Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e31322e302f32322d3232203d3e203536303430.roa
File:                     3132312e34362e31322e302f32322d3232203d3e203536303430.roa (raw, json)
Hash identifier:          DNPbVax4DnEeVXcV3TsfllH0Zr9GG3hMIyqNSS2zpKg=
Subject key identifier:   2F:5D:C9:69:A0:CA:A3:7A:87:EC:4C:8E:69:92:6D:D4:B7:63:9B:77
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       5CBCAE6C059154925C9FA346C760BC9C874ACF72
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e31322e302f32322d3232203d3e203536303430.roa
Signing time:             Thu 16 Apr 2026 02:35:29 +0000
ROA not before:           Thu 16 Apr 2026 02:30:29 +0000
ROA not after:            Thu 15 Apr 2027 02:35:29 +0000
asID:                     56040
IP address blocks:        121.46.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:bc:ae:6c:05:91:54:92:5c:9f:a3:46:c7:60:bc:9c:87:4a:cf:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 16 02:30:29 2026 GMT
            Not After : Apr 15 02:35:29 2027 GMT
        Subject: CN=2F5DC969A0CAA37A87EC4C8E69926DD4B7639B77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:35:39:ca:22:dd:8e:7e:d3:0d:92:d6:44:08:
                    1d:d9:c4:ee:62:a1:3a:d5:0c:91:3e:ed:24:e4:86:
                    a1:d1:e6:8f:60:01:3a:47:15:b4:b3:49:a1:70:6c:
                    81:f8:9f:d7:e5:7d:4e:35:c9:c9:a7:94:5b:a7:b4:
                    e0:7d:eb:0c:fc:78:66:08:40:c3:86:20:db:61:66:
                    a2:74:60:82:cc:97:54:7c:bb:1d:38:0d:67:46:4c:
                    ef:c1:a3:e2:e9:61:13:31:ed:e4:63:1e:fa:9e:98:
                    ea:95:62:79:db:1f:27:2e:f6:c0:16:5c:d9:ba:0e:
                    ff:98:01:77:86:27:fe:63:10:21:5b:60:57:76:b9:
                    c8:aa:76:24:54:a9:0b:eb:c1:7e:7d:d3:cf:e4:64:
                    13:1e:6d:e9:9e:c9:20:c0:d0:c8:56:61:4a:96:c2:
                    67:e5:41:e3:be:5d:6f:3a:a3:a0:61:ea:49:f6:b8:
                    7f:ba:de:33:87:c6:28:5c:45:df:7a:f4:7f:6b:e3:
                    b4:4c:06:3c:98:81:b8:a2:9a:49:92:72:f3:63:83:
                    fd:8e:f7:22:f1:c2:d0:bc:06:27:ef:bb:bd:8a:a8:
                    5a:8d:72:16:38:24:61:dc:5a:59:66:1d:a2:7d:48:
                    ce:10:ea:f2:d7:e2:f8:4d:12:3e:41:5e:75:d8:52:
                    85:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:5D:C9:69:A0:CA:A3:7A:87:EC:4C:8E:69:92:6D:D4:B7:63:9B:77
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e31322e302f32322d3232203d3e203536303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:a9:0d:bd:d1:f0:d0:50:cb:6f:37:9e:ae:0d:1e:80:0b:a1:
         c5:1c:c6:7b:14:b3:6f:e7:94:68:a8:68:9b:1e:5b:ba:a7:fc:
         33:1f:6e:63:ca:ae:2a:68:1c:3b:da:f8:98:a1:d7:b6:5e:64:
         a3:6a:a6:1d:46:e6:5d:65:0d:9f:ee:7e:c3:f4:a5:11:a3:37:
         ec:08:dd:c8:12:2f:87:01:d8:64:37:0e:3b:78:cf:56:17:01:
         60:44:f2:34:f6:75:ae:3c:7a:33:4f:4a:65:fc:2b:6d:c8:fb:
         cf:16:ed:cd:db:7a:06:20:30:d1:60:21:fe:29:fc:dd:ce:6f:
         62:0d:63:c5:ff:87:e6:62:c8:f5:e7:1d:64:3f:df:4d:fe:ca:
         2a:b8:0e:4e:2b:be:69:52:a8:db:1d:18:3d:87:bb:c7:43:7f:
         f9:42:2a:d4:19:0d:c7:68:33:37:9f:8e:bb:5d:c4:9c:ba:08:
         3f:c6:8b:b9:69:ff:81:bb:86:d5:1e:6e:31:43:7e:90:22:5d:
         af:a0:90:d7:9e:a4:d2:80:e3:6f:99:a1:56:be:a4:50:4e:8f:
         5b:36:bf:65:7e:15:d5:cb:45:b3:1e:0a:97:78:64:81:7a:b0:
         98:21:a6:1d:ef:35:ef:e0:11:90:a8:d6:a8:ec:34:11:5a:84:
         a1:28:f5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:25:07 2026 by rpki-client