5:46:f5:17:
                    ee:34:a8:33:22:f1:d6:33:f5:a8:0b:a3:29:2e:c5:
                    83:2f:bf:ce:88:86:67:80:ef:4b:89:ab:ca:8d:8a:
                    a0:b1:01:29:35:9f:d4:cb:f4:f6:ef:7f:74:bb:63:
                    04:09:ec:68:ac:98:74:67:95:b5:04:7e:6c:75:d0:
                    35:ce:07:94:95:30:c2:1a:86:21:80:36:6b:4f:4b:
                    a1:6e:1a:db:0b:35:1a:24:fd:95:58:47:fb:b7:6c:
                    9a:0b:84:4c:20:b5:5c:f7:7f:3d:1a:92:93:49:6d:
                    67:9a:6c:03:98:7f:8b:12:fb:87:47:fc:c9:11:65:
                    c4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:40:61:64:CF:A3:C6:91:30:C6:55:F1:93:20:7C:90:D5:FB:C3:70
            X509v3 Authority Key Identifier:
                keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/323430343a373138303a613031303a3a2f34382d3438203d3e203233383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:7180:a010::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:cc:68:86:05:8a:ce:58:27:ae:08:95:7e:b4:5b:1b:a6:12:
         01:3a:cc:8a:1f:22:88:d7:7a:ec:af:99:25:9a:a5:4a:97:d7:
         2f:75:14:2c:fc:01:9e:6e:91:d4:45:ea:67:89:e7:a9:cd:d2:
         cd:f4:aa:03:79:85:82:89:dc:a8:7b:bc:58:1e:42:9f:14:68:
         33:3b:1c:8c:ea:ac:00:a6:e1:3e:e0:e1:84:3f:57:fe:c9:b3:
         76:ee:ee:30:2c:d2:de:2a:60:a0:dc:71:a1:52:0a:6b:98:99:
         d6:05:0b:06:8d:f6:15:17:92:c3:de:32:eb:30:b7:96:b2:1e:
         aa:97:40:78:29:c8:8f:01:bb:b1:9c:f0:87:3b:c9:21:8c:20:
         91:09:76:4e:a0:c5:57:98:fb:e2:88:5a:01:2c:76:36:96:76:
         cb:bc:74:21:de:90:f9:34:d9:61:d3:40:5a:62:8b:f9:09:ff:
         53:87:01:73:f0:8a:f6:45:ed:ef:42:f3:ae:96:63:0e:1b:60:
         3c:00:50:99:9d:f8:d8:66:36:be:47:48:77:f9:ad:1a:c5:8e:
         b9:95:d2:2f:b9:f2:62:67:09:0b:9e:68:6b:ec:3c:ef:e9:96:
         6f:d4:ee:96:94:00:57:f8:58:ac:0e:a0:63:73:d3:f0:b4:24:
         a2:6c:fe:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:55:41 2026 by rpki-client