Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094515575008264194/0/323430303a663665303a3a2f33322d3332203d3e203234333439.roa
File:                     323430303a663665303a3a2f33322d3332203d3e203234333439.roa (raw, json)
Hash identifier:          UiabMnx1sfNnZ29tjYfMnUIdMnB0pYX01Z520LYTrJg=
Subject key identifier:   0B:B5:50:6E:7E:44:B3:B6:07:AA:19:4F:7C:BE:0F:9E:19:E5:3C:33
Certificate issuer:       /CN=F360D54AD10E3C89DA06AC0AF4E83E769B23E977
Certificate serial:       702403B91331E057AC200FF4401D155FF897C6DE
Authority key identifier: F3:60:D5:4A:D1:0E:3C:89:DA:06:AC:0A:F4:E8:3E:76:9B:23:E9:77
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094515575008264194/0/323430303a663665303a3a2f33322d3332203d3e203234333439.roa
Signing time:             Thu 09 Apr 2026 07:06:39 +0000
ROA not before:           Thu 09 Apr 2026 07:01:39 +0000
ROA not after:            Thu 08 Apr 2027 07:06:39 +0000
asID:                     24349
IP address blocks:        2400:f6e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094515575008264194/0/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094515575008264194/0/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 02:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:24:03:b9:13:31:e0:57:ac:20:0f:f4:40:1d:15:5f:f8:97:c6:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F360D54AD10E3C89DA06AC0AF4E83E769B23E977
        Validity
            Not Before: Apr  9 07:01:39 2026 GMT
            Not After : Apr  8 07:06:39 2027 GMT
        Subject: CN=0BB5506E7E44B3B607AA194F7CBE0F9E19E53C33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3e:65:e0:62:eb:77:14:fb:42:45:5a:5b:01:
                    84:7d:bc:0a:93:58:8d:26:37:e1:15:b5:43:1d:d8:
                    cb:8b:5e:ac:1b:69:6e:f8:21:5d:cf:96:13:66:f0:
                    7f:63:06:d3:eb:0f:d5:bf:a4:92:02:53:77:19:e9:
                    af:18:8d:78:8b:bf:25:b7:81:6b:38:bc:ec:11:fd:
                    3d:2b:c7:b2:f1:aa:e5:b1:a7:c4:a9:35:73:d7:d8:
                    e0:11:b2:48:48:17:79:d6:bc:27:c9:83:53:0e:2c:
                    67:0b:5a:ac:d6:e6:e5:d0:c7:27:a8:fa:22:88:5f:
                    55:3f:79:a4:6d:1d:dd:0c:4a:04:a2:95:f9:1d:99:
                    98:a0:d7:32:fb:b8:64:93:5f:72:24:59:32:e9:3e:
                    d6:6a:14:09:c2:5e:8e:14:8f:cd:a7:cc:4e:08:a8:
                    e0:54:07:6d:d4:d0:e6:2b:20:0f:53:39:10:2f:a0:
                    e5:01:b9:04:29:4a:1e:53:df:e2:41:b6:9e:25:ee:
                    be:30:fe:d6:54:b5:79:1c:93:5d:03:c5:59:f6:3c:
                    e1:ce:4c:a6:85:e9:a8:68:03:39:d7:70:4d:a0:48:
                    a0:48:bc:72:fe:d3:c1:05:f6:61:64:a6:f2:b7:57:
                    e4:aa:77:13:f5:49:e4:eb:e1:b1:01:18:42:96:31:
                    1b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B5:50:6E:7E:44:B3:B6:07:AA:19:4F:7C:BE:0F:9E:19:E5:3C:33
            X509v3 Authority Key Identifier:
                keyid:F3:60:D5:4A:D1:0E:3C:89:DA:06:AC:0A:F4:E8:3E:76:9B:23:E9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094515575008264194/0/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094515575008264194/0/323430303a663665303a3a2f33322d3332203d3e203234333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:f6e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:8d:1e:41:f1:5d:fb:37:34:7a:6f:ca:99:2e:69:ad:b3:24:
         35:77:da:b2:a9:ba:d1:72:6b:16:93:14:ff:0a:03:41:5d:56:
         01:29:f4:7c:2a:41:39:f9:e7:c3:34:d2:5a:26:e1:3e:24:5d:
         3f:db:16:c8:d4:c4:06:03:a2:5a:7f:e8:62:0d:20:06:a6:c9:
         7f:2d:85:d3:a2:64:11:cc:26:38:e3:94:d0:f0:38:07:38:9d:
         4f:70:24:63:5d:db:29:32:b2:35:00:27:fd:c5:2d:a1:a9:45:
         15:79:84:1e:59:ef:05:ff:53:80:db:41:2c:b9:be:55:c7:8b:
         8e:27:8b:5b:71:15:d1:ac:47:26:6e:f8:87:c5:20:a6:0a:63:
         f6:44:16:d8:00:cb:6c:94:7a:9c:a2:7c:e9:1e:4a:ba:f8:71:
         ab:a6:4f:b7:cb:31:e0:5f:a0:78:14:b2:4e:3d:ea:dd:76:47:
         4e:6b:d5:ec:37:9a:9e:d2:dd:1a:ca:43:80:d9:77:13:39:2c:
         ed:d5:06:9d:88:d8:61:33:15:f4:d5:81:24:57:c6:75:fd:ff:
         b6:9b:9f:76:a3:9c:2f:96:b3:eb:e6:71:4d:20:c2:39:77:1b:
         8b:1a:d4:d9:e8:ac:cc:98:83:43:ad:ff:f8:35:f2:9c:25:d0:
         2a:07:b2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:26:33 2026 by rpki-client