Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/323430343a373138303a663030303a3a2f34382d3438203d3e203233383438.roa
File:                     323430343a373138303a663030303a3a2f34382d3438203d3e203233383438.roa (raw, json)
Hash identifier:          +e2qVAiao3VoG5SDKxlX+1z44+iLLm0GvdGJUt6iiUY=
Subject key identifier:   FA:13:D6:3C:93:76:CB:18:C2:5A:A1:08:45:92:55:D0:D0:52:CB:A0
Certificate issuer:       /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial:       602B092FA27BBC44EE9612CFA6BEC7923E778962
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/323430343a373138303a663030303a3a2f34382d3438203d3e203233383438.roa
Signing time:             Thu 16 Apr 2026 09:17:57 +0000
ROA not before:           Thu 16 Apr 2026 09:12:57 +0000
ROA not after:            Thu 15 Apr 2027 09:17:57 +0000
asID:                     23848
IP address blocks:        2404:7180:f000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:2b:09:2f:a2:7b:bc:44:ee:96:12:cf:a6:be:c7:92:3e:77:89:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
        Validity
            Not Before: Apr 16 09:12:57 2026 GMT
            Not After : Apr 15 09:17:57 2027 GMT
        Subject: CN=FA13D63C9376CB18C25AA108459255D0D052CBA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:51:06:de:a0:89:b9:f2:71:2d:fe:7a:a7:6c:
                    c7:eb:0e:ed:a0:03:4b:6e:02:b2:b8:28:98:f4:0f:
                    5c:b0:cb:32:41:65:8e:28:e3:a4:6e:a6:bf:98:f5:
                    88:5d:cd:5d:f0:02:3c:a3:b9:5d:8f:dc:e6:0d:b6:
                    ea:cd:38:3e:21:e9:99:6c:07:b2:12:d8:4c:8b:c2:
                    f0:6f:45:25:8d:c0:30:0d:80:db:56:cd:0e:13:cb:
                    bb:a4:c9:1e:18:30:d6:87:f7:b0:9f:08:a5:46:3b:
                    ac:47:1b:e9:d7:5d:fa:05:3a:31:09:5d:94:40:c3:
                    ac:60:c1:55:7b:8a:01:1c:cf:81:e6:e8:9e:5a:b4:
                    44:3b:94:41:e2:06:1b:8d:d1:a0:07:32:ec:1b:9a:
                    1e:03:89:b5:72:56:f8:e6:ed:01:bd:5a:58:90:2b:
                    f8:51:68:8a:88:cd:19:e5:3c:59:58:b4:5d:05:93:
                    56:74:0a:e1:03:6a:25:ec:5d:a3:28:9f:fb:52:3c:
                    44:98:c5:7b:a7:b1:ae:a0:55:7f:68:10:40:a1:92:
                    dd:d6:c1:df:de:bd:1e:e3:f8:63:a5:e2:3a:82:9b:
                    d6:31:ef:44:60:ba:c6:85:4f:d3:f5:a6:24:33:4d:
                    4a:b6:86:fd:64:56:90:04:48:44:e2:0e:2f:5b:4c:
                    11:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:13:D6:3C:93:76:CB:18:C2:5A:A1:08:45:92:55:D0:D0:52:CB:A0
            X509v3 Authority Key Identifier:
                keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/323430343a373138303a663030303a3a2f34382d3438203d3e203233383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:7180:f000::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:be:9a:4d:64:c3:a2:43:63:b6:20:66:af:05:4c:22:70:7a:
         9b:2c:93:33:b3:83:65:9e:23:87:ce:2c:1a:f3:d4:c9:8f:6a:
         5c:d7:2c:b1:6c:dd:f6:51:02:c8:3b:83:d3:fd:f4:aa:31:90:
         ee:f2:9a:26:4a:92:a1:e5:9a:f9:b3:00:a2:e2:87:52:fb:14:
         5e:68:ff:9b:85:04:6e:39:b4:ac:c8:5a:87:08:1b:06:ff:3b:
         2d:6f:3a:df:5d:77:6e:f6:06:96:78:a6:46:08:e3:ef:1e:5e:
         a4:8b:e6:d3:7f:bc:62:c3:7f:4e:c4:e0:e5:36:b9:11:6d:f4:
         5b:48:3e:d3:27:de:ff:d6:df:d7:63:55:1c:86:98:f1:37:9d:
         c2:5e:cd:e1:d8:51:91:15:00:0f:62:2f:50:d7:9f:e7:c5:0f:
         5e:7c:81:66:24:5b:f6:0d:4b:95:75:26:7b:8c:94:f6:cb:80:
         d7:b7:a4:a8:de:5b:b1:bd:dc:b5:49:ce:6b:c9:50:53:22:eb:
         3e:89:96:ad:a7:6b:72:fa:fe:8b:58:fd:62:ca:3a:52:79:c0:
         36:c0:73:8b:b4:c7:b8:42:a0:7b:7d:81:85:91:17:87:87:dc:
         e1:6d:31:39:d5:9b:b2:a3:2a:fa:00:d3:7b:85:8c:fd:c0:3f:
         08:ef:ce:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:28:20 2026 by rpki-client