Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e302e302f32322d3232203d3e203536303430.roa
File:                     3132312e34362e302e302f32322d3232203d3e203536303430.roa (raw, json)
Hash identifier:          EPwdcVQ/zeoQ/88RnjngzjKI6NLc/CxUdDTIRIHFlw8=
Subject key identifier:   16:65:6A:8F:03:61:D5:05:E1:AC:E3:4E:F6:D4:6D:39:41:AF:D8:F0
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       5E8567FE93095265016CD230F2C0504F58B11D32
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e302e302f32322d3232203d3e203536303430.roa
Signing time:             Tue 14 Apr 2026 03:57:48 +0000
ROA not before:           Tue 14 Apr 2026 03:52:48 +0000
ROA not after:            Tue 13 Apr 2027 03:57:48 +0000
asID:                     56040
IP address blocks:        121.46.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:85:67:fe:93:09:52:65:01:6c:d2:30:f2:c0:50:4f:58:b1:1d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 14 03:52:48 2026 GMT
            Not After : Apr 13 03:57:48 2027 GMT
        Subject: CN=16656A8F0361D505E1ACE34EF6D46D3941AFD8F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ac:02:4c:31:a7:c0:cf:c3:7a:04:07:9c:d7:
                    4c:96:78:23:8b:ec:e5:4b:c5:0d:9a:2d:6a:81:be:
                    18:6b:9c:e5:84:97:44:cf:b1:5a:bc:74:9e:85:b3:
                    a3:8b:3c:3e:be:93:81:32:76:de:ec:72:55:c6:8d:
                    2f:c3:c7:b0:f4:d5:82:13:14:b4:ea:e4:3a:88:08:
                    0c:f9:c9:e4:f2:5a:54:93:38:07:27:57:5c:e3:a4:
                    ff:7a:26:b5:7e:37:f2:7a:02:84:20:c5:51:93:43:
                    78:d9:77:b5:dd:37:e5:67:32:cb:1d:bb:89:c4:fb:
                    58:44:98:b2:ed:f9:b8:31:4d:4a:a6:ea:ea:90:8b:
                    06:55:b4:b9:5a:81:e8:61:2d:66:70:b7:8e:1a:f0:
                    78:b5:1a:28:42:50:b7:7e:ec:16:50:86:05:89:4d:
                    0e:d6:10:8c:2d:25:df:11:3f:3d:68:96:9c:77:aa:
                    b5:b3:09:50:07:eb:41:fe:0d:c8:2f:2d:7e:eb:aa:
                    01:ae:9b:92:de:68:2f:02:73:a8:a7:24:de:cc:bc:
                    3a:06:f2:e2:cc:96:44:29:04:c3:73:18:6f:e4:7a:
                    61:4a:a2:0c:fa:75:fb:aa:a5:3d:e0:92:b8:44:f9:
                    d2:75:a7:d5:32:50:bb:3b:d4:4c:e9:63:26:cf:62:
                    3b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:65:6A:8F:03:61:D5:05:E1:AC:E3:4E:F6:D4:6D:39:41:AF:D8:F0
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e302e302f32322d3232203d3e203536303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:b3:f9:91:4d:bf:51:3f:c0:b1:a8:7c:e6:64:c5:18:40:95:
         b4:d8:f1:6b:d6:86:f3:11:cb:6f:0a:ca:aa:9f:cf:32:af:e1:
         ba:67:5d:2a:25:10:34:e4:87:d0:5b:f3:7b:f8:d5:da:b0:04:
         49:b9:86:0e:2f:81:83:9f:e2:83:44:70:ee:85:fc:b7:ec:20:
         6b:06:11:95:9c:06:38:13:ce:8f:e0:87:c6:37:aa:ce:c2:8d:
         1a:4b:f1:cd:b9:88:0b:05:67:c0:1c:53:d3:52:83:1b:10:cf:
         be:73:4e:ba:3f:56:43:93:da:3e:76:9c:6d:8a:81:55:7a:47:
         ab:c1:de:10:be:ab:f1:05:93:db:34:ed:11:5a:8b:ec:23:7e:
         10:64:76:9c:5f:38:05:eb:4f:24:b0:49:f1:1a:39:1e:cc:f0:
         f9:0b:d3:41:c3:7b:84:c6:04:ee:24:40:71:54:66:c6:26:9c:
         50:17:fb:b9:5c:8e:93:23:f4:29:c7:e2:46:c5:36:07:76:8a:
         18:1f:61:37:b2:e2:d8:7a:0f:70:60:13:05:ca:09:ee:73:b0:
         f7:e8:7a:d9:50:68:af:f1:8b:8c:89:13:fa:2b:e9:4b:41:f1:
         d0:e6:b1:db:b2:fb:40:30:96:86:eb:4d:d7:4f:87:e1:88:f6:
         f8:b9:87:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:10:56 2026 by rpki-client