Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3132382e302f32322d3232203d3e203536303430.roa
File:                     3132312e34362e3132382e302f32322d3232203d3e203536303430.roa (raw, json)
Hash identifier:          GE5eVNPm5I23GkzOKHek3EBVJNRniLT4oD2Eblaxun8=
Subject key identifier:   9F:51:5B:B9:41:A9:E3:D0:40:F8:13:64:EF:7F:EC:C3:E5:E2:46:97
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       128033AC0870F1C36D2753B2FFDE3634D5997A98
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3132382e302f32322d3232203d3e203536303430.roa
Signing time:             Fri 17 Apr 2026 09:14:02 +0000
ROA not before:           Fri 17 Apr 2026 09:09:02 +0000
ROA not after:            Fri 16 Apr 2027 09:14:02 +0000
asID:                     56040
IP address blocks:        121.46.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:80:33:ac:08:70:f1:c3:6d:27:53:b2:ff:de:36:34:d5:99:7a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 17 09:09:02 2026 GMT
            Not After : Apr 16 09:14:02 2027 GMT
        Subject: CN=9F515BB941A9E3D040F81364EF7FECC3E5E24697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:09:d0:9b:6a:ab:9d:6b:3b:3d:67:fd:d2:46:
                    8a:53:b9:2d:db:d1:ce:3d:2a:6f:f4:d8:a3:e7:9c:
                    ce:df:eb:d0:14:d1:4e:84:1e:95:38:54:b7:73:42:
                    8d:97:94:88:38:68:fd:15:c4:4d:e5:00:b0:b7:e5:
                    05:33:1a:27:94:93:34:ae:90:e1:12:68:fa:b3:7e:
                    9b:56:34:1f:8d:d0:a5:23:db:97:c7:e6:a9:96:a9:
                    5a:6b:10:2c:59:cd:1e:8b:b0:dd:1f:fd:36:23:51:
                    3a:fc:9b:a2:b6:dd:60:78:9e:84:af:32:53:a1:0c:
                    ef:9c:4c:b0:88:74:4f:9b:5b:f4:23:ac:8d:aa:02:
                    8f:6e:68:58:56:02:ce:92:6c:3e:fa:ff:27:91:50:
                    3c:b8:dc:24:f6:b4:09:75:52:38:98:36:7b:10:02:
                    06:77:f2:a0:2b:37:39:0d:f5:1d:44:e3:f8:1f:2c:
                    8b:cf:e6:cd:27:c8:41:53:48:51:9d:47:2c:be:66:
                    60:fb:d1:b2:92:eb:d1:e9:bf:c2:14:03:8a:f0:1b:
                    5f:92:e6:c6:b8:12:49:d0:ec:38:d6:2d:7b:e2:58:
                    75:cf:61:bb:9b:f4:db:59:c1:24:b4:ee:57:79:b5:
                    67:34:3a:e7:82:cd:81:8f:cb:79:bc:0b:ac:b6:da:
                    e7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:51:5B:B9:41:A9:E3:D0:40:F8:13:64:EF:7F:EC:C3:E5:E2:46:97
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3132382e302f32322d3232203d3e203536303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cc:d5:02:30:b0:52:40:bb:e3:6b:2a:fe:0b:c0:36:13:9c:da:
         f8:ea:42:0e:b9:d3:36:11:51:66:7c:c8:9e:b5:f1:35:e2:1d:
         1f:98:5d:5b:e5:9f:ed:d3:0b:c9:79:3c:69:d5:f4:5c:b8:fe:
         f3:38:53:d5:4d:32:b9:a2:ac:a9:3d:86:99:c8:8a:59:63:14:
         6c:c0:37:85:43:a9:15:f1:62:3a:f6:ed:63:f3:2f:40:d1:be:
         ba:6d:68:37:ce:2a:a5:94:5e:08:47:e5:21:9f:bf:bf:79:37:
         5a:92:27:7a:23:53:7d:c4:ca:1b:b2:13:00:d5:b0:f5:ea:1e:
         6b:7d:01:4e:1a:c2:58:b0:19:a7:aa:0f:a4:81:35:18:2d:dd:
         e4:32:28:a2:ff:8c:a8:f4:40:1b:d8:67:f6:de:4a:cb:54:70:
         24:69:47:07:56:f7:f5:a0:a0:93:ba:ac:49:9e:2c:cb:d2:1a:
         16:76:ef:85:0d:4b:1d:a7:97:c5:44:63:2e:e8:3a:4e:f4:d6:
         6d:6d:f8:d6:04:4a:c7:dd:33:72:26:70:bd:b6:12:c2:a4:12:
         0e:b9:03:54:c9:a1:fd:a1:26:24:a4:46:4d:0c:60:87:88:c6:
         61:27:fb:f8:7a:a0:7a:ad:fa:cf:71:01:4e:ce:a9:0c:01:69:
         17:95:75:0d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:59:26 2026 by rpki-client