Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/323430333a346563303a3a2f33322d313238203d3e203536303436.roa
File:                     323430333a346563303a3a2f33322d313238203d3e203536303436.roa (raw, json)
Hash identifier:          zFUWQFa+lQikyT+CZCenb0EHKryU8UWKx6d3dEYjKCE=
Subject key identifier:   C9:59:0A:52:2D:48:B3:EC:32:A7:47:8B:F2:6B:B2:93:C4:92:D7:85
Certificate issuer:       /CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Certificate serial:       49EA1B90BAE8B155F53A0C9189C01C29B06E5EF0
Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/323430333a346563303a3a2f33322d313238203d3e203536303436.roa
Signing time:             Mon 20 Apr 2026 05:51:46 +0000
ROA not before:           Mon 20 Apr 2026 05:46:46 +0000
ROA not after:            Mon 19 Apr 2027 05:51:46 +0000
asID:                     56046
IP address blocks:        2403:4ec0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 18:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ea:1b:90:ba:e8:b1:55:f5:3a:0c:91:89:c0:1c:29:b0:6e:5e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6
        Validity
            Not Before: Apr 20 05:46:46 2026 GMT
            Not After : Apr 19 05:51:46 2027 GMT
        Subject: CN=C9590A522D48B3EC32A7478BF26BB293C492D785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:93:bb:6a:01:46:d9:c6:c8:fa:c0:00:d9:78:
                    15:39:fb:d5:eb:dd:ed:e4:f8:31:60:43:b8:21:3f:
                    11:b9:89:aa:1d:00:2e:61:77:12:24:7b:61:cf:43:
                    c2:0a:68:f2:e4:2a:96:9d:d3:a4:f3:c8:b3:32:9b:
                    eb:9b:75:ad:b8:8b:e2:8d:fb:77:b0:33:81:aa:bd:
                    3a:88:7c:89:c1:80:9e:86:81:7a:99:af:f4:57:67:
                    df:e2:77:80:f9:e4:3e:0c:97:ee:b9:95:7d:87:d1:
                    11:00:33:15:99:9f:77:39:d8:1f:4d:c5:b5:82:6b:
                    bb:b6:42:2b:97:1f:ac:fe:8f:f2:d7:1c:77:c5:63:
                    f3:a5:2f:2f:00:97:cb:f3:26:7c:3c:7c:38:d0:b9:
                    d6:ab:f2:24:1e:8c:aa:f6:ab:51:54:bc:76:e3:98:
                    03:b2:2a:9e:1e:86:75:06:ce:a7:29:2e:31:08:ed:
                    dd:0d:fe:96:3c:38:8b:c0:cf:07:df:0c:b8:bb:39:
                    38:77:d9:c5:36:b9:a9:9f:d8:53:27:bc:d6:35:a1:
                    f5:1c:27:c1:08:8c:90:f2:b1:f2:52:2b:97:10:cb:
                    af:e5:a7:a8:f2:b5:dc:78:fa:87:29:ab:0e:df:87:
                    8c:2a:0d:0f:b2:90:c7:44:09:82:f1:0f:75:77:b5:
                    dd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:59:0A:52:2D:48:B3:EC:32:A7:47:8B:F2:6B:B2:93:C4:92:D7:85
            X509v3 Authority Key Identifier:
                keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/323430333a346563303a3a2f33322d313238203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:4ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:34:e6:5a:20:31:cf:ee:5a:6f:05:b6:e6:b9:35:0c:f5:65:
         8a:3c:02:17:8e:83:be:e1:1d:36:a7:e8:6a:bb:65:fe:05:95:
         a9:c8:dd:14:5e:4b:93:63:a5:fd:6b:65:42:89:f3:5d:10:dc:
         b2:82:7e:d0:f3:25:17:34:ee:aa:03:90:49:fb:00:33:97:e1:
         cf:ab:f7:9d:45:ed:69:56:70:b2:c1:bc:69:ea:53:8b:a0:6c:
         8f:85:0e:6a:cf:b4:ed:14:d4:9e:60:9d:0a:95:2c:49:cb:5a:
         de:e7:b0:7a:06:b3:48:0a:04:55:ed:c6:ce:fd:13:63:3f:f0:
         12:39:a9:09:29:7e:f7:99:3e:11:4a:fe:9c:4b:3e:0e:44:c9:
         06:60:91:57:da:eb:dc:5c:ca:5b:94:94:c2:b2:73:77:ea:19:
         f8:f4:23:e4:82:b1:25:17:76:8f:ba:82:69:d2:1f:84:25:93:
         87:5d:bb:88:0f:e5:bb:c5:1f:3f:fa:1c:de:3d:76:69:ca:12:
         e9:e8:63:ab:16:88:98:40:5f:25:83:72:84:ce:cd:b7:bd:4e:
         c9:56:6e:ec:89:bd:5d:30:57:85:e2:a6:da:aa:65:5e:f3:54:
         11:06:9d:9f:4f:fd:af:54:11:6a:77:6d:ac:1f:ce:f2:d4:1d:
         77:6f:af:47
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 21 22:52:29 2026 by rpki-client