Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e31362e302f32322d3232203d3e20313335333931.roa
File:                     3132312e34362e31362e302f32322d3232203d3e20313335333931.roa (raw, json)
Hash identifier:          DgN9+OxEdejp/glGk7In1UpVi4ZEJxQ7neg141sRdMk=
Subject key identifier:   C9:34:6B:5A:D6:33:F5:FE:C0:AE:69:E5:E9:F7:93:5D:74:83:A5:C1
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       3395410E566D3323B4D168C830667C4F062EC007
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e31362e302f32322d3232203d3e20313335333931.roa
Signing time:             Fri 17 Apr 2026 08:53:40 +0000
ROA not before:           Fri 17 Apr 2026 08:48:40 +0000
ROA not after:            Fri 16 Apr 2027 08:53:40 +0000
asID:                     135391
IP address blocks:        121.46.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:95:41:0e:56:6d:33:23:b4:d1:68:c8:30:66:7c:4f:06:2e:c0:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 17 08:48:40 2026 GMT
            Not After : Apr 16 08:53:40 2027 GMT
        Subject: CN=C9346B5AD633F5FEC0AE69E5E9F7935D7483A5C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1f:99:39:69:e8:25:17:b2:68:b4:cc:d5:3b:
                    e4:0f:37:41:c6:ea:1a:7a:48:2e:01:f5:4d:76:b3:
                    b3:48:30:f3:65:e8:60:00:32:f4:ef:81:c5:39:dd:
                    73:cc:bd:b3:e4:2a:9c:6e:e6:fb:31:c5:56:a8:04:
                    4d:80:78:15:3d:1f:de:d2:bc:29:82:6f:a1:a2:91:
                    5d:27:c3:dd:50:b8:24:78:ff:70:f9:3b:98:37:ad:
                    82:90:16:fa:f9:55:36:d8:0f:43:ee:6d:ff:14:75:
                    c4:19:02:f4:53:1c:02:e1:cc:9b:18:6e:fe:34:7e:
                    47:93:50:7d:9f:20:4f:77:94:32:93:1d:6c:4d:af:
                    64:1d:21:4d:2e:42:08:06:f0:a0:d7:55:b7:47:27:
                    81:83:1d:45:6b:f7:b8:73:84:41:8e:7b:f6:8e:69:
                    b8:82:98:bc:e1:04:59:ba:bc:76:07:5d:6c:f5:03:
                    c3:e5:26:af:8b:c3:ac:a8:28:69:f7:4e:63:19:36:
                    cd:c5:b8:00:f8:c1:be:71:74:9c:e5:e5:82:93:0b:
                    92:50:ac:1e:d3:8e:67:b3:65:9c:12:51:fd:86:7a:
                    99:47:61:3f:91:32:e2:62:68:e4:d5:48:76:07:5c:
                    f1:09:1c:4a:ce:35:2a:2b:bd:e8:b3:43:22:55:f5:
                    ac:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:34:6B:5A:D6:33:F5:FE:C0:AE:69:E5:E9:F7:93:5D:74:83:A5:C1
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e31362e302f32322d3232203d3e20313335333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:1e:a1:10:35:92:00:cf:6d:35:d0:10:ac:74:9a:2b:c3:62:
         fd:5e:13:99:a2:fe:22:3f:c7:ac:3b:96:b1:51:85:f2:b8:ab:
         61:57:39:c1:37:e6:4d:dd:2c:92:c7:a9:25:d0:c6:86:69:94:
         d3:b2:1e:a4:a9:dd:61:ee:2d:45:b4:30:ec:9a:70:2d:2b:76:
         83:63:85:9d:21:7e:17:e6:9c:79:7f:57:45:0b:5f:d2:9b:a4:
         d2:e8:c3:0c:dc:8b:2c:e6:63:81:33:0e:6d:e1:5c:d7:c9:d9:
         41:be:0c:f6:dd:e3:e3:9b:53:f1:24:f8:7c:47:f9:3e:3c:33:
         3e:fc:73:60:b5:92:92:92:c9:5b:f7:63:c8:1f:b5:96:6f:2e:
         0a:4b:3f:e0:d7:bb:2a:76:73:74:c6:e4:4c:01:cc:00:ec:bc:
         77:cc:72:d8:c4:18:37:f9:30:ca:54:50:63:07:47:09:56:4d:
         b3:0e:ac:59:af:3f:11:4f:c0:3f:25:89:04:7d:c9:19:c8:e2:
         62:1b:a0:41:64:63:0f:2a:c5:7b:ee:39:8b:bd:16:ef:75:3b:
         98:ca:8c:1c:35:1a:81:54:df:ba:11:03:e7:25:48:c2:09:56:
         6f:4a:8e:6e:51:10:c9:8d:7a:09:8c:6b:b5:c2:ed:90:e0:1a:
         b8:c8:96:f9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:43:36 2026 by rpki-client