Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094515575008264194/0/323430303a663665303a3a2f33322d3332203d3e2034383038.roa
File:                     323430303a663665303a3a2f33322d3332203d3e2034383038.roa (raw, json)
Hash identifier:          XmomCZz+gpNTBW3dtIXg6VkP/VaR1g4e/+9aqVk5cAM=
Subject key identifier:   C2:41:86:AF:25:13:5C:1E:49:F5:1F:9B:7F:01:2C:A6:90:4A:12:B0
Certificate issuer:       /CN=F360D54AD10E3C89DA06AC0AF4E83E769B23E977
Certificate serial:       332B5FE4ACCF44698DF2F138CE629B05D8A4AA49
Authority key identifier: F3:60:D5:4A:D1:0E:3C:89:DA:06:AC:0A:F4:E8:3E:76:9B:23:E9:77
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094515575008264194/0/323430303a663665303a3a2f33322d3332203d3e2034383038.roa
Signing time:             Thu 09 Apr 2026 07:06:39 +0000
ROA not before:           Thu 09 Apr 2026 07:01:39 +0000
ROA not after:            Thu 08 Apr 2027 07:06:39 +0000
asID:                     4808
IP address blocks:        2400:f6e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094515575008264194/0/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094515575008264194/0/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 02:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:2b:5f:e4:ac:cf:44:69:8d:f2:f1:38:ce:62:9b:05:d8:a4:aa:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F360D54AD10E3C89DA06AC0AF4E83E769B23E977
        Validity
            Not Before: Apr  9 07:01:39 2026 GMT
            Not After : Apr  8 07:06:39 2027 GMT
        Subject: CN=C24186AF25135C1E49F51F9B7F012CA6904A12B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e5:72:c1:08:5a:5c:84:7a:50:87:4a:4c:24:
                    6a:93:90:0d:cb:a9:b1:9a:02:cd:d3:13:9f:f4:9a:
                    0e:69:f2:cf:90:b0:db:eb:93:cb:bb:19:8e:b7:ab:
                    48:c9:db:f9:26:3f:f3:f1:93:38:16:a3:ff:2a:c8:
                    b5:6b:a9:19:56:9d:88:c7:37:c4:bb:5a:91:97:ab:
                    b7:cb:89:62:6b:a6:27:89:ca:c7:d2:75:e3:83:c1:
                    cf:f7:8e:c6:5a:7c:52:70:a6:f4:46:4d:c0:18:1f:
                    a0:fe:94:ee:7e:64:05:4a:1f:7c:24:04:a1:97:d5:
                    85:e1:9c:3a:c5:ff:af:64:3e:1f:01:95:65:e4:d5:
                    27:a7:af:6b:91:ba:e8:99:59:18:18:e3:ff:91:b5:
                    b6:a6:96:e1:e2:eb:b8:c8:85:66:81:44:36:6f:36:
                    b1:4d:df:0c:94:ec:bd:5c:fc:64:86:57:71:b9:38:
                    f8:e8:81:b2:62:9d:32:d1:ee:72:d4:8e:12:07:18:
                    44:c3:b5:72:61:cf:43:91:b8:00:72:27:4a:51:5a:
                    68:a5:17:d6:ed:27:88:d6:c9:e9:69:8d:65:8a:42:
                    a7:65:15:fb:f4:55:e1:b0:df:63:ef:85:7e:3f:9b:
                    7a:7d:3a:66:91:aa:38:50:be:91:79:c7:98:08:84:
                    1c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:41:86:AF:25:13:5C:1E:49:F5:1F:9B:7F:01:2C:A6:90:4A:12:B0
            X509v3 Authority Key Identifier:
                keyid:F3:60:D5:4A:D1:0E:3C:89:DA:06:AC:0A:F4:E8:3E:76:9B:23:E9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094515575008264194/0/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094515575008264194/0/323430303a663665303a3a2f33322d3332203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:f6e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:c7:a8:91:01:8a:d4:c5:be:b4:c7:66:90:ad:7f:9e:e4:fa:
         ca:72:9a:d6:ec:2c:bf:4e:11:ba:08:66:fc:71:ac:db:c1:c2:
         2d:af:a5:d8:0b:5c:11:7e:b3:20:10:3e:95:36:0d:6f:36:96:
         a3:81:9a:0b:74:b0:5e:ba:d2:74:de:0a:89:60:49:11:f0:51:
         fd:dc:50:8c:73:71:09:46:23:9e:f2:78:06:65:03:43:5c:98:
         15:9d:41:9f:60:7b:2a:0b:5b:e6:73:cf:96:23:0d:7a:5d:0e:
         86:b2:b4:49:28:95:2f:9b:a6:57:4f:12:40:3b:c7:e4:98:43:
         be:e0:bc:f4:f2:08:f9:21:b6:21:92:22:95:3d:22:7e:58:87:
         33:aa:fd:85:dc:e7:38:bd:a1:cd:c8:8d:b7:26:2b:11:56:34:
         c8:f6:9a:6b:35:a1:0a:52:11:b9:99:27:c9:bd:f8:85:82:73:
         ee:93:77:00:c9:ff:d0:14:28:91:09:8f:aa:13:c4:14:64:c7:
         6b:a7:5c:a0:21:90:bb:9f:65:90:54:06:dc:57:c2:70:15:26:
         41:0b:48:7f:1f:26:93:48:59:59:50:1b:e1:7e:2b:a4:94:0a:
         d7:c1:91:5f:2b:b6:3f:c6:63:06:ab:83:a9:1e:5f:ca:06:24:
         32:60:1a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:30 2026 by rpki-client