Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/323430343a373138303a633030313a3a2f34382d3438203d3e203233383438.roa
File:                     323430343a373138303a633030313a3a2f34382d3438203d3e203233383438.roa (raw, json)
Hash identifier:          eIPFumbOHNHjlffbRwVnl2XADFB6CLRRr3tPqHAmmeA=
Subject key identifier:   97:A7:12:8E:55:A1:64:9B:30:58:E1:B0:4E:EF:DA:B4:36:BC:A6:2A
Certificate issuer:       /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial:       09C99EE9F3097797128798990A571521A70F6D31
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/323430343a373138303a633030313a3a2f34382d3438203d3e203233383438.roa
Signing time:             Thu 16 Apr 2026 09:17:58 +0000
ROA not before:           Thu 16 Apr 2026 09:12:58 +0000
ROA not after:            Thu 15 Apr 2027 09:17:58 +0000
asID:                     23848
IP address blocks:        2404:7180:c001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c9:9e:e9:f3:09:77:97:12:87:98:99:0a:57:15:21:a7:0f:6d:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
        Validity
            Not Before: Apr 16 09:12:58 2026 GMT
            Not After : Apr 15 09:17:58 2027 GMT
        Subject: CN=97A7128E55A1649B3058E1B04EEFDAB436BCA62A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3b:b0:d4:f8:3e:f5:7d:1b:26:fc:6f:72:9e:
                    13:63:45:29:ca:8d:01:7d:a8:ee:1a:20:99:b1:3a:
                    fe:7c:4c:a8:d9:58:d3:03:fd:f1:cc:dd:6b:75:45:
                    ff:61:47:fe:98:42:cf:3b:7b:a0:e0:42:46:ab:90:
                    9e:45:ba:96:95:64:f0:ae:ee:2f:17:35:f6:22:23:
                    f4:1b:4f:f5:2b:c9:64:71:82:23:07:fd:a8:c9:85:
                    9a:74:94:51:0b:a0:38:9c:17:9c:6d:1c:c8:6c:00:
                    97:f8:40:78:90:30:4e:e0:31:73:f7:6e:c7:98:9c:
                    49:e1:39:d8:af:12:e7:b5:a0:75:6f:f7:d4:96:cd:
                    92:6a:be:a8:80:c6:ae:96:f5:98:30:b4:12:a4:a3:
                    eb:21:24:2c:19:5e:8a:7b:3b:00:90:d4:2c:51:d4:
                    dd:8c:f8:c1:a0:01:89:80:cb:ad:02:08:1c:d1:6e:
                    e8:b5:27:97:de:79:a3:88:e4:76:c7:46:31:bc:89:
                    67:63:f8:6a:6f:9d:d1:f1:08:f3:13:aa:2f:d5:e5:
                    a5:a7:0a:db:a4:b4:09:e8:b4:5c:14:a7:3f:f3:36:
                    a5:2d:fa:b9:31:d2:d3:db:6e:35:bc:92:46:72:35:
                    30:a4:51:6a:fd:96:d2:0f:61:be:66:88:38:fd:b5:
                    de:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A7:12:8E:55:A1:64:9B:30:58:E1:B0:4E:EF:DA:B4:36:BC:A6:2A
            X509v3 Authority Key Identifier:
                keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/323430343a373138303a633030313a3a2f34382d3438203d3e203233383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:7180:c001::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:c3:77:c4:6c:a3:e7:a5:2c:f0:0f:e7:54:4d:67:61:0c:b7:
         af:64:ea:24:7a:fc:f5:59:70:de:86:e9:45:db:2f:63:62:91:
         c7:81:76:ce:78:3a:c3:46:2c:29:2e:d4:45:31:12:f0:24:b0:
         79:02:0a:88:ab:01:0b:7c:ba:fa:f5:53:8e:0b:78:fd:63:e7:
         99:2e:16:08:17:67:cc:f3:bc:59:61:1e:b1:be:3f:e0:6a:8f:
         10:87:97:03:e5:ea:70:64:5b:41:46:98:cd:8e:6c:a0:d8:7b:
         e6:86:b9:a9:ff:bb:b4:05:18:36:6c:70:23:de:72:7d:e8:d3:
         31:02:71:bf:9e:5c:48:ec:e7:b9:6c:bf:bc:98:d1:58:7f:5a:
         59:28:2d:28:a5:a4:d6:a7:a1:9d:36:bc:f4:6c:dc:7e:d0:9d:
         2c:98:7f:5d:be:a2:b2:09:6f:a1:25:a4:5e:91:a0:d3:10:fa:
         3b:df:eb:8b:4a:17:7d:cd:1e:67:6a:4b:1e:54:b1:e2:32:2c:
         55:97:4e:f6:2f:0f:63:12:ed:25:1e:e8:07:ac:b0:74:a0:f9:
         25:36:b0:02:7c:70:d6:7e:67:83:64:7f:ef:cd:57:6b:05:3e:
         9f:bc:a9:bf:cd:06:80:42:87:2e:71:3c:04:d9:7d:22:d0:69:
         3e:db:d7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:28:19 2026 by rpki-client