Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094436162547744770/0/323430313a643738303a3a2f34382d3438203d3e20313331353036.roa
File:                     323430313a643738303a3a2f34382d3438203d3e20313331353036.roa (raw, json)
Hash identifier:          IpsexcgtGyJ+z3cYrXzZ6SOiKsWTzQyQl49/exqd790=
Subject key identifier:   1A:82:82:C9:0C:7C:9D:8A:CF:EB:02:EA:06:FF:E7:F5:42:BC:6E:AD
Certificate issuer:       /CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163
Certificate serial:       49F267580A618C0B3DD897B3EAF2AD2908869663
Authority key identifier: EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/323430313a643738303a3a2f34382d3438203d3e20313331353036.roa
Signing time:             Thu 09 Apr 2026 02:00:18 +0000
ROA not before:           Thu 09 Apr 2026 01:55:18 +0000
ROA not after:            Thu 08 Apr 2027 02:00:18 +0000
asID:                     131506
IP address blocks:        2401:d780::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 12:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:f2:67:58:0a:61:8c:0b:3d:d8:97:b3:ea:f2:ad:29:08:86:96:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163
        Validity
            Not Before: Apr  9 01:55:18 2026 GMT
            Not After : Apr  8 02:00:18 2027 GMT
        Subject: CN=1A8282C90C7C9D8ACFEB02EA06FFE7F542BC6EAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c0:b8:fb:0b:90:6f:30:ac:3e:e2:a8:e4:11:
                    58:91:15:a1:bc:df:12:bf:41:35:6e:8f:83:4a:31:
                    3e:e8:6c:a9:e8:28:e7:c2:bd:c5:8f:3c:28:88:b8:
                    ee:5f:e2:49:56:35:27:c2:73:c6:6c:19:e2:0a:e1:
                    c6:7e:90:13:32:1a:ca:d1:7c:5f:f8:54:7e:0b:12:
                    87:a2:b6:63:42:85:e7:5d:4d:ca:ce:30:1a:d7:4b:
                    41:54:f7:da:81:0e:fa:55:01:aa:9c:9d:87:af:8a:
                    56:72:04:41:f5:be:c1:35:cb:ce:84:29:00:6c:58:
                    13:ed:04:72:fe:2d:62:0f:41:6c:e1:a6:6f:1b:3b:
                    7f:0a:e7:67:8b:eb:07:b4:c5:7c:2a:3e:d7:37:63:
                    95:ec:4f:1a:5f:54:42:fe:6f:c5:02:8c:83:62:0e:
                    9a:e6:3d:45:5d:7b:99:9f:f4:11:c9:55:a2:fd:f7:
                    ef:f6:d3:f0:8b:19:2d:a8:f0:2b:b4:07:42:71:f6:
                    20:2e:c3:35:e5:54:40:8d:95:9e:96:39:62:c6:1a:
                    26:90:b2:d7:9e:37:d1:74:e0:a2:90:3f:e7:ae:6e:
                    54:8d:09:82:7e:ee:e0:08:96:75:32:4c:23:6e:dc:
                    0b:98:ab:cc:e5:d5:8f:fa:bb:b5:82:c9:6e:fb:3b:
                    d0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:82:82:C9:0C:7C:9D:8A:CF:EB:02:EA:06:FF:E7:F5:42:BC:6E:AD
            X509v3 Authority Key Identifier:
                keyid:EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/323430313a643738303a3a2f34382d3438203d3e20313331353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:d780::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:58:e8:95:02:dd:5d:3f:d9:43:a0:2b:31:11:16:82:1a:c6:
         7d:93:08:d8:5b:2c:77:2b:bf:75:f3:d9:67:9f:3e:0f:4d:80:
         cb:bc:68:bc:e0:c0:1c:62:2e:31:de:ac:d5:93:29:a4:ea:13:
         09:c1:6d:76:6f:1f:03:fa:e6:60:d9:aa:04:3b:79:36:10:94:
         30:c0:9b:73:4d:cb:34:67:c9:d7:5f:2e:16:d1:37:f1:1b:4e:
         8d:b3:56:27:59:c9:37:b8:ad:1b:43:6d:44:51:b4:7d:b0:5e:
         fc:43:ec:e7:38:46:d9:b8:24:fa:97:0d:a0:ff:0a:7f:b7:11:
         0a:fc:6b:f9:7c:87:2a:19:ac:d7:ac:a1:34:5a:6a:99:6f:74:
         d8:e8:1c:b7:e5:be:79:77:63:66:ce:3f:8d:c2:2f:35:6f:a2:
         72:26:98:2f:66:0d:c9:6d:d3:96:80:e6:d2:17:70:75:c7:35:
         08:6d:c3:54:64:8d:71:1c:4d:9b:df:49:4e:62:87:5c:74:ba:
         92:c1:b5:10:56:11:6a:75:0f:f9:f7:f0:c7:bd:e1:c4:c0:fe:
         74:b4:03:13:e8:9c:e6:61:84:c6:dd:82:43:a0:ee:2a:b9:1b:
         2c:c5:d4:40:45:5b:fa:26:90:05:f7:5c:43:82:a4:04:ae:87:
         10:7a:1d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:56:16 2026 by rpki-client