Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e302e302f32332d3233203d3e20313334373634.roa
File:                     3132312e34362e302e302f32332d3233203d3e20313334373634.roa (raw, json)
Hash identifier:          DqLtGj/ih1EpRdHWh8ztwtcYozRm4uT1Je4c7xw3eCc=
Subject key identifier:   ED:64:8B:85:B1:64:35:24:EB:CF:AE:11:03:56:CE:20:A3:46:99:3C
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       73686188DE4E4E376C2E19E440B63D35EAFDD998
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e302e302f32332d3233203d3e20313334373634.roa
Signing time:             Tue 14 Apr 2026 03:57:48 +0000
ROA not before:           Tue 14 Apr 2026 03:52:48 +0000
ROA not after:            Tue 13 Apr 2027 03:57:48 +0000
asID:                     134764
IP address blocks:        121.46.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:68:61:88:de:4e:4e:37:6c:2e:19:e4:40:b6:3d:35:ea:fd:d9:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 14 03:52:48 2026 GMT
            Not After : Apr 13 03:57:48 2027 GMT
        Subject: CN=ED648B85B1643524EBCFAE110356CE20A346993C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e3:70:57:91:ed:c8:0d:08:cf:cf:50:d5:5d:
                    35:01:54:c9:d2:66:47:cd:80:64:cb:fe:02:09:47:
                    e2:2a:17:fd:62:0e:05:8d:80:3d:37:a4:09:17:63:
                    b2:66:b7:fb:0b:a6:1c:d9:bf:dd:2a:c5:4b:4d:a6:
                    8d:38:e6:d5:17:eb:e8:aa:80:94:c1:44:eb:56:62:
                    14:ca:20:3c:e4:10:f1:e9:be:1b:fc:63:06:ff:08:
                    a3:a1:8f:6c:a5:2d:4d:97:b8:81:6a:26:fd:50:2f:
                    18:8d:98:e8:28:df:3b:2f:5f:02:dd:0f:1f:e5:d2:
                    cc:3b:9c:d7:67:26:1d:87:51:74:4d:fc:e1:d0:07:
                    d4:f9:bd:39:9e:09:1f:0f:28:08:1f:77:a0:01:f9:
                    17:ee:8f:1e:33:fd:bb:10:62:0e:11:c3:b8:f3:21:
                    95:43:be:73:29:46:0a:88:01:ee:c0:58:d1:c1:ef:
                    8e:17:0b:9e:ba:23:c1:25:7f:2e:90:d8:6b:c1:c1:
                    17:9b:92:c6:67:52:4c:77:5c:0f:14:d2:e7:21:2c:
                    23:01:f1:cb:86:f9:b2:0b:75:f1:81:f4:26:27:8c:
                    86:7f:f4:6f:ec:46:c1:07:94:c2:35:47:5a:e0:70:
                    ac:47:ac:7b:4b:7e:33:54:d7:63:a6:94:c3:03:dd:
                    4a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:64:8B:85:B1:64:35:24:EB:CF:AE:11:03:56:CE:20:A3:46:99:3C
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e302e302f32332d3233203d3e20313334373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:08:22:dd:bf:99:ee:14:20:22:de:c7:d6:c8:d3:89:e0:5d:
         c6:22:a7:fb:34:1f:f1:71:92:ca:c3:e8:8f:ac:81:d4:cf:1d:
         ab:6c:2a:e4:7a:0b:ea:bd:9f:fd:90:57:4c:03:7a:7e:dd:5b:
         09:bf:0f:68:38:79:41:16:ab:4d:28:3f:ae:8d:9a:17:a0:d3:
         f9:61:4d:15:99:37:6b:df:8d:79:5b:fd:f4:e0:5e:03:53:f2:
         f7:13:e2:99:e0:67:71:48:b9:a7:a1:c9:7c:c8:e0:18:d3:c8:
         b9:f9:b7:e5:b5:54:20:41:63:38:1e:64:ae:23:ce:40:01:ed:
         4a:74:eb:2d:e4:80:d0:ea:fe:df:32:91:76:17:93:5d:19:a0:
         27:f9:f8:2d:56:0c:2e:49:27:d3:0b:43:27:d9:9d:b8:ae:27:
         f0:2d:1b:77:af:df:a8:33:b5:54:38:81:6c:39:9b:9b:88:25:
         88:fd:58:f8:9a:91:f4:fb:27:48:64:44:78:b2:59:3d:e1:61:
         f6:c8:4f:4e:8d:f8:c6:a0:77:e0:8e:68:2e:64:18:34:f7:26:
         4b:ae:4f:2a:64:c4:9c:c8:08:80:c0:c2:42:58:ba:9b:cd:65:
         82:58:1e:4b:4d:01:ec:fc:d0:a3:91:c5:20:5d:6b:fa:82:7b:
         47:86:08:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:02 2026 by rpki-client