Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/323430303a636334303a3a2f33322d3332203d3e2030.roa
File:                     323430303a636334303a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier:          7hCEaUK9/+Fs/Poxi7kj06SUtYMOLUxMWUjE2hwFSTc=
Subject key identifier:   7C:23:22:D4:7C:B8:78:F3:7A:AE:7A:5A:21:CB:FF:5A:62:69:FE:07
Certificate issuer:       /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial:       0233F1B97EDB6F337D7C3EC9477678271FD404A2
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/323430303a636334303a3a2f33322d3332203d3e2030.roa
Signing time:             Thu 23 Apr 2026 07:51:43 +0000
ROA not before:           Thu 23 Apr 2026 07:46:43 +0000
ROA not after:            Thu 22 Apr 2027 07:51:43 +0000
asID:                     0
IP address blocks:        2400:cc40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:33:f1:b9:7e:db:6f:33:7d:7c:3e:c9:47:76:78:27:1f:d4:04:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
        Validity
            Not Before: Apr 23 07:46:43 2026 GMT
            Not After : Apr 22 07:51:43 2027 GMT
        Subject: CN=7C2322D47CB878F37AAE7A5A21CBFF5A6269FE07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ff:91:d0:d9:15:ab:de:65:4d:7f:5f:0d:5b:
                    4e:16:27:34:f8:c4:66:b0:26:9c:ef:7c:8b:ff:50:
                    f9:97:b6:89:47:04:6c:45:69:df:6f:af:5d:b1:01:
                    4d:7e:b8:34:25:d6:de:d9:62:74:97:af:16:7f:b1:
                    95:2e:21:d9:0b:59:f7:11:8a:62:88:3a:59:37:f7:
                    76:f9:56:ae:fd:a8:25:06:76:11:b6:dc:34:e6:24:
                    9b:db:c9:c6:a6:e7:07:60:ed:70:a6:64:b2:a5:a3:
                    10:31:79:65:1c:e6:fe:b5:e2:27:05:73:f3:a7:74:
                    ea:d1:98:c2:c5:1d:dd:d2:e9:01:46:ec:89:93:58:
                    ff:70:84:06:83:c2:7d:31:36:51:e8:60:e6:59:26:
                    04:d4:83:43:36:0f:f5:9b:7e:19:a1:4f:e9:ac:7b:
                    7e:4d:51:a7:96:50:46:be:06:9b:65:55:34:6e:88:
                    de:68:72:da:a5:83:75:59:ff:f5:0c:0c:7c:e9:27:
                    5c:f0:6f:25:fc:37:26:16:f9:8c:d8:b6:6f:06:0a:
                    07:eb:5c:69:e3:f5:ee:90:ac:8b:6d:ba:7f:d5:f2:
                    de:20:8b:37:b7:13:37:51:60:25:7e:5c:e0:aa:51:
                    3e:e3:4f:e1:d3:0b:42:20:77:56:60:af:ea:74:c0:
                    ad:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:23:22:D4:7C:B8:78:F3:7A:AE:7A:5A:21:CB:FF:5A:62:69:FE:07
            X509v3 Authority Key Identifier:
                keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/323430303a636334303a3a2f33322d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:cc40::/32

    Signature Algorithm: sha256WithRSAEncryption
         cd:c4:c4:95:b0:c4:bd:c1:48:a3:17:34:0a:2d:8e:bd:5e:05:
         b7:1e:cc:5d:70:c0:40:bc:4b:82:45:51:49:9a:ff:1e:53:62:
         89:d7:ed:27:72:11:74:3b:60:14:c1:08:59:9e:ba:5e:c3:8b:
         94:3c:d2:2d:5c:ba:73:c8:3a:c4:b8:5d:37:d7:a7:a6:7c:e2:
         b9:d6:de:10:05:61:9c:86:d6:f1:5a:ad:bb:94:63:40:85:16:
         3a:6a:44:08:6b:e8:ff:f4:aa:71:b8:18:ff:2f:48:51:43:b8:
         0e:ab:10:b2:3c:bf:75:8b:af:e6:60:4d:06:2b:06:1b:57:79:
         53:24:f9:9a:eb:37:81:38:14:ba:f9:ae:47:16:0f:e3:b1:ae:
         43:1c:d9:c0:fc:f7:48:c3:ad:d7:78:a6:ae:c3:f8:16:2b:9f:
         0c:78:79:c1:fa:d6:26:34:c8:2b:71:c0:62:dc:75:ff:37:98:
         49:5a:d4:a4:38:84:41:a9:d4:02:df:6b:d2:dd:11:f2:ae:8d:
         44:3c:9d:f8:e4:db:ab:07:48:29:2d:2e:c8:c4:b0:70:b4:52:
         e3:93:8b:f9:6f:c4:30:84:28:f6:c6:d6:5e:d5:a8:fe:7e:34:
         a8:ce:71:29:a6:43:13:15:70:98:e6:95:af:19:a2:27:77:2e:
         fa:7e:f3:66
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUAjPxuX7bbzN9fD7JR3Z4Jx/UBKIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdB
N0QxNEI0MDAeFw0yNjA0MjMwNzQ2NDNaFw0yNzA0MjIwNzUxNDNaMDMxMTAvBgNV
BAMTKDdDMjMyMkQ0N0NCODc4RjM3QUFFN0E1QTIxQ0JGRjVBNjI2OUZFMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx/5HQ2RWr3mVNf18NW04WJzT4
xGawJpzvfIv/UPmXtolHBGxFad9vr12xAU1+uDQl1t7ZYnSXrxZ/sZUuIdkLWfcR
imKIOlk393b5Vq79qCUGdhG23DTmJJvbycam5wdg7XCmZLKloxAxeWUc5v614icF
c/OndOrRmMLFHd3S6QFG7ImTWP9whAaDwn0xNlHoYOZZJgTUg0M2D/WbfhmhT+ms
e35NUaeWUEa+BptlVTRuiN5octqlg3VZ//UMDHzpJ1zwbyX8NyYW+YzYtm8GCgfr
XGnj9e6QrIttun/V8t4gize3EzdRYCV+XOCqUT7jT+HTC0Igd1Zgr+p0wK11AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUfCMi1Hy4ePN6rnpaIcv/WmJp/gcwHwYDVR0j
BBgwFoAUFldnVvCwO/dezWvESaO+96fRS0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
OTYwMjYzNjM2NzIwMDI1OS8wLzE2NTc2NzU2RjBCMDNCRjc1RUNENkJDNDQ5QTNC
RUY3QTdEMTRCNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdBN0QxNEI0MC5jZXIw
gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk5NjAyNjM2MzY3MjAwMjU5LzAvMzIzNDMwMzAzYTYz
NjMzNDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAMxA
MA0GCSqGSIb3DQEBCwUAA4IBAQDNxMSVsMS9wUijFzQKLY69XgW3HsxdcMBAvEuC
RVFJmv8eU2KJ1+0nchF0O2AUwQhZnrpew4uUPNItXLpzyDrEuF0316emfOK51t4Q
BWGchtbxWq27lGNAhRY6akQIa+j/9KpxuBj/L0hRQ7gOqxCyPL91i6/mYE0GKwYb
V3lTJPma6zeBOBS6+a5HFg/jsa5DHNnA/PdIw63XeKauw/gWK58MeHnB+tYmNMgr
ccBi3HX/N5hJWtSkOIRBqdQC32vS3RHyro1EPJ345NurB0gpLS7IxLBwtFLjk4v5
b8QwhCj2xtZe1aj+fjSoznEppkMTFXCY5pWvGaIndy76fvNm
-----END CERTIFICATE-----
Generated at Wed May 13 13:05:35 2026 by rpki-client