Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a31333a3a2f34382d3438203d3e203536303430.roa
File:                     323430313a373163303a31333a3a2f34382d3438203d3e203536303430.roa (raw, json)
Hash identifier:          J56KTf+Z3lImwU3Szgl0qvomW0Nqm0PiU7MnAkWe7S4=
Subject key identifier:   67:C6:C4:43:9E:2E:CA:43:04:EE:2C:24:3A:98:9C:73:76:D2:5B:46
Certificate issuer:       /CN=3D426BEA44C56109707602923668D40F4458FBEF
Certificate serial:       6983E64F3A14E9A9B2105F752D9E908CBB527D7A
Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a31333a3a2f34382d3438203d3e203536303430.roa
Signing time:             Fri 10 Apr 2026 03:00:51 +0000
ROA not before:           Fri 10 Apr 2026 02:55:51 +0000
ROA not after:            Fri 09 Apr 2027 03:00:51 +0000
asID:                     56040
IP address blocks:        2401:71c0:13::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 10:05:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:83:e6:4f:3a:14:e9:a9:b2:10:5f:75:2d:9e:90:8c:bb:52:7d:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF
        Validity
            Not Before: Apr 10 02:55:51 2026 GMT
            Not After : Apr  9 03:00:51 2027 GMT
        Subject: CN=67C6C4439E2ECA4304EE2C243A989C7376D25B46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a7:f7:9e:b0:4b:cb:29:d5:2c:9b:16:15:12:
                    2d:78:e7:5c:a1:ec:fb:7d:cb:2e:64:95:b3:cc:08:
                    01:f2:5a:16:6b:5b:ee:58:91:15:4c:8d:a5:80:f8:
                    e1:6d:33:8f:12:5e:a6:d2:ec:84:61:06:c1:42:9f:
                    48:1e:e4:1f:d5:64:70:60:40:59:89:9f:e9:ab:0f:
                    59:fb:0e:81:7a:d5:99:f1:51:79:43:8e:7f:ec:8a:
                    a2:ca:e9:2f:db:16:8b:f7:ca:f6:ae:51:75:8f:01:
                    20:de:20:45:da:00:18:bd:3d:53:49:93:ff:5d:a2:
                    a3:03:04:bf:eb:fd:80:9d:7b:47:b4:08:12:27:83:
                    1c:fa:d9:f7:f6:c8:04:7a:24:d5:d6:32:9c:12:c3:
                    d0:ef:1e:75:4a:a2:c3:05:d3:07:e7:83:5e:95:7d:
                    b9:96:69:06:78:03:f0:cc:7c:5e:9c:1d:b2:c3:6b:
                    23:15:e1:e7:ba:88:56:09:98:19:c1:d0:bb:cf:43:
                    3f:a2:d5:47:03:58:4d:ed:00:a6:e0:1a:ec:fc:d4:
                    70:28:72:f1:99:72:47:57:25:38:d9:5c:16:7f:8f:
                    74:26:7a:d5:35:f9:2f:d8:a4:7a:63:3d:69:69:c8:
                    76:12:e9:e4:5c:d0:65:2b:c7:36:1b:8e:8f:3f:10:
                    2b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C6:C4:43:9E:2E:CA:43:04:EE:2C:24:3A:98:9C:73:76:D2:5B:46
            X509v3 Authority Key Identifier:
                keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a31333a3a2f34382d3438203d3e203536303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:71c0:13::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:c6:88:9f:91:ad:e1:65:cb:54:4d:86:49:bc:c8:ab:1c:4b:
         34:e4:28:a7:f6:79:89:64:13:08:0c:68:50:13:c4:d5:23:03:
         88:4b:ac:24:43:1c:83:a3:08:2c:fe:2e:25:10:b6:7c:f1:5e:
         6c:75:5b:b2:c2:79:9e:a9:7d:77:5c:5e:c2:ab:37:13:9b:ed:
         ad:7a:6b:99:5b:95:56:06:9c:31:e3:0c:7d:10:70:39:f8:ed:
         54:25:9c:a0:e5:c4:b9:95:2b:32:fa:d7:8b:3e:02:09:1a:04:
         46:0a:10:ef:df:b2:cb:f4:71:6b:12:05:19:9b:9e:81:eb:15:
         b1:b6:86:be:e3:b6:71:22:6a:df:4d:c3:a7:15:5c:83:08:8b:
         6e:74:41:d3:f2:5a:7b:77:ab:04:45:58:9c:5f:28:55:25:d2:
         9d:53:f2:f0:af:54:ab:e9:de:05:64:41:8f:a8:b1:e8:15:fa:
         c8:6b:12:5a:ce:5a:c7:79:c2:41:fb:e1:63:f5:19:4f:1b:7a:
         b9:7c:2a:24:c5:bf:01:72:be:66:bc:07:4d:1c:f5:77:6c:8b:
         78:e5:53:0b:9a:49:37:8d:0e:c7:b1:74:16:fb:bf:e6:1a:be:
         03:8d:d8:11:82:aa:17:b9:df:3d:95:cd:0e:0a:e3:ca:e1:94:
         68:28:b8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:54:37 2026 by rpki-client