Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094515575008264194/0/323430303a663665303a3a2f33322d3332203d3e2034353338.roa
File:                     323430303a663665303a3a2f33322d3332203d3e2034353338.roa (raw, json)
Hash identifier:          dZfvY3RNoTh3qofijw1u28Fhn4AvvN7Hm4pg6qTC8NI=
Subject key identifier:   16:4F:08:3A:46:51:4F:44:23:7E:9C:2F:2C:56:D7:CD:1F:15:2A:7F
Certificate issuer:       /CN=F360D54AD10E3C89DA06AC0AF4E83E769B23E977
Certificate serial:       1E013F91AA4C557D9576A9CF9940B1EDE8B891D6
Authority key identifier: F3:60:D5:4A:D1:0E:3C:89:DA:06:AC:0A:F4:E8:3E:76:9B:23:E9:77
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094515575008264194/0/323430303a663665303a3a2f33322d3332203d3e2034353338.roa
Signing time:             Thu 09 Apr 2026 07:06:39 +0000
ROA not before:           Thu 09 Apr 2026 07:01:39 +0000
ROA not after:            Thu 08 Apr 2027 07:06:39 +0000
asID:                     4538
IP address blocks:        2400:f6e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094515575008264194/0/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094515575008264194/0/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 02:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:01:3f:91:aa:4c:55:7d:95:76:a9:cf:99:40:b1:ed:e8:b8:91:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F360D54AD10E3C89DA06AC0AF4E83E769B23E977
        Validity
            Not Before: Apr  9 07:01:39 2026 GMT
            Not After : Apr  8 07:06:39 2027 GMT
        Subject: CN=164F083A46514F44237E9C2F2C56D7CD1F152A7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:92:dd:32:db:9d:15:fe:c6:57:78:be:c2:34:
                    11:dc:fa:cc:5f:ce:c5:92:c7:54:64:c2:67:7d:24:
                    76:38:15:09:64:7e:3d:d8:ec:56:96:40:4b:04:92:
                    78:6b:ff:ac:95:67:27:4c:3b:f0:7b:0c:61:55:05:
                    ca:19:dd:9a:5b:fa:4e:88:0b:dc:e5:08:7c:9d:78:
                    04:87:44:96:77:9f:44:4f:49:9c:73:d2:83:eb:e1:
                    ab:d7:be:8f:ad:b1:a9:53:e1:88:33:45:df:e8:3b:
                    43:71:62:0e:da:cf:29:ed:32:78:2f:bd:80:4f:84:
                    9b:0c:0e:72:20:5e:21:21:57:5f:40:91:4c:d3:69:
                    d2:89:d8:f3:85:27:06:7a:94:a2:f6:6b:d7:df:b8:
                    8d:c3:d1:1b:3e:07:9a:2a:b4:c5:df:04:fc:28:ff:
                    09:58:93:af:28:ce:2e:40:dc:69:f0:cd:ba:03:d3:
                    88:94:5a:22:34:b6:53:0e:9b:59:10:3d:32:fa:bb:
                    03:09:c0:a7:31:fc:2a:4e:77:69:a9:63:da:a5:9d:
                    52:cc:b5:8b:55:20:5f:bd:53:dd:d2:0a:72:eb:57:
                    44:6f:83:b3:85:e5:5c:64:b7:01:59:98:96:8b:9e:
                    1a:6d:cb:e0:8f:16:35:e2:c0:93:da:34:0a:96:2f:
                    30:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4F:08:3A:46:51:4F:44:23:7E:9C:2F:2C:56:D7:CD:1F:15:2A:7F
            X509v3 Authority Key Identifier:
                keyid:F3:60:D5:4A:D1:0E:3C:89:DA:06:AC:0A:F4:E8:3E:76:9B:23:E9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094515575008264194/0/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094515575008264194/0/323430303a663665303a3a2f33322d3332203d3e2034353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:f6e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:58:d0:74:0e:71:e7:a7:3b:05:f6:74:99:58:fd:76:4d:9f:
         64:b9:8e:9e:0a:a2:af:64:9c:92:96:75:16:ab:b3:5b:52:1c:
         07:73:17:23:38:8f:87:c6:14:52:f3:ae:63:da:f8:8e:d7:a8:
         8e:dc:29:51:9f:63:79:f6:4f:3b:a8:29:0c:1a:71:13:30:5c:
         89:40:03:f1:7a:2c:f5:11:e0:b5:a8:8e:ce:cf:4c:ae:f7:84:
         c3:8e:3d:34:b5:a5:cf:f8:47:cf:b1:2c:13:c3:c7:b8:51:7e:
         e4:18:c0:59:fb:dd:45:b0:3c:66:65:eb:0b:00:c1:ed:28:27:
         7d:57:02:7b:6c:be:52:e9:64:91:c5:7b:9d:8a:c4:e7:0c:e0:
         36:74:a7:88:1b:37:c9:64:ef:fc:7f:29:d7:0a:0f:a7:b4:6d:
         85:10:ec:12:91:35:a7:d4:35:34:a5:29:80:44:e5:eb:49:6e:
         f5:b9:28:96:d6:94:6e:55:87:d4:c3:68:04:4a:90:79:e5:2c:
         21:74:91:a6:39:c2:e8:01:d5:12:6a:67:07:10:87:2a:32:d9:
         cb:94:3b:a7:9c:43:70:16:b9:64:76:e3:bd:95:5b:02:a3:2c:
         00:6c:1f:a5:fb:a6:45:cc:55:af:fa:bf:f7:ac:d5:0b:b4:d2:
         2c:fc:7f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:32 2026 by rpki-client