Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e31302e302f32332d3233203d3e20313334373634.roa
File:                     3132312e34362e31302e302f32332d3233203d3e20313334373634.roa (raw, json)
Hash identifier:          zCDbPPDzF1X49/NhfXymFWnf54g4a3GhNHMAIHGg8J4=
Subject key identifier:   9A:F1:F5:32:87:DF:28:37:14:F8:D8:88:46:FB:DF:2A:68:1E:55:82
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       1F276CA1F95C6A45356E5A022FBC86E22934B9AF
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e31302e302f32332d3233203d3e20313334373634.roa
Signing time:             Thu 16 Apr 2026 02:31:20 +0000
ROA not before:           Thu 16 Apr 2026 02:26:20 +0000
ROA not after:            Thu 15 Apr 2027 02:31:20 +0000
asID:                     134764
IP address blocks:        121.46.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:27:6c:a1:f9:5c:6a:45:35:6e:5a:02:2f:bc:86:e2:29:34:b9:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 16 02:26:20 2026 GMT
            Not After : Apr 15 02:31:20 2027 GMT
        Subject: CN=9AF1F53287DF283714F8D88846FBDF2A681E5582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c8:7e:55:7f:08:6b:b6:ce:75:95:d9:3e:20:
                    cc:fa:69:c9:8c:45:a3:f2:ff:13:ff:ae:8c:fd:e7:
                    e3:2b:d7:b5:ec:b6:bc:f0:93:1d:bd:35:c8:e4:31:
                    3a:a7:dc:88:cf:6d:e2:12:59:e4:9a:2b:d4:26:58:
                    79:45:77:4f:97:b2:cd:29:d1:ef:71:ab:c1:8c:61:
                    58:52:7f:33:47:be:f5:d7:d3:97:e1:33:fc:60:ad:
                    31:b9:a0:cd:f5:29:20:66:2e:58:30:5a:ca:e2:22:
                    b2:90:d3:17:01:88:b7:c0:38:21:bd:7e:3e:75:5a:
                    b9:8b:99:42:d7:26:40:92:e3:0b:ab:13:72:3e:d9:
                    b9:df:64:f9:1f:22:3f:60:e7:ad:cc:a5:5a:ce:43:
                    42:fe:0c:13:3e:2c:37:2e:fe:0d:7f:51:d5:38:a1:
                    f0:b7:68:12:ad:c9:4a:7e:ae:0a:45:ec:ec:98:4a:
                    b6:35:20:be:77:e0:c3:0f:77:75:4b:1f:56:b7:85:
                    8e:f8:99:94:89:f5:a3:1a:ff:22:d4:9b:10:78:1b:
                    20:ad:ad:8c:16:19:29:e3:c8:34:1d:ed:e9:b5:e9:
                    89:19:04:b6:ab:69:10:7e:13:89:12:4b:5e:86:bb:
                    2b:bd:b9:2a:c3:59:fc:b7:90:0a:6a:76:a6:9b:a2:
                    a7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F1:F5:32:87:DF:28:37:14:F8:D8:88:46:FB:DF:2A:68:1E:55:82
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e31302e302f32332d3233203d3e20313334373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:25:97:b3:87:12:6d:cb:97:5e:de:a8:49:9a:a3:e0:0a:dc:
         83:f5:5b:c9:a0:71:89:b3:31:31:f5:ec:f2:77:00:7c:02:49:
         37:a4:23:b8:37:33:78:77:7b:2b:0b:9c:3a:7f:70:a9:1f:8c:
         79:56:bd:fa:49:e1:7c:d9:fe:9a:18:6e:1b:3a:90:25:a8:85:
         e5:dd:d5:31:63:d9:b5:a6:8d:38:99:ec:5f:ed:9d:6e:5e:fe:
         63:bb:e2:a1:d0:3b:52:c5:bf:bd:cb:1d:28:32:a7:bc:2d:89:
         d3:77:ba:3e:f0:68:d5:c2:2c:09:a1:19:31:97:99:59:45:e0:
         d9:c0:4e:94:0c:da:46:2d:c8:a3:5e:5e:61:07:74:68:fe:e3:
         22:bc:c2:33:97:f1:96:9e:84:df:a7:5f:6a:03:1e:e8:d9:29:
         a0:5f:f3:ad:60:84:8b:f3:b0:28:d8:ad:b2:a0:9a:ae:32:7c:
         93:1a:fb:8c:42:16:58:33:06:09:c9:ff:ab:76:4c:34:cd:9e:
         3f:bd:12:52:63:eb:06:24:16:c4:a0:c0:eb:26:e8:f8:7e:b0:
         45:57:a5:fb:2e:37:e4:f7:0c:8b:ac:f0:3e:d8:83:c6:c0:91:
         51:a8:0e:fe:cb:8e:42:1c:94:6b:03:77:c8:bd:aa:4f:a3:7b:
         7f:12:59:60
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:50:41 2026 by rpki-client