Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/323430333a386430303a3a2f33322d3332203d3e2030.roa
File:                     323430333a386430303a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier:          gIkKhDGvtYYE6/aWKUIImphtgEWTKYyUl0BLIRN8eU4=
Subject key identifier:   E8:3C:5B:AC:9F:BB:E4:09:26:C5:8E:35:90:36:CE:CA:7B:AF:62:1B
Certificate issuer:       /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Certificate serial:       3250CB96C723A4E8539AC38E13398CC6EB77DAA8
Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/323430333a386430303a3a2f33322d3332203d3e2030.roa
Signing time:             Wed 29 Apr 2026 09:01:45 +0000
ROA not before:           Wed 29 Apr 2026 08:56:45 +0000
ROA not after:            Wed 28 Apr 2027 09:01:45 +0000
asID:                     0
IP address blocks:        2403:8d00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:50:cb:96:c7:23:a4:e8:53:9a:c3:8e:13:39:8c:c6:eb:77:da:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
        Validity
            Not Before: Apr 29 08:56:45 2026 GMT
            Not After : Apr 28 09:01:45 2027 GMT
        Subject: CN=E83C5BAC9FBBE40926C58E359036CECA7BAF621B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e1:60:6f:32:e9:54:6b:0b:ff:55:6a:2c:f0:
                    5d:1e:a8:e1:69:d0:2e:36:37:7a:70:aa:7e:dd:2f:
                    0a:79:fd:a5:fc:f7:bb:c3:56:1b:07:4d:45:3e:b0:
                    46:7f:e8:af:ce:94:58:32:95:70:28:9d:0b:3b:e0:
                    80:9a:f9:40:48:30:f1:81:22:1d:fd:03:59:2f:15:
                    e8:76:60:15:8a:c2:8f:b5:c1:ca:14:86:80:75:2e:
                    fb:3f:1c:4f:7e:a3:dd:01:b4:53:62:2d:d6:5b:7c:
                    db:37:fc:21:d2:f3:b7:93:c4:38:69:41:f8:6e:d9:
                    69:bd:af:3d:7a:59:e1:a1:0d:ac:51:b4:a7:dd:37:
                    ef:3a:60:41:98:0e:b9:03:c0:d4:4f:c6:63:76:34:
                    40:16:2c:30:9d:1e:13:ff:cf:e4:26:1d:54:21:3e:
                    bb:07:fc:f7:9a:35:96:76:bc:a9:f9:9e:94:b2:88:
                    c2:63:fd:c1:c8:84:75:dc:46:05:39:73:5a:67:ee:
                    d5:94:7c:19:16:a6:fc:5c:53:e2:1e:f5:2a:4f:59:
                    26:34:10:1b:77:c4:98:d0:1c:eb:79:26:e0:f3:c8:
                    90:66:03:c7:10:0d:cc:5d:10:6a:d6:21:10:9a:f7:
                    74:34:a4:eb:b8:1a:ce:9d:21:68:d5:e9:30:29:8d:
                    7f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3C:5B:AC:9F:BB:E4:09:26:C5:8E:35:90:36:CE:CA:7B:AF:62:1B
            X509v3 Authority Key Identifier:
                keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/323430333a386430303a3a2f33322d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:8d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:71:b8:e0:bc:87:fd:6d:41:49:5f:db:a4:3d:80:48:79:11:
         80:fd:cd:c8:0d:20:f7:61:b8:88:a6:20:8a:2b:3e:fd:67:4c:
         85:4e:d7:6d:3a:23:bb:79:04:78:35:19:f6:9c:6a:1f:1b:76:
         85:4c:a8:3c:cd:4f:ea:ba:65:93:57:d9:41:cc:d6:55:7f:98:
         16:14:c6:6a:1c:5c:67:e3:b3:cc:87:58:9b:0b:03:0d:ad:12:
         ce:7c:d1:77:a5:51:ad:c3:91:99:96:75:ac:38:45:d7:cc:17:
         7d:40:66:31:11:71:20:90:3b:35:5c:20:58:b6:eb:eb:e3:16:
         d4:88:73:ec:fd:5a:4a:72:de:ea:40:33:10:1e:4b:3a:be:55:
         76:7b:fb:82:eb:bf:c2:77:e5:b6:06:05:4e:50:f6:ed:c1:65:
         a3:2b:aa:37:02:c5:86:44:4b:8b:21:3c:86:1f:85:a5:a4:e8:
         ec:70:19:86:4d:bd:c4:ad:d1:1c:2c:94:fb:fa:06:ea:a2:c7:
         85:2d:02:67:30:6b:4a:1d:dd:4d:73:54:f7:df:2a:81:e0:c7:
         24:bb:37:4b:73:cb:b6:1c:23:47:34:43:4a:c3:99:45:ba:12:
         e4:f9:d6:45:03:9a:49:58:de:7f:ec:8a:11:03:d4:32:a5:2e:
         0e:88:06:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:21:37 2026 by rpki-client