Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/323430333a333338303a3a2f33322d3332203d3e2030.roa
File:                     323430333a333338303a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier:          n0yizAjQwXuI9jJAwp6k4u5rx7lmZcmJiiPW9gCnnc0=
Subject key identifier:   D0:83:B9:EF:D6:28:DC:DA:7B:8E:49:B0:55:08:A5:BD:32:C0:CD:EA
Certificate issuer:       /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial:       4053D698C031A9E2A14331ED3380E38EF328C88C
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/323430333a333338303a3a2f33322d3332203d3e2030.roa
Signing time:             Mon 28 Sep 2026 01:00:39 +0000
ROA not before:           Mon 28 Sep 2026 00:55:39 +0000
ROA not after:            Mon 27 Sep 2027 01:00:39 +0000
asID:                     0
IP address blocks:        2403:3380::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 02:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:53:d6:98:c0:31:a9:e2:a1:43:31:ed:33:80:e3:8e:f3:28:c8:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
        Validity
            Not Before: Sep 28 00:55:39 2026 GMT
            Not After : Sep 27 01:00:39 2027 GMT
        Subject: CN=D083B9EFD628DCDA7B8E49B05508A5BD32C0CDEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:af:51:04:23:39:19:6c:79:d6:c3:68:1c:da:
                    6d:4d:ba:63:a2:5b:fe:f7:aa:2c:54:04:5c:39:91:
                    c0:ea:59:31:9e:4b:4d:f3:5a:2e:75:1f:a6:08:cc:
                    ce:84:c6:36:f8:ba:c2:0a:68:d8:10:da:77:1f:3f:
                    7f:f4:a4:6b:5a:5d:c3:18:c5:b1:f2:b2:a6:3d:ff:
                    97:30:93:94:50:4d:15:60:2b:b4:53:47:00:b8:30:
                    e9:46:8a:35:69:08:ef:64:80:14:ce:3f:8f:ee:8c:
                    3a:cc:6a:02:1d:22:b3:0c:44:f6:3c:fa:ca:e1:31:
                    e1:2a:fb:b8:82:be:3c:ec:8c:06:72:95:56:7e:3f:
                    73:e0:b5:2b:2b:17:0e:d4:11:5f:e3:97:15:e1:56:
                    87:83:62:c4:98:f3:0e:1f:b8:fd:62:61:19:cb:18:
                    7d:27:31:80:57:0b:ff:3d:c3:ea:98:3e:02:1c:d2:
                    3e:76:28:0c:3c:de:6a:d1:16:6c:4e:b0:d9:fa:ee:
                    e1:d1:d3:ed:83:69:8c:68:10:71:fb:26:7b:53:e9:
                    c5:35:11:31:4c:1e:f7:2f:9b:90:18:ad:1e:4e:de:
                    d6:70:b4:60:86:e4:8e:8f:27:b2:23:9d:18:21:10:
                    cf:a2:dc:96:88:46:7a:bc:f1:8a:ec:1f:bc:d6:fd:
                    c0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:83:B9:EF:D6:28:DC:DA:7B:8E:49:B0:55:08:A5:BD:32:C0:CD:EA
            X509v3 Authority Key Identifier:
                keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/323430333a333338303a3a2f33322d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:3380::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:47:97:e9:43:40:78:32:2c:64:7c:cd:fc:49:38:b5:95:94:
         62:5e:d1:86:85:51:cf:e5:30:9a:f7:73:9f:fd:44:f2:b0:b6:
         74:36:e6:67:04:93:fa:ea:ec:56:61:fe:21:2a:5b:6e:96:e9:
         ed:b9:d9:26:28:89:21:37:64:79:72:4a:8b:76:22:6e:14:a3:
         30:a4:bb:4c:56:ca:73:56:54:4f:8d:3a:b5:a5:a7:ac:85:f7:
         23:c2:33:fd:99:48:01:5b:9f:a9:a3:aa:f6:e6:c0:0c:d3:07:
         07:56:ac:dc:2b:da:fe:d7:b0:68:2a:2e:4a:87:9e:30:c9:20:
         d8:f7:b1:a3:e4:bf:28:fd:3f:fb:ec:f5:9b:b7:28:4c:fc:78:
         9a:e1:5e:e4:ba:23:39:a6:70:c6:24:05:8b:9c:da:41:38:7e:
         47:a5:0a:38:7e:c2:db:34:2c:d4:a3:73:6b:ed:1c:33:47:63:
         d6:7e:d6:42:b9:27:76:ae:d2:4e:d4:bc:86:1e:39:f4:78:2f:
         f3:93:e7:0d:57:4e:7e:8c:51:fc:a4:80:3d:9e:1d:ea:67:87:
         15:b1:f2:70:59:85:49:e1:c8:63:19:68:71:c6:78:9f:59:b7:
         ec:fb:87:9f:11:33:3e:b6:66:3f:b1:30:37:54:24:c8:fd:41:
         61:48:83:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:22:17 2026 by rpki-client