Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3132382e302f32322d3232203d3e203538343636.roa
File:                     3132312e34362e3132382e302f32322d3232203d3e203538343636.roa (raw, json)
Hash identifier:          8LHprx0vZXubPYk5aKb99k7sXcOAB+sR/whhkIuXv7I=
Subject key identifier:   32:C4:56:FF:65:43:B8:F9:F9:34:7B:76:43:A0:9F:23:96:39:31:16
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       1F929832570AF357C3F74FAE6ACA37CA5E7DF2A3
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3132382e302f32322d3232203d3e203538343636.roa
Signing time:             Fri 17 Apr 2026 09:14:02 +0000
ROA not before:           Fri 17 Apr 2026 09:09:02 +0000
ROA not after:            Fri 16 Apr 2027 09:14:02 +0000
asID:                     58466
IP address blocks:        121.46.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:92:98:32:57:0a:f3:57:c3:f7:4f:ae:6a:ca:37:ca:5e:7d:f2:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 17 09:09:02 2026 GMT
            Not After : Apr 16 09:14:02 2027 GMT
        Subject: CN=32C456FF6543B8F9F9347B7643A09F2396393116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9f:c6:37:c6:5b:f6:a1:9b:07:e1:17:96:15:
                    4a:94:b3:46:2f:d9:ca:92:50:16:5f:b8:c4:0e:b7:
                    15:00:d9:85:54:e6:b1:2c:9a:63:13:4a:53:5a:7f:
                    fe:a6:83:93:de:85:26:fb:6b:35:ef:f7:05:97:df:
                    9c:eb:cd:61:a6:70:22:c7:33:3b:41:d1:31:4c:4f:
                    a4:be:ff:15:3c:64:40:cf:97:1f:bd:ee:8c:3e:cc:
                    4f:a1:a6:0f:b4:b4:e8:74:f7:78:a3:45:ff:a8:f0:
                    f7:b4:9f:13:fe:49:dd:e4:9c:40:f5:8f:71:84:7e:
                    66:f8:71:43:15:62:58:01:00:df:c0:f9:22:62:7b:
                    d3:3c:0d:94:94:94:e6:d6:a1:ed:58:6b:37:53:1d:
                    ca:40:e4:cf:6b:64:d3:d2:0f:15:17:f8:d4:cf:79:
                    71:c9:1d:74:5d:7c:e9:49:13:e4:3a:63:04:d6:9e:
                    80:6d:f5:f3:55:2a:5e:65:ad:dc:3e:b4:87:f8:b0:
                    e3:54:cb:df:44:d3:bd:97:17:a0:0f:46:5b:69:fa:
                    3e:23:27:8d:ca:97:c1:54:da:8f:7f:42:78:79:84:
                    de:17:73:10:32:30:aa:f2:b2:f3:79:6f:c5:fa:a0:
                    8c:50:31:79:e9:a2:da:e9:23:46:7e:e5:21:af:00:
                    cb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C4:56:FF:65:43:B8:F9:F9:34:7B:76:43:A0:9F:23:96:39:31:16
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3132382e302f32322d3232203d3e203538343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:39:70:db:b3:7d:f5:50:9b:84:b4:7b:bd:8f:ce:b9:b4:3b:
         40:cd:5e:d9:95:96:8a:30:4f:e8:54:47:6f:cb:bf:aa:d8:39:
         2a:83:f6:7c:34:65:dc:41:ae:6c:8d:f3:40:68:88:e9:05:1c:
         c1:47:35:f1:33:47:4b:fa:ec:4f:18:f0:4b:14:a8:fc:6d:64:
         3a:32:d9:38:62:6a:22:35:bf:3e:5c:a5:0e:ef:d3:07:35:6d:
         4f:8b:d8:b8:26:e9:42:9d:02:ba:44:9e:e9:14:da:0e:43:6f:
         96:4a:63:79:47:1a:11:59:fe:00:54:e1:43:fc:ad:49:1f:f0:
         99:b4:5d:88:e7:55:01:2b:4f:c4:ed:6e:1b:d9:c0:fb:80:12:
         3f:3b:08:6d:f4:f4:5b:6c:69:f5:d3:a7:c7:62:b3:9e:54:9f:
         71:5e:fd:9f:3d:f8:37:02:1e:c1:22:74:2f:90:9b:66:b7:87:
         c8:61:ce:39:0a:9d:13:63:53:24:7c:e3:e1:5d:0e:33:64:a8:
         f8:13:d7:5c:f1:70:0e:b6:5a:ba:8a:df:cd:a9:91:c9:be:db:
         ca:47:95:cc:e9:33:09:e5:52:ac:a4:d8:64:f3:a4:6f:fc:e9:
         c6:71:0d:c9:26:31:b2:b1:1d:46:a8:27:a2:b9:16:9f:87:83:
         5e:81:97:5a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:59:53 2026 by rpki-client