Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/323430313a386430303a3a2f34382d3438203d3e203338333435.roa
File:                     323430313a386430303a3a2f34382d3438203d3e203338333435.roa (raw, json)
Hash identifier:          ZH9+kFx0VD4DLR9C+BlCTjALt/l2CJFEhKhhPoQytNo=
Subject key identifier:   FF:19:F2:9E:6E:6E:AB:F3:42:56:A4:D2:9E:F9:D2:A6:17:63:58:28
Certificate issuer:       /CN=A48290B7B4443542D0460FD49BDF1B444360AE86
Certificate serial:       6908EB56AB7CA10CFD9BBAC5C46709026FC8075D
Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/323430313a386430303a3a2f34382d3438203d3e203338333435.roa
Signing time:             Fri 10 Apr 2026 08:13:08 +0000
ROA not before:           Fri 10 Apr 2026 08:08:08 +0000
ROA not after:            Fri 09 Apr 2027 08:13:08 +0000
asID:                     38345
IP address blocks:        2401:8d00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 12:09:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:08:eb:56:ab:7c:a1:0c:fd:9b:ba:c5:c4:67:09:02:6f:c8:07:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86
        Validity
            Not Before: Apr 10 08:08:08 2026 GMT
            Not After : Apr  9 08:13:08 2027 GMT
        Subject: CN=FF19F29E6E6EABF34256A4D29EF9D2A617635828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e1:5c:74:33:6b:c5:0a:7d:2c:d0:34:b4:fd:
                    08:79:a7:97:2b:ff:4a:b6:44:2e:f9:a3:37:7b:e7:
                    01:60:34:b1:9f:ed:2a:ea:46:7e:49:9f:3f:e6:ff:
                    78:8d:14:db:50:9b:d6:1b:29:bf:58:2d:0c:a2:fb:
                    28:33:0b:4e:8b:70:d1:4f:61:92:f0:0f:91:0c:7b:
                    50:31:81:d5:26:0e:ed:d7:59:ec:99:23:ff:1e:ed:
                    31:9b:cd:62:11:95:97:0f:dd:be:82:9d:73:85:21:
                    bf:a9:9f:e0:4d:13:b2:7b:b8:bc:90:4b:f0:a1:67:
                    7d:48:d5:d1:e9:7e:f2:13:ff:d3:76:b5:3c:90:20:
                    c9:28:eb:d6:cc:5c:59:a6:2c:8a:a6:96:61:77:2e:
                    57:b7:be:ac:4a:87:ba:5a:94:92:c7:f9:b1:ae:59:
                    47:0d:a4:77:8e:1a:cb:11:6e:54:4f:40:af:7e:b0:
                    ba:fc:1f:10:25:32:d4:71:24:8e:5c:8b:fc:d7:08:
                    43:1c:ce:9f:85:bb:1c:fb:7d:a9:c0:f3:f5:a7:94:
                    29:82:4c:74:88:61:72:88:bc:da:bb:d7:85:52:3c:
                    e1:26:3d:62:83:cb:64:6d:5c:79:28:13:b4:7e:6d:
                    10:c2:21:84:60:c2:6d:fe:cc:90:10:a3:83:66:ae:
                    06:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:19:F2:9E:6E:6E:AB:F3:42:56:A4:D2:9E:F9:D2:A6:17:63:58:28
            X509v3 Authority Key Identifier:
                keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/323430313a386430303a3a2f34382d3438203d3e203338333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:8d00::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:1e:1f:b8:55:56:7a:40:42:c3:c5:39:0f:5a:e4:18:f2:78:
         e1:0a:38:2e:cc:06:27:ea:ca:bc:53:81:c1:06:4a:5a:be:c9:
         26:9f:ed:fa:5a:20:d1:0c:83:fc:22:7f:56:88:1f:40:b2:75:
         7c:ea:e6:ba:65:b3:9f:64:cc:3e:47:6e:b4:25:d3:3e:50:5c:
         94:be:b1:b9:0a:a3:6a:cc:83:f3:4a:b0:8c:eb:4b:d1:97:1d:
         c4:c6:9d:7f:34:c2:0a:c9:44:be:01:0e:2f:f5:9d:98:ea:23:
         68:f8:ee:45:7f:52:47:e7:77:d0:c5:fa:a6:29:03:42:97:16:
         e6:8b:3a:1c:da:1d:dc:e2:0a:8b:18:dd:8e:27:f5:4f:1f:9d:
         b9:65:1b:aa:f5:05:65:3f:96:06:9f:9b:7c:01:3e:22:26:ff:
         82:a2:16:8e:42:86:a0:90:ff:b6:fa:8a:0f:a2:3d:d4:18:10:
         f0:bd:c5:a1:e6:f7:9b:dd:23:08:e9:56:14:ba:0e:ea:3d:e0:
         5b:fa:ba:b2:3d:41:e1:5e:40:d9:a2:35:18:76:93:1a:9d:03:
         c4:63:8a:89:cd:5b:a6:c3:a0:9d:9b:0d:11:de:54:ab:2e:22:
         9d:41:80:c1:6e:98:67:af:f7:4b:54:b0:1b:ad:e1:1a:1c:cc:
         07:62:6d:ba
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:33 2026 by rpki-client