Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/323430333a623430303a3a2f33322d3332203d3e203130323132.roa
File:                     323430333a623430303a3a2f33322d3332203d3e203130323132.roa (raw, json)
Hash identifier:          Lzi2DAdro4APWJFpn+0Cg+SAoUvuID2xUmJmE84KTvc=
Subject key identifier:   62:26:94:92:D6:6A:A3:B0:0D:A8:6F:52:84:F1:60:1D:B7:16:B1:1E
Certificate issuer:       /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Certificate serial:       68E3060AF61162F6C38A1E9F26E6A74DE0E45AAE
Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/323430333a623430303a3a2f33322d3332203d3e203130323132.roa
Signing time:             Tue 28 Apr 2026 07:12:54 +0000
ROA not before:           Tue 28 Apr 2026 07:07:54 +0000
ROA not after:            Tue 27 Apr 2027 07:12:54 +0000
asID:                     10212
IP address blocks:        2403:b400::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:e3:06:0a:f6:11:62:f6:c3:8a:1e:9f:26:e6:a7:4d:e0:e4:5a:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
        Validity
            Not Before: Apr 28 07:07:54 2026 GMT
            Not After : Apr 27 07:12:54 2027 GMT
        Subject: CN=62269492D66AA3B00DA86F5284F1601DB716B11E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4a:a3:b0:6c:8c:62:24:16:1e:4e:c3:f4:5e:
                    63:ca:7d:6b:51:80:a1:cc:13:25:f1:7d:58:af:b2:
                    e7:37:ac:e4:1a:70:80:82:34:a0:68:0b:88:1c:80:
                    36:13:9b:38:bd:3e:b0:42:3e:bf:4f:1b:fc:85:f6:
                    f1:22:ba:f8:01:6a:3a:68:95:73:8c:80:60:81:a8:
                    e5:1c:a2:ab:59:cc:b8:bd:8b:dd:e7:cd:6e:34:c3:
                    70:77:50:dd:ab:bd:38:5b:9a:8d:4a:05:95:82:73:
                    0b:5b:a3:82:37:8f:63:c7:d9:ba:9f:3b:bc:91:54:
                    d1:1b:9f:c6:66:f2:e5:94:68:e2:f0:9c:2a:f9:7b:
                    78:76:4a:4f:2e:19:a4:8c:a1:5b:bc:86:d0:f9:34:
                    2f:f7:6c:5e:83:34:e4:36:91:6c:03:b1:ab:ad:5d:
                    70:60:8a:1c:4f:f1:6e:49:93:d5:49:90:41:3c:04:
                    29:17:14:8f:04:53:e1:29:15:ad:ac:e8:35:3b:19:
                    1e:03:89:38:2c:a4:8c:47:e9:7d:bc:29:57:33:58:
                    a2:92:a5:22:10:39:2f:8e:10:36:07:87:b6:43:12:
                    60:87:47:d2:89:7d:66:b4:50:8b:45:80:55:31:f7:
                    be:96:09:d1:c6:30:b0:a4:06:fd:bb:f3:42:0a:3a:
                    ca:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:26:94:92:D6:6A:A3:B0:0D:A8:6F:52:84:F1:60:1D:B7:16:B1:1E
            X509v3 Authority Key Identifier:
                keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/323430333a623430303a3a2f33322d3332203d3e203130323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:b400::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:2b:bd:2a:ba:e6:2c:0f:4b:56:29:f3:bf:a2:91:c5:91:48:
         eb:40:2a:d7:5e:0a:3d:b3:1f:ba:c0:dc:16:4a:47:76:46:31:
         5d:9f:90:10:1b:95:f0:6a:52:93:c3:77:7a:dc:a9:85:b2:12:
         d9:e6:db:a5:dd:c8:78:f9:68:d2:3a:eb:9f:66:67:9e:e7:b4:
         98:a7:26:06:d4:b8:56:ba:cd:be:9b:19:55:74:93:f0:3a:13:
         89:6f:fa:7f:84:1c:f1:85:ee:ab:40:28:d9:1f:bc:bc:5b:24:
         6a:39:df:c6:b4:ce:a0:51:06:e6:86:93:97:8b:d0:e8:c3:f8:
         dd:b5:30:7c:6e:30:2c:7f:3f:cf:26:16:d7:89:9c:1e:2c:e7:
         f9:b5:3a:48:57:f2:a4:09:2a:c2:ac:f6:af:ec:f4:01:af:f3:
         ee:8d:d5:6d:49:3c:0d:65:41:55:36:93:34:03:18:d3:8c:a4:
         de:64:b6:eb:49:2f:34:b2:89:c5:76:d3:ff:f1:a7:37:a2:34:
         2c:3a:e9:fe:38:c3:23:51:b6:01:68:5c:6d:7f:84:99:40:47:
         03:3a:bb:f5:fd:f4:4f:18:8c:dd:58:3f:16:90:2d:3e:6c:d1:
         96:4c:74:1e:94:a6:f0:7b:ec:df:91:00:a9:f2:98:cc:8b:ea:
         81:17:04:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:49:24 2026 by rpki-client