Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/323430303a636363303a3a2f33322d3332203d3e2030.roa
File:                     323430303a636363303a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier:          rv74VCxJxKzC3ZVx9OI376BNqC+IcXnFyeDN0Nmu9SY=
Subject key identifier:   00:7A:D3:03:4A:7F:1A:1B:5F:76:D1:D1:29:81:F6:F2:76:D3:63:42
Certificate issuer:       /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial:       656C9E09CF4F1CBD2BCA962FA4C085FFE07963DA
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/323430303a636363303a3a2f33322d3332203d3e2030.roa
Signing time:             Thu 23 Apr 2026 07:51:43 +0000
ROA not before:           Thu 23 Apr 2026 07:46:43 +0000
ROA not after:            Thu 22 Apr 2027 07:51:43 +0000
asID:                     0
IP address blocks:        2400:ccc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:6c:9e:09:cf:4f:1c:bd:2b:ca:96:2f:a4:c0:85:ff:e0:79:63:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
        Validity
            Not Before: Apr 23 07:46:43 2026 GMT
            Not After : Apr 22 07:51:43 2027 GMT
        Subject: CN=007AD3034A7F1A1B5F76D1D12981F6F276D36342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bb:f7:9e:bf:60:79:8e:06:dc:9a:0a:49:16:
                    8c:77:b3:a0:39:ec:c6:fd:09:72:a4:28:2f:25:17:
                    30:44:ca:ab:cd:58:bc:87:e2:8a:eb:0e:48:27:9f:
                    06:8f:b1:f6:b5:9d:7b:fb:34:ec:28:cc:3f:02:65:
                    ed:00:d4:27:3c:1c:90:ab:5f:4f:22:c0:86:5a:3a:
                    dd:6e:a9:7e:f8:57:8f:91:73:41:0f:1a:d2:5e:3f:
                    7f:a8:17:a4:3a:e6:06:82:07:30:09:2a:5e:cf:b9:
                    f1:d0:ad:55:f2:f4:8f:fd:cd:27:ed:08:f9:64:c0:
                    45:22:59:9a:be:f6:c5:d2:ff:f3:43:16:10:ab:ee:
                    f5:3b:7d:26:37:97:5f:67:70:8e:eb:b2:32:1d:24:
                    d8:94:4c:8c:ef:1a:83:62:c4:46:0f:95:e6:f4:df:
                    f7:92:1e:3c:0c:6b:64:72:cb:4c:c6:f8:e0:c5:a3:
                    f7:1e:4e:86:47:1d:61:ef:3d:33:78:e4:cb:23:a6:
                    85:f3:fd:67:04:a1:53:e8:c8:2a:cf:fb:31:4c:97:
                    e3:71:9b:a8:13:8a:a2:51:88:23:7c:1f:19:c1:12:
                    ac:a4:e4:f6:52:13:25:c9:27:33:77:ad:2d:e2:b8:
                    8f:48:d0:81:bc:7d:21:5e:bc:99:36:67:d3:71:20:
                    4c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7A:D3:03:4A:7F:1A:1B:5F:76:D1:D1:29:81:F6:F2:76:D3:63:42
            X509v3 Authority Key Identifier:
                keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/323430303a636363303a3a2f33322d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:ccc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:d0:f4:44:e0:cb:c7:7f:1c:57:f9:ba:9f:b4:47:b8:47:71:
         03:44:4d:24:d3:9b:c2:9e:8d:29:bf:b5:b7:35:21:f2:3f:46:
         06:b1:ae:c6:de:9b:e0:90:f5:12:87:7b:0c:97:43:41:0f:be:
         ff:78:00:f8:97:f6:bb:5a:9a:b6:0a:dc:f8:da:e0:81:81:f1:
         ff:10:b4:55:f4:ec:31:55:cb:8b:c0:1a:77:78:0b:f6:ad:61:
         df:01:31:77:cf:4a:58:55:0a:fd:04:a5:0c:72:1b:17:d1:ef:
         73:69:cd:0c:a3:db:7b:51:8c:70:b5:2c:ff:d9:53:46:4c:80:
         bc:dc:df:6b:df:da:51:f3:1e:50:42:f5:e7:7e:09:ed:e2:59:
         fc:85:1b:0c:6b:6e:b7:79:01:88:2c:da:d6:a9:c7:45:d4:9d:
         a1:2b:d9:49:69:b1:1f:a1:37:a3:3f:40:8e:84:2d:68:f5:35:
         a0:b4:7d:e9:30:2d:d0:36:94:a6:34:c6:18:25:be:72:4c:55:
         23:4b:14:c7:50:29:0e:67:6d:a6:ed:70:09:0d:09:60:30:44:
         fb:a1:26:5d:83:b8:fb:cc:df:2d:ce:41:12:08:3a:17:ad:a7:
         fd:70:48:f8:b2:48:2c:69:1b:36:d2:9f:a6:8e:3f:53:f8:3e:
         43:dc:c1:22
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUZWyeCc9PHL0rypYvpMCF/+B5Y9owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdB
N0QxNEI0MDAeFw0yNjA0MjMwNzQ2NDNaFw0yNzA0MjIwNzUxNDNaMDMxMTAvBgNV
BAMTKDAwN0FEMzAzNEE3RjFBMUI1Rjc2RDFEMTI5ODFGNkYyNzZEMzYzNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTu/eev2B5jgbcmgpJFox3s6A5
7Mb9CXKkKC8lFzBEyqvNWLyH4orrDkgnnwaPsfa1nXv7NOwozD8CZe0A1Cc8HJCr
X08iwIZaOt1uqX74V4+Rc0EPGtJeP3+oF6Q65gaCBzAJKl7PufHQrVXy9I/9zSft
CPlkwEUiWZq+9sXS//NDFhCr7vU7fSY3l19ncI7rsjIdJNiUTIzvGoNixEYPleb0
3/eSHjwMa2Ryy0zG+ODFo/ceToZHHWHvPTN45MsjpoXz/WcEoVPoyCrP+zFMl+Nx
m6gTiqJRiCN8HxnBEqyk5PZSEyXJJzN3rS3iuI9I0IG8fSFevJk2Z9NxIEw5AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUAHrTA0p/GhtfdtHRKYH28nbTY0IwHwYDVR0j
BBgwFoAUFldnVvCwO/dezWvESaO+96fRS0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
OTYwMjYzNjM2NzIwMDI1OS8wLzE2NTc2NzU2RjBCMDNCRjc1RUNENkJDNDQ5QTNC
RUY3QTdEMTRCNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdBN0QxNEI0MC5jZXIw
gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk5NjAyNjM2MzY3MjAwMjU5LzAvMzIzNDMwMzAzYTYz
NjM2MzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAMzA
MA0GCSqGSIb3DQEBCwUAA4IBAQAe0PRE4MvHfxxX+bqftEe4R3EDRE0k05vCno0p
v7W3NSHyP0YGsa7G3pvgkPUSh3sMl0NBD77/eAD4l/a7Wpq2Ctz42uCBgfH/ELRV
9OwxVcuLwBp3eAv2rWHfATF3z0pYVQr9BKUMchsX0e9zac0Mo9t7UYxwtSz/2VNG
TIC83N9r39pR8x5QQvXnfgnt4ln8hRsMa263eQGILNrWqcdF1J2hK9lJabEfoTej
P0COhC1o9TWgtH3pMC3QNpSmNMYYJb5yTFUjSxTHUCkOZ22m7XAJDQlgMET7oSZd
g7j7zN8tzkESCDoXraf9cEj4skgsaRs20p+mjj9T+D5D3MEi
-----END CERTIFICATE-----
Generated at Wed May 13 13:33:52 2026 by rpki-client