Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1135050512157114409/0/323430343a373234303a3a2f33332d3333203d3e203539303734.roa
File:                     323430343a373234303a3a2f33332d3333203d3e203539303734.roa (raw, json)
Hash identifier:          jF+3cfaIQDjY1LGgIryQymJzgh2wmDFMt+nwkp9/pCU=
Subject key identifier:   18:E5:76:BE:74:78:2A:23:3F:72:31:0B:B0:DC:E0:1C:83:26:5F:9C
Certificate issuer:       /CN=185BC8F795FC60E163D641A01BAA510BF953C375
Certificate serial:       4828424C202E9A5F048A8BCB81738F61E9389B3E
Authority key identifier: 18:5B:C8:F7:95:FC:60:E1:63:D6:41:A0:1B:AA:51:0B:F9:53:C3:75
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/185BC8F795FC60E163D641A01BAA510BF953C375.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1135050512157114409/0/323430343a373234303a3a2f33332d3333203d3e203539303734.roa
Signing time:             Tue 08 Sep 2026 04:00:00 +0000
ROA not before:           Tue 08 Sep 2026 03:55:00 +0000
ROA not after:            Tue 07 Sep 2027 04:00:00 +0000
asID:                     59074
IP address blocks:        2404:7240::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1135050512157114409/0/185BC8F795FC60E163D641A01BAA510BF953C375.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1135050512157114409/0/185BC8F795FC60E163D641A01BAA510BF953C375.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/185BC8F795FC60E163D641A01BAA510BF953C375.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 13:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:28:42:4c:20:2e:9a:5f:04:8a:8b:cb:81:73:8f:61:e9:38:9b:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=185BC8F795FC60E163D641A01BAA510BF953C375
        Validity
            Not Before: Sep  8 03:55:00 2026 GMT
            Not After : Sep  7 04:00:00 2027 GMT
        Subject: CN=18E576BE74782A233F72310BB0DCE01C83265F9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fd:27:b1:5b:ff:0c:f6:1d:7d:ea:0c:ff:ba:
                    02:d6:64:05:df:9a:c8:f0:e9:9d:ec:f7:1b:9b:02:
                    85:d8:f6:0f:0c:de:b0:fd:82:27:3a:16:02:ed:24:
                    e7:29:93:59:bc:65:0e:b8:ec:41:6b:7a:d4:69:e7:
                    0b:4d:ff:b5:b1:dd:0a:64:14:5a:cc:a0:b1:e2:5d:
                    43:b4:00:b6:9a:72:2f:8c:4e:3b:e0:92:57:95:10:
                    4b:91:f3:7e:b7:d6:c1:ba:7f:2c:9b:32:50:d9:c9:
                    95:62:fd:9f:df:f7:7e:86:5a:59:fd:d5:8e:b6:82:
                    f0:4e:f1:94:61:98:69:4c:e3:f2:9b:cb:96:b1:ba:
                    9e:f7:83:30:eb:c4:d3:01:c3:25:b4:7b:a3:3e:a9:
                    c4:bd:d6:44:a7:2a:27:88:c7:ff:c1:de:3d:f8:8a:
                    6b:fc:7b:ef:36:9c:02:14:f8:b4:94:f9:60:40:b4:
                    4b:59:73:08:9c:f5:e9:3f:83:27:33:de:11:42:0b:
                    81:76:f6:27:fa:96:a2:06:ac:41:b3:2e:4e:17:d5:
                    a0:29:ac:9a:44:05:dc:8e:47:4a:d7:4c:82:2a:4b:
                    1e:62:43:a4:d0:9e:8e:f2:69:3f:fc:ca:30:36:2e:
                    fa:d2:0a:a9:8d:f7:6d:7e:5c:ee:a7:8c:fa:8c:b5:
                    a4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E5:76:BE:74:78:2A:23:3F:72:31:0B:B0:DC:E0:1C:83:26:5F:9C
            X509v3 Authority Key Identifier:
                keyid:18:5B:C8:F7:95:FC:60:E1:63:D6:41:A0:1B:AA:51:0B:F9:53:C3:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1135050512157114409/0/185BC8F795FC60E163D641A01BAA510BF953C375.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/185BC8F795FC60E163D641A01BAA510BF953C375.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1135050512157114409/0/323430343a373234303a3a2f33332d3333203d3e203539303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:7240::/33

    Signature Algorithm: sha256WithRSAEncryption
         4b:73:cb:ea:5a:37:ed:34:57:a8:41:f4:34:2c:1f:7e:0c:d7:
         32:60:c6:29:58:6b:c7:0d:49:4f:d9:06:4a:b7:cf:7f:77:3e:
         7d:ae:fd:6a:34:d0:81:2a:43:6d:9f:fe:73:ac:95:4a:7d:1c:
         c2:8a:5d:d2:fa:0b:11:c3:bc:73:72:3a:12:92:ba:be:22:93:
         38:9c:e5:ef:b0:41:52:85:7b:b1:e3:cf:3d:44:74:7a:f6:4f:
         06:27:60:74:e8:26:5a:73:52:6d:96:d6:f1:9f:64:59:dc:21:
         f9:6e:8b:dd:92:da:5a:a8:bd:e8:51:47:8e:e4:3f:78:0f:bd:
         34:59:c2:72:d0:a6:c9:8f:5e:8c:43:b8:a0:2f:91:0f:94:cc:
         fa:f6:aa:a6:ee:50:36:1c:98:ce:a8:87:6e:65:91:6e:ae:67:
         be:98:8e:2f:f0:85:39:75:67:7b:30:e3:58:b0:6a:b8:bc:31:
         8d:cb:6f:b6:e3:88:45:cc:44:04:17:48:a5:98:2a:cd:90:1c:
         da:19:c1:fe:3c:01:81:20:12:3b:a7:bc:8c:b3:00:82:1c:58:
         2c:5e:5c:8d:a2:42:e9:41:e5:c7:3f:ca:b1:12:c2:45:0a:d5:
         e8:76:e3:85:5e:cf:6b:a3:65:d8:6a:94:a1:73:57:b2:4a:b5:
         45:2e:4b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:23:22 2026 by rpki-client