Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/323430343a373138303a623031303a3a2f34382d3438203d3e203233383438.roa
File:                     323430343a373138303a623031303a3a2f34382d3438203d3e203233383438.roa (raw, json)
Hash identifier:          Al6NHpVZvxlyMYKPEWQ7dhsBPCiQJwG4wa++2KJ8tME=
Subject key identifier:   96:2A:E5:09:1E:29:B1:D1:FB:3D:D2:EC:C5:FF:5C:62:9E:75:C0:EF
Certificate issuer:       /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial:       4CB2A9EA9262AC60BA145388901629C9200210E7
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/323430343a373138303a623031303a3a2f34382d3438203d3e203233383438.roa
Signing time:             Thu 16 Apr 2026 09:17:58 +0000
ROA not before:           Thu 16 Apr 2026 09:12:58 +0000
ROA not after:            Thu 15 Apr 2027 09:17:58 +0000
asID:                     23848
IP address blocks:        2404:7180:b010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b2:a9:ea:92:62:ac:60:ba:14:53:88:90:16:29:c9:20:02:10:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
        Validity
            Not Before: Apr 16 09:12:58 2026 GMT
            Not After : Apr 15 09:17:58 2027 GMT
        Subject: CN=962AE5091E29B1D1FB3DD2ECC5FF5C629E75C0EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e4:66:54:b4:52:4b:5f:54:50:ff:9f:36:b4:
                    e1:d0:99:cf:f6:b2:c3:a8:cd:25:31:de:02:87:44:
                    79:42:2d:57:77:d2:6a:81:00:01:f3:fe:f1:c1:ef:
                    4c:3b:49:c3:e6:1d:ac:2c:b1:b1:1a:0b:1f:e8:55:
                    c5:e6:8f:ed:86:b6:61:2b:c3:31:42:ef:7a:57:10:
                    a4:90:70:a8:89:b4:e9:74:fa:00:ca:a0:b2:23:8f:
                    f4:94:fc:96:ec:a6:d4:4b:90:3a:f8:13:84:4c:91:
                    b1:e2:2f:bb:c0:66:da:28:9b:cf:25:96:08:14:05:
                    21:85:a8:db:53:7c:05:73:59:d5:8d:1c:22:61:d0:
                    a5:c1:5c:c8:1e:46:98:5a:45:ad:07:f5:91:75:d8:
                    99:fc:43:6d:d7:2e:ad:ca:df:f4:e8:37:3b:57:83:
                    cc:f3:20:5a:ab:ba:bb:fc:96:d4:68:71:d9:f7:f2:
                    40:4e:2e:2f:cb:c6:08:36:fe:b1:4d:1b:19:6b:5c:
                    9a:b1:5d:37:e0:bc:8f:a1:e7:58:ad:8b:4a:5a:2b:
                    1f:01:3d:50:6a:9c:34:a9:5f:67:c3:2b:af:b0:e2:
                    de:c3:57:45:ba:a0:01:1b:46:d1:82:5f:73:fb:74:
                    5c:e3:9c:0e:15:10:4d:11:3b:28:ff:7f:98:f5:b7:
                    22:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2A:E5:09:1E:29:B1:D1:FB:3D:D2:EC:C5:FF:5C:62:9E:75:C0:EF
            X509v3 Authority Key Identifier:
                keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/323430343a373138303a623031303a3a2f34382d3438203d3e203233383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:7180:b010::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:f6:73:b9:9e:39:bc:ab:38:05:9f:ec:36:95:dc:97:3d:e9:
         e8:ca:77:69:52:48:4e:ee:e2:d9:91:4b:50:76:30:75:ca:e5:
         b1:4f:86:0c:53:6c:16:ea:eb:36:08:83:43:de:33:98:a7:4f:
         02:9d:c7:ac:dc:0f:bc:9f:9d:25:a6:aa:54:ab:8f:f3:88:a3:
         c6:2d:ee:89:09:0d:64:ab:35:ac:b7:8d:6a:32:08:67:c2:07:
         f1:aa:56:1d:42:1b:2e:3d:83:c4:ef:b6:f6:61:94:05:fa:96:
         11:1c:5a:1b:bb:69:10:10:2c:d3:05:c7:3c:90:d8:ab:3a:7d:
         7e:ba:57:4d:44:18:0a:1e:f8:d9:0c:22:07:0b:bd:d3:a6:54:
         4a:e9:4c:8a:a9:f5:7e:44:54:3b:76:10:25:76:4d:5b:21:49:
         bc:19:27:0b:db:c4:3d:21:6a:92:c7:87:27:cc:27:61:d4:01:
         31:00:74:9a:6d:e6:5e:1c:20:1f:f1:0e:e5:fd:0e:1c:42:f1:
         78:5d:49:a0:79:b6:fa:c3:99:02:41:1c:12:66:48:cd:0d:fb:
         6e:78:13:0a:da:b1:29:b6:e0:bc:9e:97:b4:bd:c9:2d:5f:fe:
         d2:47:5d:14:b3:e1:fd:6a:ec:43:5a:09:f5:c3:4a:4f:4c:f8:
         d9:cb:d1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:28:02 2026 by rpki-client