Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e31342e302f32332d3233203d3e20313334373634.roa
File:                     3132312e34362e31342e302f32332d3233203d3e20313334373634.roa (raw, json)
Hash identifier:          yUYmIM2npERKOgr+jpREPP39fGpTqehZKev0VYVuDPI=
Subject key identifier:   C0:91:BB:83:7B:4C:E5:65:3D:81:25:CD:3C:5B:95:B8:40:30:D8:4F
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       627B816F98815E63DB3663DBAC9E0E71875B65A8
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e31342e302f32332d3233203d3e20313334373634.roa
Signing time:             Thu 16 Apr 2026 02:35:29 +0000
ROA not before:           Thu 16 Apr 2026 02:30:29 +0000
ROA not after:            Thu 15 Apr 2027 02:35:29 +0000
asID:                     134764
IP address blocks:        121.46.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:7b:81:6f:98:81:5e:63:db:36:63:db:ac:9e:0e:71:87:5b:65:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 16 02:30:29 2026 GMT
            Not After : Apr 15 02:35:29 2027 GMT
        Subject: CN=C091BB837B4CE5653D8125CD3C5B95B84030D84F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:19:5e:ae:4a:76:d8:1d:e2:9c:90:e0:e2:71:
                    49:00:3e:9d:43:7c:7d:a7:c7:d0:b5:e9:27:5b:4f:
                    da:45:b2:6d:b4:91:b8:a0:fb:47:a0:e5:e7:5f:cf:
                    8b:35:41:eb:4d:63:8a:17:e1:35:d9:a9:57:01:16:
                    11:0c:a2:16:5b:6b:ce:a1:2a:39:7e:e2:9f:a8:ba:
                    9b:14:f0:a6:3c:a2:f4:ef:19:f2:fa:c3:6a:18:c2:
                    b9:96:f9:ca:e2:77:0a:c4:cb:94:3d:1f:58:6f:92:
                    2b:80:8d:54:67:6c:56:78:cb:0f:17:25:0b:70:d7:
                    d2:fe:a4:67:2f:b5:ae:dc:eb:56:81:93:44:8e:cf:
                    99:32:00:f1:c8:1d:f5:cb:f7:77:e3:e7:75:a7:9c:
                    02:56:9a:c4:d7:6a:95:48:81:db:4b:3c:1e:6d:9d:
                    03:9d:a3:ec:50:dc:79:20:04:aa:90:02:d8:70:fd:
                    77:21:7d:e2:3e:f6:96:dc:78:4a:e9:fe:7f:8d:c3:
                    93:ba:5c:c4:e5:75:ec:c5:a1:23:89:c6:6f:e0:22:
                    89:75:dd:ec:10:4b:f0:c7:5f:26:e9:c0:7f:53:f8:
                    b7:5b:28:22:99:f8:ab:92:bd:e0:14:1a:89:9a:7b:
                    ef:d5:20:dc:59:52:9a:f9:6a:e2:66:d1:a6:14:3b:
                    3e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:91:BB:83:7B:4C:E5:65:3D:81:25:CD:3C:5B:95:B8:40:30:D8:4F
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e31342e302f32332d3233203d3e20313334373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:0c:a7:69:9f:39:bd:1d:56:7f:e1:46:2d:e2:36:0a:a6:bc:
         27:43:38:a1:f3:30:e9:be:50:bd:46:af:1a:af:f6:5d:9e:54:
         d7:4b:89:62:8e:32:f1:65:66:56:5a:a1:99:9b:0f:03:ae:29:
         51:e6:60:96:f1:50:01:0a:9d:3e:7c:a2:46:71:49:2b:5a:e3:
         4b:28:97:ce:64:9b:2d:ac:47:b7:2d:1f:fe:1e:d3:57:1f:d7:
         39:a4:b9:dc:74:6f:16:6c:c5:b3:e1:28:13:0d:2e:12:a4:74:
         20:c5:7f:96:d5:53:2a:9b:cf:35:5e:f7:b4:f2:ea:67:a0:f7:
         85:ce:29:d1:be:a0:3f:93:61:3f:ab:9b:93:e5:89:89:11:60:
         66:eb:31:d9:ce:76:6c:2f:0f:c7:83:60:b9:68:d4:40:05:59:
         47:9d:db:94:a6:dd:ed:fe:5d:6f:94:b8:df:75:fd:e3:a6:b8:
         24:97:74:d2:e4:7a:3d:44:76:cc:98:df:d9:27:27:80:17:30:
         dc:c6:6a:a6:42:4e:68:fb:e2:fb:67:e5:ee:3b:ed:39:7c:36:
         5d:c2:38:97:bf:b2:98:ed:52:5e:8e:9a:18:7f:3c:45:39:24:
         3c:40:a5:2f:dc:a1:1b:3d:8d:cd:78:67:eb:d0:0a:00:2a:7c:
         44:0f:57:df
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUYnuBb5iBXmPbNmPbrJ4OcYdbZagwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVD
MUE4NjlFNjAeFw0yNjA0MTYwMjMwMjlaFw0yNzA0MTUwMjM1MjlaMDMxMTAvBgNV
BAMTKEMwOTFCQjgzN0I0Q0U1NjUzRDgxMjVDRDNDNUI5NUI4NDAzMEQ4NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdGV6uSnbYHeKckODicUkAPp1D
fH2nx9C16SdbT9pFsm20kbig+0eg5edfz4s1QetNY4oX4TXZqVcBFhEMohZba86h
Kjl+4p+oupsU8KY8ovTvGfL6w2oYwrmW+cridwrEy5Q9H1hvkiuAjVRnbFZ4yw8X
JQtw19L+pGcvta7c61aBk0SOz5kyAPHIHfXL93fj53WnnAJWmsTXapVIgdtLPB5t
nQOdo+xQ3HkgBKqQAthw/XchfeI+9pbceErp/n+Nw5O6XMTldezFoSOJxm/gIol1
3ewQS/DHXybpwH9T+LdbKCKZ+KuSveAUGomae+/VINxZUpr5auJm0aYUOz7DAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUwJG7g3tM5WU9gSXNPFuVuEAw2E8wHwYDVR0j
BBgwFoAU4+DHdOOyvFh5DnSZg3pBVcGoaeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjI3NTMzMDc3NzM1MDE0Ni8wL0UzRTBDNzc0RTNCMkJDNTg3OTBFNzQ5OTgzN0E0
MTU1QzFBODY5RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVDMUE4NjlFNi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NjI3NTMzMDc3NzM1MDE0Ni8wLzMxMzIzMTJlMzQz
NjJlMzEzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzMzNDM3MzYzNC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAXkuDjANBgkqhkiG9w0BAQsFAAOCAQEAtgynaZ85vR1Wf+FGLeI2Cqa8
J0M4ofMw6b5QvUavGq/2XZ5U10uJYo4y8WVmVlqhmZsPA64pUeZglvFQAQqdPnyi
RnFJK1rjSyiXzmSbLaxHty0f/h7TVx/XOaS53HRvFmzFs+EoEw0uEqR0IMV/ltVT
KpvPNV73tPLqZ6D3hc4p0b6gP5NhP6ubk+WJiRFgZusx2c52bC8Px4NguWjUQAVZ
R53blKbd7f5db5S433X946a4JJd00uR6PUR2zJjf2ScngBcw3MZqpkJOaPvi+2fl
7jvtOXw2XcI4l7+ymO1SXo6aGH88RTkkPEClL9yhGz2NzXhn69AKACp8RA9X3w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:50:02 2026 by rpki-client