Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100991880549629955/0/323430343a653738303a3a2f33322d3332203d3e2030.roa
File:                     323430343a653738303a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier:          jDt2YO5IfWb4E+JvZ4HL3Mb4PviL245jOkb90zp1nDg=
Subject key identifier:   FA:B7:0D:E9:E4:E9:E5:60:1F:30:1A:72:FF:70:36:DA:6B:27:E3:B0
Certificate issuer:       /CN=060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD
Certificate serial:       16DEC58D9786D880C892EE24267F7E14F20C3507
Authority key identifier: 06:06:77:FF:DB:8F:A3:C6:C6:DC:2F:18:ED:F7:BE:DA:06:5F:B8:AD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/323430343a653738303a3a2f33322d3332203d3e2030.roa
Signing time:             Mon 27 Apr 2026 03:51:53 +0000
ROA not before:           Mon 27 Apr 2026 03:46:53 +0000
ROA not after:            Mon 26 Apr 2027 03:51:53 +0000
asID:                     0
IP address blocks:        2404:e780::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 04:39:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:de:c5:8d:97:86:d8:80:c8:92:ee:24:26:7f:7e:14:f2:0c:35:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD
        Validity
            Not Before: Apr 27 03:46:53 2026 GMT
            Not After : Apr 26 03:51:53 2027 GMT
        Subject: CN=FAB70DE9E4E9E5601F301A72FF7036DA6B27E3B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:cf:d0:51:5c:b5:09:b6:09:1b:0d:e8:55:67:
                    fc:8f:79:5c:9a:1f:fa:1b:92:5f:9b:a6:66:09:a4:
                    f5:97:4a:a4:1c:0c:fd:27:ea:3b:d5:3a:53:2d:99:
                    b7:6f:59:42:8c:33:10:da:96:ad:04:85:08:0c:e5:
                    e8:2d:c3:6d:40:cf:8b:d6:da:b3:0d:ed:49:68:53:
                    88:f0:a0:8e:90:fb:02:0d:15:24:11:3c:e8:27:52:
                    ca:a8:fe:cd:45:da:d3:6e:c3:dd:09:df:6f:85:f6:
                    ae:28:29:bc:31:ea:e6:2d:6a:0e:1c:15:97:db:fd:
                    93:75:7d:f7:7a:70:42:3a:aa:05:ed:2a:54:97:d8:
                    61:91:5a:8c:42:7a:33:7f:3e:b4:6c:e8:8f:b4:e2:
                    13:73:e6:a9:46:ed:24:ca:88:9d:20:fd:dc:8e:54:
                    51:46:fb:06:fb:ea:9d:a7:1d:c4:c3:17:03:2e:6e:
                    a7:40:ed:8b:30:66:29:ef:4b:b5:4a:37:20:17:4b:
                    53:be:b3:25:94:4f:05:40:a4:9d:f1:e4:d0:10:c5:
                    20:df:02:95:79:f1:4d:33:7d:76:fa:ee:af:f4:88:
                    de:17:9f:48:2c:d8:fd:c0:dc:2c:0d:39:5d:49:7a:
                    79:a2:72:df:26:4e:bc:6d:ed:54:51:88:7f:70:cb:
                    00:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B7:0D:E9:E4:E9:E5:60:1F:30:1A:72:FF:70:36:DA:6B:27:E3:B0
            X509v3 Authority Key Identifier:
                keyid:06:06:77:FF:DB:8F:A3:C6:C6:DC:2F:18:ED:F7:BE:DA:06:5F:B8:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/323430343a653738303a3a2f33322d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:e780::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:13:18:d8:2a:27:f8:85:a2:e0:82:86:06:ea:53:31:51:81:
         14:09:94:a9:e7:eb:45:8b:65:58:91:98:b9:3c:be:7a:5c:07:
         ca:86:60:54:37:fa:57:91:11:d1:56:0e:06:8f:e8:5d:e9:27:
         65:71:83:c7:13:99:eb:fe:ad:b4:10:7a:b2:48:65:e9:5c:a4:
         35:0a:5c:bb:41:39:04:4d:b9:3b:5f:84:a2:c4:2d:4e:1c:d1:
         da:52:d8:37:e9:5d:e8:9f:25:60:63:a0:8b:b4:98:2d:3a:55:
         c7:bd:93:1a:73:d9:d8:5a:7d:92:b0:0b:f8:a2:cb:64:9f:6f:
         fc:21:ed:f5:e4:f9:c9:dd:28:f0:8d:4e:6c:e7:dd:d8:08:f2:
         e7:0c:14:11:cf:07:ef:68:54:f6:b0:ba:24:ca:ee:5f:71:7e:
         37:02:3b:12:6b:d2:5e:ce:56:3f:df:9c:1f:0a:6e:02:a6:e3:
         34:f5:76:64:7b:81:ce:d7:c6:d4:96:ba:a0:33:5d:13:96:a8:
         58:ee:83:7d:96:58:0f:ca:05:24:85:a0:0d:cd:0a:e2:c4:c9:
         58:06:92:9e:f6:6f:68:18:59:b5:bd:be:8b:5c:14:4a:a2:7c:
         ed:af:b4:59:48:e5:88:ec:70:13:16:c3:fe:a7:df:d7:b9:e7:
         f1:25:64:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:10:46 2026 by rpki-client