Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094151769384026113/0/323430333a633938303a3a2f33322d3332203d3e203338323833.roa
File:                     323430333a633938303a3a2f33322d3332203d3e203338323833.roa (raw, json)
Hash identifier:          9/c2HzbjtacCy3np4XyohJgt2y8iOEqczikxy/gpCKY=
Subject key identifier:   0C:4D:04:ED:F8:AD:F3:AA:71:27:86:A5:10:1E:F4:E0:51:F5:9E:36
Certificate issuer:       /CN=6741F95ED93FC3D5B5930C845F43187AE27BCF32
Certificate serial:       699756E2EC126436B2FE84CAD937B6DCB2838E83
Authority key identifier: 67:41:F9:5E:D9:3F:C3:D5:B5:93:0C:84:5F:43:18:7A:E2:7B:CF:32
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6741F95ED93FC3D5B5930C845F43187AE27BCF32.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094151769384026113/0/323430333a633938303a3a2f33322d3332203d3e203338323833.roa
Signing time:             Fri 10 Apr 2026 07:31:16 +0000
ROA not before:           Fri 10 Apr 2026 07:26:16 +0000
ROA not after:            Fri 09 Apr 2027 07:31:16 +0000
asID:                     38283
IP address blocks:        2403:c980::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094151769384026113/0/6741F95ED93FC3D5B5930C845F43187AE27BCF32.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094151769384026113/0/6741F95ED93FC3D5B5930C845F43187AE27BCF32.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6741F95ED93FC3D5B5930C845F43187AE27BCF32.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 10:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:97:56:e2:ec:12:64:36:b2:fe:84:ca:d9:37:b6:dc:b2:83:8e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6741F95ED93FC3D5B5930C845F43187AE27BCF32
        Validity
            Not Before: Apr 10 07:26:16 2026 GMT
            Not After : Apr  9 07:31:16 2027 GMT
        Subject: CN=0C4D04EDF8ADF3AA712786A5101EF4E051F59E36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:59:15:d6:38:6c:ea:e5:78:e0:f2:de:81:c8:
                    c1:ea:dd:76:63:b6:03:7b:ee:f8:3b:10:14:c5:f6:
                    26:2f:27:23:70:44:20:81:0d:1f:f0:f0:e9:96:db:
                    95:02:58:83:91:e1:7f:40:47:b3:cc:f2:fd:0a:8f:
                    a6:f4:cc:07:c6:29:cd:45:2a:77:6c:94:dd:cb:5d:
                    6a:d5:27:8d:6b:6b:b3:08:65:b6:24:49:0e:ae:de:
                    d5:26:8b:bd:ee:e9:4d:60:33:01:64:79:4e:53:e9:
                    66:9e:27:aa:ba:b0:8d:b7:62:b9:09:eb:f7:61:e0:
                    ee:a3:d0:91:50:97:ae:ae:46:9c:a6:50:f0:5d:a3:
                    53:cb:d6:03:bb:57:6c:b5:fb:50:7d:5c:25:3e:55:
                    07:f7:e0:64:80:b2:22:b7:b6:46:17:93:67:90:01:
                    44:e4:13:35:4c:02:f0:73:5b:af:0a:41:ff:2e:88:
                    55:19:ea:ae:c3:65:db:49:b5:c0:c5:fc:e7:9d:0b:
                    b6:8f:22:04:23:2e:1d:bd:55:27:b8:d0:fb:a9:8b:
                    76:a0:7f:85:9f:48:dc:dc:b8:2d:07:c8:49:d3:e0:
                    97:cd:5e:c7:51:df:2d:6a:b4:b9:29:10:5d:79:e7:
                    29:ac:07:18:b3:a6:e7:95:0e:17:ef:46:45:63:f0:
                    c9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4D:04:ED:F8:AD:F3:AA:71:27:86:A5:10:1E:F4:E0:51:F5:9E:36
            X509v3 Authority Key Identifier:
                keyid:67:41:F9:5E:D9:3F:C3:D5:B5:93:0C:84:5F:43:18:7A:E2:7B:CF:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094151769384026113/0/6741F95ED93FC3D5B5930C845F43187AE27BCF32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6741F95ED93FC3D5B5930C845F43187AE27BCF32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094151769384026113/0/323430333a633938303a3a2f33322d3332203d3e203338323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:c980::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:4f:84:8c:c9:ca:46:27:cb:1a:8b:27:3a:1a:5a:f4:f5:9a:
         0c:f4:52:3b:0a:ca:b5:5c:cb:85:04:13:ba:3c:57:fa:69:07:
         0f:4d:4b:f8:72:5c:82:69:f2:92:38:ad:0e:51:bd:11:59:98:
         94:1b:5a:c9:a1:17:02:45:a5:fe:b6:47:5d:cd:00:bd:ac:48:
         5e:c7:bd:44:27:25:53:5e:77:52:04:3e:63:99:9c:03:26:51:
         bc:02:ac:c9:86:8a:db:17:f6:22:a2:47:2a:ad:65:23:a3:d7:
         9f:5d:52:66:68:cd:3f:e4:8f:ea:bd:4b:17:24:a9:0e:f5:90:
         0b:6d:c4:be:79:63:62:a7:98:f3:a5:90:27:5e:d1:84:57:7d:
         d2:81:5e:04:67:da:90:49:81:68:de:38:f8:b8:7f:c8:7f:60:
         64:ed:9d:a4:fc:04:e3:3c:3e:73:76:7c:ed:fd:de:55:93:c9:
         af:1f:a6:79:21:70:84:3f:99:ab:0b:f7:68:6b:cd:79:d3:09:
         57:fd:4f:83:e8:0e:d1:77:68:5c:ba:41:9d:00:a4:95:e8:19:
         df:dc:52:60:85:db:67:6f:3f:07:9d:91:32:c7:a4:09:ee:15:
         47:77:9e:ed:1a:fc:91:00:e1:ff:ff:a1:d5:ec:d2:f4:3b:a1:
         cc:80:36:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:26:25 2026 by rpki-client