Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/323430333a346563303a3a2f33322d313238203d3e2034383337.roa
File:                     323430333a346563303a3a2f33322d313238203d3e2034383337.roa (raw, json)
Hash identifier:          2oOC4IREjOvTvxPuiyC1tXBVBVkt+KsdaPeWwbtwVq0=
Subject key identifier:   69:8F:00:92:6B:F0:DB:CA:23:24:46:80:58:42:58:D1:DA:A4:BC:3A
Certificate issuer:       /CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Certificate serial:       0D7709C630D110DE6E87C80840BFC3A342FE6550
Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/323430333a346563303a3a2f33322d313238203d3e2034383337.roa
Signing time:             Mon 20 Apr 2026 05:51:46 +0000
ROA not before:           Mon 20 Apr 2026 05:46:46 +0000
ROA not after:            Mon 19 Apr 2027 05:51:46 +0000
asID:                     4837
IP address blocks:        2403:4ec0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 18:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:77:09:c6:30:d1:10:de:6e:87:c8:08:40:bf:c3:a3:42:fe:65:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6
        Validity
            Not Before: Apr 20 05:46:46 2026 GMT
            Not After : Apr 19 05:51:46 2027 GMT
        Subject: CN=698F00926BF0DBCA23244680584258D1DAA4BC3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:75:40:41:a7:97:98:3a:a4:54:f1:eb:93:35:
                    1e:29:75:7a:4c:67:45:e8:aa:93:87:1c:b9:c1:ad:
                    85:ec:ff:77:2b:41:00:f4:f7:f0:ce:39:c3:98:27:
                    10:4c:96:b8:4c:89:b9:85:84:2c:dc:21:96:f8:94:
                    cb:77:76:c6:6d:b2:a8:57:1c:b3:c3:e9:45:eb:c5:
                    c5:8d:bc:cd:db:ed:9a:69:98:72:63:e2:7f:fd:0b:
                    05:b4:6f:56:f7:27:26:19:d8:5b:3e:15:7f:2c:77:
                    85:7f:89:3d:67:0d:5b:6c:a2:10:dc:81:e4:5f:ff:
                    07:58:e8:a5:d3:65:45:e7:89:3e:eb:ac:43:09:19:
                    6e:60:ce:36:f5:9d:5d:57:21:6d:bd:58:6a:63:ca:
                    a6:81:37:71:2f:ea:d1:74:fc:3f:54:5d:c4:ab:66:
                    9b:5c:1f:2e:63:7b:d3:17:44:09:58:1b:e3:6c:b4:
                    7e:d5:5f:71:3e:f0:70:34:65:5b:bf:c7:cd:dc:55:
                    a2:75:60:2c:7f:d3:e3:f8:aa:cd:8f:cb:f9:49:6c:
                    8a:12:c2:c7:b1:9a:9c:c1:5f:9e:ce:61:a6:59:7b:
                    33:72:2b:96:5e:70:15:8a:d2:d4:2b:9c:c1:56:b3:
                    22:a6:8b:37:56:d4:da:70:a5:73:9e:a6:a0:26:c5:
                    95:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8F:00:92:6B:F0:DB:CA:23:24:46:80:58:42:58:D1:DA:A4:BC:3A
            X509v3 Authority Key Identifier:
                keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/323430333a346563303a3a2f33322d313238203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:4ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:46:c8:ec:9d:bf:c7:91:e9:c5:f1:9c:0c:93:70:ef:3e:c3:
         d1:1f:37:f1:c2:01:c8:a1:47:cc:6b:6c:d5:46:3c:70:82:a3:
         6e:50:15:0b:18:cb:2b:c7:97:72:b6:17:b9:4a:c3:fe:e0:7d:
         47:fb:f5:45:1b:40:a1:91:8a:95:31:cc:0b:a7:b7:58:12:41:
         20:f5:cc:f5:f2:4e:69:8a:22:a7:4c:d5:2f:7a:63:66:04:40:
         68:1b:23:c5:79:50:ce:1a:e1:7f:ed:8d:cb:57:74:ed:9d:36:
         f4:4b:d2:8b:a0:d5:4a:77:7f:7d:eb:54:a1:a4:7c:b8:c6:79:
         1c:2c:de:c2:7a:1c:02:b9:9c:d1:9e:67:b0:e1:95:98:f1:91:
         35:e4:82:af:97:79:69:f4:bb:4e:80:c3:19:9c:32:a8:47:ed:
         24:6b:1e:a7:a8:05:90:23:74:5b:9b:af:db:1e:31:d8:02:7d:
         7e:9f:0d:b2:8b:c9:c8:9a:0f:ae:49:85:43:7d:82:dc:bc:78:
         1e:90:f8:a9:92:e9:81:03:88:82:85:05:42:47:8b:70:cc:d1:
         af:bc:49:71:cd:c6:af:9c:3c:75:4b:ad:37:62:28:d9:c5:1b:
         a6:c5:97:d1:d6:d3:c9:ff:44:1a:a2:fd:28:af:84:bb:8e:86:
         c3:04:48:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 02:54:48 2026 by rpki-client