Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/323430343a373138303a633031313a3a2f34382d3438203d3e203233383438.roa
File:                     323430343a373138303a633031313a3a2f34382d3438203d3e203233383438.roa (raw, json)
Hash identifier:          9Iaw14VVyQQx1+Jew2UqscrVwWUjXEfDIXcBDgtIxMo=
Subject key identifier:   F3:7E:FC:B1:70:8E:21:68:D6:A1:09:5C:48:11:37:14:C8:41:F9:4A
Certificate issuer:       /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial:       1DCA4F1C652E682C5BE10DD1EE73FF163F4A0D44
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/323430343a373138303a633031313a3a2f34382d3438203d3e203233383438.roa
Signing time:             Thu 16 Apr 2026 09:17:57 +0000
ROA not before:           Thu 16 Apr 2026 09:12:57 +0000
ROA not after:            Thu 15 Apr 2027 09:17:57 +0000
asID:                     23848
IP address blocks:        2404:7180:c011::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ca:4f:1c:65:2e:68:2c:5b:e1:0d:d1:ee:73:ff:16:3f:4a:0d:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
        Validity
            Not Before: Apr 16 09:12:57 2026 GMT
            Not After : Apr 15 09:17:57 2027 GMT
        Subject: CN=F37EFCB1708E2168D6A1095C48113714C841F94A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8b:bd:4b:94:51:a3:62:21:3c:71:74:ab:77:
                    88:22:6d:b6:0b:7c:e2:01:1d:2d:0b:a2:3a:97:f0:
                    52:e2:57:4a:a9:a7:66:cd:36:ba:41:89:18:cc:e4:
                    ee:d1:e4:a4:cc:5d:a3:02:26:b5:d0:bd:de:7d:eb:
                    50:c1:37:6f:f8:7e:29:95:06:e8:bc:59:b8:1c:1b:
                    c6:15:88:d8:24:c0:88:13:13:58:a9:df:36:08:aa:
                    77:42:cf:36:e8:c6:53:cb:59:4c:0a:5a:5d:12:a7:
                    be:5e:28:3b:02:23:30:70:ee:84:47:73:72:ed:0c:
                    58:49:2a:ad:20:2a:81:13:d4:5b:c5:4c:3c:2d:67:
                    b1:c4:72:63:37:a9:eb:6f:f7:24:03:67:54:d0:c0:
                    cf:4a:6d:a9:1d:2b:79:54:f1:e0:67:62:45:09:1f:
                    df:23:41:50:08:e4:f1:8c:d3:76:03:db:0a:eb:95:
                    95:1d:ac:5e:b0:be:1b:f1:c7:2a:fb:e7:34:e5:38:
                    16:37:44:c3:1a:6d:b7:ed:ba:ad:77:71:d3:7a:80:
                    93:1d:64:f2:be:91:82:a0:04:ab:75:23:e0:f1:c6:
                    a1:04:00:31:31:75:06:68:60:86:4e:3f:5f:a8:de:
                    50:09:3f:6e:a3:fb:3e:d1:be:aa:00:db:c8:53:1f:
                    0c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7E:FC:B1:70:8E:21:68:D6:A1:09:5C:48:11:37:14:C8:41:F9:4A
            X509v3 Authority Key Identifier:
                keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/323430343a373138303a633031313a3a2f34382d3438203d3e203233383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:7180:c011::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:50:db:c7:fd:55:74:19:e5:7a:c1:f3:f8:8f:58:d0:1a:10:
         5a:7f:7b:8e:93:eb:86:18:70:61:9f:0c:ca:f8:db:8b:6e:0f:
         f0:60:ef:6a:34:32:01:08:7c:4e:27:6a:99:c1:31:5a:bc:4d:
         90:36:bf:ea:d3:cb:f2:52:84:4a:f2:87:bd:83:93:a8:03:bd:
         2f:c7:2e:f4:1a:4d:98:d2:16:8d:f6:7f:c6:a6:7a:39:1e:30:
         66:90:eb:6a:03:a2:f7:ba:5f:32:6a:0f:54:db:3a:de:df:b8:
         71:c9:10:15:6b:0c:39:ca:a4:45:f6:cd:92:45:8d:a1:e6:76:
         b3:05:ca:54:64:93:27:86:a5:82:f4:f1:18:cf:dd:a0:26:a6:
         56:23:86:81:40:a7:38:c4:b3:07:b9:37:5a:a2:cc:f5:72:7b:
         0d:b1:c1:7d:19:93:86:54:8c:29:91:ab:a8:37:e8:53:5c:31:
         cc:dc:8e:8c:9f:f6:2a:ee:89:1d:f8:a6:d4:38:93:46:80:60:
         3d:64:e4:8c:60:36:41:31:94:5d:49:5e:ca:e7:14:30:01:d8:
         76:82:fc:37:4a:78:90:43:80:ac:71:f7:ab:83:57:76:3e:ce:
         38:d4:13:19:d4:35:54:52:f6:91:d1:f4:45:02:05:00:b7:f9:
         dc:52:fc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:27:55 2026 by rpki-client