Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3132382e302f32322d3232203d3e20313335333931.roa
File:                     3132312e34362e3132382e302f32322d3232203d3e20313335333931.roa (raw, json)
Hash identifier:          rq7brAz4rBWak321Rzph/ngbnbuix66OrAoZRDrNj+Y=
Subject key identifier:   AE:AC:CD:44:17:C4:FD:76:19:83:7F:C8:21:42:27:12:0E:5D:E6:D8
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       13455A4A7B45C91049D87A5F05FEBEC73E123E99
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3132382e302f32322d3232203d3e20313335333931.roa
Signing time:             Fri 17 Apr 2026 09:14:02 +0000
ROA not before:           Fri 17 Apr 2026 09:09:02 +0000
ROA not after:            Fri 16 Apr 2027 09:14:02 +0000
asID:                     135391
IP address blocks:        121.46.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:45:5a:4a:7b:45:c9:10:49:d8:7a:5f:05:fe:be:c7:3e:12:3e:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 17 09:09:02 2026 GMT
            Not After : Apr 16 09:14:02 2027 GMT
        Subject: CN=AEACCD4417C4FD7619837FC8214227120E5DE6D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ee:fb:f1:0a:7a:f8:73:33:d6:4b:bc:9a:f8:
                    36:a0:95:65:42:68:b0:5f:22:c6:a5:60:f0:43:6b:
                    bd:61:e2:5e:00:a0:b4:29:b6:29:a5:27:95:65:e3:
                    1d:58:ba:24:6f:74:31:35:c3:a3:90:ba:b5:d1:39:
                    9f:c7:c5:01:a4:3b:9b:b8:5f:1e:7d:2c:ce:72:0c:
                    25:be:21:27:c4:5c:20:2d:2e:61:92:bd:e4:38:99:
                    87:93:3d:2b:21:e8:d7:ec:2b:c6:a4:be:17:d9:51:
                    4a:2c:ee:cd:9c:93:4e:22:a8:95:18:5c:15:eb:b3:
                    52:7d:87:cb:e0:68:65:47:b3:2e:68:d7:ca:80:0c:
                    d9:33:81:6c:c7:cd:eb:02:29:1f:07:97:54:c7:89:
                    84:4e:9e:ab:e2:48:be:99:5d:a0:50:ed:c6:b0:35:
                    01:d0:13:82:61:ad:ea:9c:02:c1:f1:4b:7f:65:7d:
                    e4:12:69:be:71:2c:42:ec:b8:99:91:5a:f1:5b:89:
                    0c:80:74:14:e8:5a:5e:7d:ba:ac:81:f6:d2:b7:0f:
                    6b:b8:d3:1d:74:92:93:a7:f0:47:a7:8b:a7:66:bd:
                    9e:b8:f3:ea:e2:a7:71:05:9f:64:58:5b:cc:88:ef:
                    9b:74:74:0f:b9:f9:da:fa:d5:63:58:49:c4:86:62:
                    82:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:AC:CD:44:17:C4:FD:76:19:83:7F:C8:21:42:27:12:0E:5D:E6:D8
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3132382e302f32322d3232203d3e20313335333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:1f:3a:75:71:5a:48:2c:4d:64:37:8d:06:f5:7f:fb:f1:33:
         49:83:05:f2:f0:ca:0b:2e:9c:70:22:78:ac:e6:cd:df:3a:8c:
         55:6a:c7:29:46:b4:93:93:f7:48:65:f3:2e:bd:0f:df:1f:a9:
         c8:e4:ec:b9:e9:34:e4:4d:54:f7:c8:ad:1b:3e:fe:43:1b:73:
         c6:3b:5a:df:4a:44:e3:be:5d:22:b4:61:be:7d:d7:b8:14:8a:
         96:95:43:ff:7a:57:2b:fc:2c:6e:62:83:8c:c6:12:db:0d:20:
         7b:9b:a9:92:61:09:ce:ac:30:37:ef:f6:48:bf:04:79:d9:84:
         af:bc:42:06:b9:27:57:13:61:f7:b0:08:a5:a6:5a:3c:9c:34:
         b4:2d:a9:3c:f8:b6:91:13:54:22:48:c3:71:ee:30:7e:bb:1f:
         05:70:77:d3:f1:91:6e:cf:bc:21:80:a9:f1:f4:1e:fa:f6:4a:
         59:c3:56:8c:5e:37:d1:51:55:2d:b1:ae:62:c5:bd:2e:63:6f:
         2d:76:16:44:ea:3e:bb:77:58:3e:f2:aa:06:3f:58:de:2a:1b:
         32:c9:a4:f4:bb:83:6c:21:b3:ea:55:c5:64:4e:5a:45:f0:1e:
         0f:41:b8:10:1c:51:02:c2:11:84:5c:17:e4:86:ee:99:23:49:
         b2:82:5c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:43:29 2026 by rpki-client