Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/323430313a386430303a623a3a2f34382d3438203d3e203338333435.roa
File:                     323430313a386430303a623a3a2f34382d3438203d3e203338333435.roa (raw, json)
Hash identifier:          VZU6kuzR6Py2BBhJ/DMjUIZJsIjF+v+iqYzi3+TcBJc=
Subject key identifier:   0F:1F:16:18:AD:55:5A:DB:1C:3C:4F:B8:47:B2:A6:BC:98:62:BE:9F
Certificate issuer:       /CN=A48290B7B4443542D0460FD49BDF1B444360AE86
Certificate serial:       4CE4192216DA3DCD9C8F1F6D718036DEE4802730
Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/323430313a386430303a623a3a2f34382d3438203d3e203338333435.roa
Signing time:             Fri 10 Apr 2026 08:13:07 +0000
ROA not before:           Fri 10 Apr 2026 08:08:07 +0000
ROA not after:            Fri 09 Apr 2027 08:13:07 +0000
asID:                     38345
IP address blocks:        2401:8d00:b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 12:09:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e4:19:22:16:da:3d:cd:9c:8f:1f:6d:71:80:36:de:e4:80:27:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86
        Validity
            Not Before: Apr 10 08:08:07 2026 GMT
            Not After : Apr  9 08:13:07 2027 GMT
        Subject: CN=0F1F1618AD555ADB1C3C4FB847B2A6BC9862BE9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f3:54:d8:2d:2d:9f:0f:b5:e9:9b:1d:c2:75:
                    0b:e4:eb:6f:3c:e2:b7:6f:cb:80:61:fe:e9:3c:0b:
                    be:15:df:96:08:bd:c4:70:7c:9b:dd:59:53:64:17:
                    6b:12:d7:93:ca:47:d2:8f:77:a3:80:52:53:80:12:
                    b9:db:50:14:3f:40:8a:6f:00:ee:54:be:12:fa:c8:
                    5e:60:09:db:1f:70:8d:40:81:c3:75:57:9c:40:f6:
                    15:e2:d1:81:3d:60:73:e8:4b:55:46:c9:1e:48:3d:
                    da:26:16:c1:5e:0a:83:97:2f:af:94:5f:f3:35:e0:
                    6d:c3:e1:94:69:d4:57:2c:61:63:0c:09:79:a4:53:
                    3c:e8:88:b2:1b:18:c0:fc:48:49:dd:0d:cf:96:f1:
                    4b:f1:3e:fa:cf:e5:db:ee:15:01:75:d6:c6:38:6c:
                    41:31:bd:bb:9a:a8:01:2f:0b:af:bf:50:50:47:08:
                    bc:00:2a:88:7d:0b:71:98:bb:13:5f:3c:02:3e:f0:
                    de:4e:14:df:8a:02:ef:b7:0c:f0:8b:dd:e4:73:83:
                    5e:49:d8:0a:7c:00:1f:54:89:27:d1:9f:8e:37:92:
                    ae:dd:91:ba:e3:3a:92:d3:7a:67:86:b2:b0:52:f0:
                    0e:e5:af:58:db:23:33:1b:47:1a:48:53:a1:3b:ea:
                    2f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:1F:16:18:AD:55:5A:DB:1C:3C:4F:B8:47:B2:A6:BC:98:62:BE:9F
            X509v3 Authority Key Identifier:
                keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/323430313a386430303a623a3a2f34382d3438203d3e203338333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:8d00:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:69:76:35:70:a3:71:67:44:ae:e0:46:b0:26:86:9c:0f:83:
         53:a5:c9:29:dd:32:6c:58:79:1d:7f:03:2b:18:c5:aa:43:3b:
         fc:44:86:5b:a4:3d:21:e1:9a:3e:52:e8:22:80:5d:f0:25:74:
         2c:b8:a4:3c:a0:2f:0a:59:24:56:5c:1c:22:d3:78:38:f0:77:
         56:cc:65:7b:2f:c9:eb:b6:7f:bc:41:bf:7f:00:e1:22:ed:f4:
         0a:34:66:06:ca:96:ec:79:c4:95:68:c2:b2:71:7d:61:71:05:
         90:b1:f2:28:06:1c:e5:d9:2b:74:01:d0:ad:a6:1b:12:9d:e9:
         94:fb:89:04:d8:97:44:8b:ae:7d:85:3c:51:58:28:e1:cb:8d:
         d8:9a:f3:ff:a1:ab:fb:74:36:c3:23:3e:ee:a7:9a:a1:8a:f1:
         bd:ad:f3:a6:a5:b6:3a:5a:4e:95:ef:e6:61:ef:b4:5f:a4:e4:
         5d:21:77:ce:fb:f1:02:c6:36:d0:99:36:6e:02:d3:7d:fe:78:
         24:36:05:4c:35:09:b7:20:8e:4f:08:5b:bd:21:24:a9:fa:73:
         f7:4e:f9:fe:c7:e9:a5:a7:80:55:37:38:6e:09:0a:03:20:39:
         9e:7b:9d:90:d6:9d:ad:9b:8a:bc:5d:67:47:af:18:e1:fb:a8:
         01:16:7c:83
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUTOQZIhbaPc2cjx9tcYA23uSAJzAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQ4MjkwQjdCNDQ0MzU0MkQwNDYwRkQ0OUJERjFCNDQ0
MzYwQUU4NjAeFw0yNjA0MTAwODA4MDdaFw0yNzA0MDkwODEzMDdaMDMxMTAvBgNV
BAMTKDBGMUYxNjE4QUQ1NTVBREIxQzNDNEZCODQ3QjJBNkJDOTg2MkJFOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk81TYLS2fD7Xpmx3CdQvk6288
4rdvy4Bh/uk8C74V35YIvcRwfJvdWVNkF2sS15PKR9KPd6OAUlOAErnbUBQ/QIpv
AO5UvhL6yF5gCdsfcI1AgcN1V5xA9hXi0YE9YHPoS1VGyR5IPdomFsFeCoOXL6+U
X/M14G3D4ZRp1FcsYWMMCXmkUzzoiLIbGMD8SEndDc+W8UvxPvrP5dvuFQF11sY4
bEExvbuaqAEvC6+/UFBHCLwAKoh9C3GYuxNfPAI+8N5OFN+KAu+3DPCL3eRzg15J
2Ap8AB9UiSfRn443kq7dkbrjOpLTemeGsrBS8A7lr1jbIzMbRxpIU6E76i/9AgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUDx8WGK1VWtscPE+4R7KmvJhivp8wHwYDVR0j
BBgwFoAUpIKQt7RENULQRg/Um98bRENgroYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDg4NDcyNzI1NDQ4Mjk0Ny8wL0E0ODI5MEI3QjQ0NDM1NDJEMDQ2MEZENDlCREYx
QjQ0NDM2MEFFODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTQ4MjkwQjdCNDQ0MzU0MkQwNDYwRkQ0OUJERjFCNDQ0MzYwQUU4Ni5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwOTQ4ODQ3MjcyNTQ0ODI5NDcvMC8zMjM0MzAzMTNh
Mzg2NDMwMzAzYTYyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzMzODMzMzQzNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACQBjQAACzANBgkqhkiG9w0BAQsFAAOCAQEADWl2NXCjcWdEruBG
sCaGnA+DU6XJKd0ybFh5HX8DKxjFqkM7/ESGW6Q9IeGaPlLoIoBd8CV0LLikPKAv
ClkkVlwcItN4OPB3Vsxley/J67Z/vEG/fwDhIu30CjRmBsqW7HnElWjCsnF9YXEF
kLHyKAYc5dkrdAHQraYbEp3plPuJBNiXRIuufYU8UVgo4cuN2Jrz/6Gr+3Q2wyM+
7qeaoYrxva3zpqW2OlpOle/mYe+0X6TkXSF3zvvxAsY20Jk2bgLTff54JDYFTDUJ
tyCOTwhbvSEkqfpz9075/sfppaeAVTc4bgkKAyA5nnudkNadrZuKvF1nR68Y4fuo
ARZ8gw==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:34 2026 by rpki-client