Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a343434343a3a2f34382d3438203d3e203234313431.roa
File:                     323430303a393630303a343434343a3a2f34382d3438203d3e203234313431.roa (raw, json)
Hash identifier:          OL1EH8Hotq4ZS9oiKF1DWYlRRtvLpzN5lXhQGlmGfOc=
Subject key identifier:   54:7F:AB:2B:5E:5E:D5:A7:5F:E0:FE:FB:A0:6E:FB:2A:12:4D:8F:E2
Certificate issuer:       /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F
Certificate serial:       1ED0F4C5C05231453A8BB97537656CE2C62B3A16
Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a343434343a3a2f34382d3438203d3e203234313431.roa
Signing time:             Mon 13 Apr 2026 03:08:51 +0000
ROA not before:           Mon 13 Apr 2026 03:03:51 +0000
ROA not after:            Mon 12 Apr 2027 03:08:51 +0000
asID:                     24141
IP address blocks:        2400:9600:4444::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:58:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d0:f4:c5:c0:52:31:45:3a:8b:b9:75:37:65:6c:e2:c6:2b:3a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F
        Validity
            Not Before: Apr 13 03:03:51 2026 GMT
            Not After : Apr 12 03:08:51 2027 GMT
        Subject: CN=547FAB2B5E5ED5A75FE0FEFBA06EFB2A124D8FE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:45:90:c7:f9:8d:d1:ef:cf:db:93:98:e7:25:
                    64:49:25:b0:25:c2:06:5d:a9:98:d0:17:ac:75:e3:
                    df:cd:d1:af:a8:60:f5:d1:3e:36:e4:1a:28:8b:59:
                    3d:60:de:a7:db:31:5b:be:e9:19:87:b9:7b:6e:52:
                    0d:ab:9e:0d:86:82:48:e7:30:51:02:93:0e:bd:a3:
                    39:a5:da:19:e3:b4:c0:26:98:2b:52:8f:a7:e4:55:
                    35:3f:e1:42:31:9c:50:4b:18:ce:5e:da:3c:91:a9:
                    fc:7c:e2:55:32:f1:13:92:d0:f3:85:a9:02:e5:c2:
                    ae:3f:fd:08:fb:98:27:aa:8f:fe:0c:05:45:fc:0f:
                    e6:91:a0:17:19:2a:28:21:a1:db:cd:80:b3:87:80:
                    87:23:0e:97:21:81:b8:83:d6:70:bd:4a:98:c9:8a:
                    7f:c5:34:b5:e0:8d:f7:db:6c:e3:1a:53:c1:03:65:
                    ef:7f:57:9f:4c:75:df:43:e7:90:d1:7e:f7:92:c7:
                    72:df:4a:96:6c:20:62:fb:f7:78:33:7e:79:04:fb:
                    1e:a9:bd:96:98:63:91:9c:38:a1:da:a3:84:d4:17:
                    39:18:d8:15:7b:de:5d:12:94:92:a5:7d:88:ea:62:
                    fc:1e:42:2a:89:48:95:72:65:e0:90:4a:c9:ac:c6:
                    d9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7F:AB:2B:5E:5E:D5:A7:5F:E0:FE:FB:A0:6E:FB:2A:12:4D:8F:E2
            X509v3 Authority Key Identifier:
                keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a343434343a3a2f34382d3438203d3e203234313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:9600:4444::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:89:93:97:36:e8:0e:bd:05:bf:16:31:38:25:92:7b:97:02:
         8c:a4:d8:e2:58:21:20:8d:b8:ca:29:66:07:7c:f4:cb:cc:46:
         ff:8e:76:f7:de:69:c9:91:d2:d4:36:ac:70:74:54:3a:63:6e:
         ba:9d:64:b7:48:c1:bc:f6:46:01:54:79:6c:16:6d:ba:a2:b6:
         6d:b8:8b:b2:cf:c4:f5:60:8b:67:8b:79:2a:de:cc:37:b0:07:
         3e:ce:79:46:5d:a7:09:bb:13:e2:43:2b:a2:0f:5b:06:b5:b7:
         70:1c:e1:45:da:0b:8c:90:13:c4:4c:bd:46:cc:65:c6:28:c5:
         81:d4:14:a5:ab:9e:a1:44:97:1c:f7:b1:33:e8:5a:e0:d5:4e:
         19:91:cd:bc:72:ae:91:f3:fe:43:ca:1c:a0:99:7f:dd:4d:dd:
         c9:d4:10:7c:59:fc:99:6a:22:7d:b8:3f:d6:5d:3a:f6:46:e4:
         db:08:78:14:e7:4f:75:81:1e:b9:59:82:e2:f4:0c:0a:e7:4b:
         ec:56:80:37:76:0d:53:54:df:26:7d:54:e1:7b:0d:45:93:d5:
         4c:7d:46:0a:9e:20:d7:8b:71:dc:4c:69:b5:10:3b:f5:51:70:
         e7:5f:f0:02:03:c1:73:7d:b2:f3:24:80:c0:24:5d:eb:fb:d2:
         3c:f0:5c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:26:11 2026 by rpki-client