Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e302e302f32322d3232203d3e20313335333931.roa
File:                     3132312e34362e302e302f32322d3232203d3e20313335333931.roa (raw, json)
Hash identifier:          YJ+1v5Z2WQXhTO8+VetKis9Pj7z+5B8caHbJF8H9//k=
Subject key identifier:   E6:58:14:59:45:85:37:58:B6:2C:A6:6C:A7:67:B7:90:02:66:AD:31
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       4BC5428D8500001DF39A72445C96AB7D31EEC5CD
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e302e302f32322d3232203d3e20313335333931.roa
Signing time:             Tue 14 Apr 2026 03:57:48 +0000
ROA not before:           Tue 14 Apr 2026 03:52:48 +0000
ROA not after:            Tue 13 Apr 2027 03:57:48 +0000
asID:                     135391
IP address blocks:        121.46.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:c5:42:8d:85:00:00:1d:f3:9a:72:44:5c:96:ab:7d:31:ee:c5:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 14 03:52:48 2026 GMT
            Not After : Apr 13 03:57:48 2027 GMT
        Subject: CN=E658145945853758B62CA66CA767B7900266AD31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6c:64:c3:39:19:cd:75:16:74:59:0c:2e:ba:
                    78:60:e2:50:d4:73:8e:bb:21:b4:27:e2:e4:c7:73:
                    8e:81:78:29:70:93:91:d4:dc:40:31:90:bb:da:ac:
                    cc:da:43:2c:19:84:8c:19:2c:e3:e0:5a:19:29:66:
                    0a:3a:9b:02:7e:97:63:a9:a0:7c:98:13:dc:e2:5c:
                    7a:2e:c4:27:02:0f:80:f2:62:bb:01:7b:4a:c7:d3:
                    84:97:81:d7:3e:b7:4a:96:9d:72:d3:3f:35:09:6a:
                    dc:21:9b:29:b6:18:d1:fa:8e:30:1e:0a:0d:44:8e:
                    d7:27:6e:c5:96:8b:26:6d:85:ae:e2:f3:e5:f0:1a:
                    96:9c:c1:bf:9b:0f:d1:f8:95:e9:8b:d6:8e:a6:29:
                    7f:66:2b:70:4d:07:2c:78:83:28:23:ee:15:a6:5e:
                    78:45:e3:fe:3f:6c:bb:89:3f:3b:92:4d:12:34:1d:
                    28:25:1c:2d:4b:f7:63:5e:f5:80:7a:26:3c:1a:9f:
                    be:22:8a:03:82:d6:64:e3:9e:0e:2e:d3:83:43:79:
                    f3:50:49:8a:00:28:34:74:c5:64:58:73:73:d3:08:
                    75:06:3a:a3:51:d5:91:62:2a:1c:7c:bf:2c:03:b5:
                    8b:75:fe:46:79:86:b4:f8:e6:55:67:06:0f:dd:2b:
                    af:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:58:14:59:45:85:37:58:B6:2C:A6:6C:A7:67:B7:90:02:66:AD:31
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e302e302f32322d3232203d3e20313335333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:e8:ee:77:f1:c2:39:c8:b9:5e:e5:00:67:da:b7:26:07:aa:
         b7:75:52:d6:26:41:5d:58:9f:8a:c4:63:32:5a:0c:58:b5:19:
         a5:59:99:fd:06:76:43:21:39:12:27:d3:6f:37:75:7f:5d:46:
         1c:1a:3f:dc:28:a2:92:bf:0e:bf:9e:60:54:5f:9f:53:77:e6:
         11:88:46:6f:13:1b:44:2a:24:7d:29:0d:c8:fb:5c:ae:f4:bb:
         5a:61:5e:a2:e1:f3:65:0f:e3:0c:86:73:08:35:7e:a5:50:58:
         0c:9e:8f:21:85:25:cf:84:68:31:86:12:2b:4e:16:e4:cc:5f:
         d3:5e:7d:9b:fe:c2:49:9b:6a:88:33:f5:ad:2e:f2:4c:e2:b8:
         55:a8:fa:c1:1e:2f:e3:1b:c0:85:66:ee:81:af:9c:23:f6:a5:
         60:d3:db:56:ff:ee:71:07:fb:63:45:dc:9b:1c:64:69:7b:d4:
         e5:55:f9:6c:0c:30:64:8b:26:55:21:c9:a1:8e:cc:9a:af:ec:
         15:07:56:29:85:e5:87:03:c3:4f:89:5a:94:67:e6:a5:7c:06:
         75:df:9d:f5:d4:01:f0:fc:eb:8e:8b:d6:4d:83:73:78:34:12:
         4f:50:59:95:43:d4:61:8a:b4:d7:c1:d4:e9:1b:9c:2f:18:f2:
         98:7d:ec:4a
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUS8VCjYUAAB3zmnJEXJarfTHuxc0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVD
MUE4NjlFNjAeFw0yNjA0MTQwMzUyNDhaFw0yNzA0MTMwMzU3NDhaMDMxMTAvBgNV
BAMTKEU2NTgxNDU5NDU4NTM3NThCNjJDQTY2Q0E3NjdCNzkwMDI2NkFEMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7bGTDORnNdRZ0WQwuunhg4lDU
c467IbQn4uTHc46BeClwk5HU3EAxkLvarMzaQywZhIwZLOPgWhkpZgo6mwJ+l2Op
oHyYE9ziXHouxCcCD4DyYrsBe0rH04SXgdc+t0qWnXLTPzUJatwhmym2GNH6jjAe
Cg1EjtcnbsWWiyZtha7i8+XwGpacwb+bD9H4lemL1o6mKX9mK3BNByx4gygj7hWm
XnhF4/4/bLuJPzuSTRI0HSglHC1L92Ne9YB6Jjwan74iigOC1mTjng4u04NDefNQ
SYoAKDR0xWRYc3PTCHUGOqNR1ZFiKhx8vywDtYt1/kZ5hrT45lVnBg/dK6+LAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU5lgUWUWFN1i2LKZsp2e3kAJmrTEwHwYDVR0j
BBgwFoAU4+DHdOOyvFh5DnSZg3pBVcGoaeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjI3NTMzMDc3NzM1MDE0Ni8wL0UzRTBDNzc0RTNCMkJDNTg3OTBFNzQ5OTgzN0E0
MTU1QzFBODY5RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVDMUE4NjlFNi5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2Mjc1MzMwNzc3MzUwMTQ2LzAvMzEzMjMxMmUzNDM2
MmUzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzNTMzMzkzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAnkuADANBgkqhkiG9w0BAQsFAAOCAQEAgOjud/HCOci5XuUAZ9q3Jgeqt3VS
1iZBXVifisRjMloMWLUZpVmZ/QZ2QyE5EifTbzd1f11GHBo/3Ciikr8Ov55gVF+f
U3fmEYhGbxMbRCokfSkNyPtcrvS7WmFeouHzZQ/jDIZzCDV+pVBYDJ6PIYUlz4Ro
MYYSK04W5Mxf0159m/7CSZtqiDP1rS7yTOK4Vaj6wR4v4xvAhWbuga+cI/alYNPb
Vv/ucQf7Y0XcmxxkaXvU5VX5bAwwZIsmVSHJoY7Mmq/sFQdWKYXlhwPDT4lalGfm
pXwGdd+d9dQB8PzrjovWTYNzeDQST1BZlUPUYYq018HU6RucLxjymH3sSg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:59:39 2026 by rpki-client