Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e342e302f32322d3232203d3e2034313334.roa
File:                     3132312e34362e342e302f32322d3232203d3e2034313334.roa (raw, json)
Hash identifier:          Xm1EI8MKZ8ViR2fJ5gXxj/eig6ZeQARM3lsLk6aivZU=
Subject key identifier:   66:AC:F4:8B:38:37:A8:FD:6B:8C:E0:A9:BC:1A:C1:61:41:66:11:FA
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       68889C43C7E1B5F2C1D77AE51BEC7FDC3A5D4A02
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e342e302f32322d3232203d3e2034313334.roa
Signing time:             Thu 16 Apr 2026 02:22:37 +0000
ROA not before:           Thu 16 Apr 2026 02:17:37 +0000
ROA not after:            Thu 15 Apr 2027 02:22:37 +0000
asID:                     4134
IP address blocks:        121.46.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:88:9c:43:c7:e1:b5:f2:c1:d7:7a:e5:1b:ec:7f:dc:3a:5d:4a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 16 02:17:37 2026 GMT
            Not After : Apr 15 02:22:37 2027 GMT
        Subject: CN=66ACF48B3837A8FD6B8CE0A9BC1AC161416611FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ae:9d:1b:b2:7c:d2:ca:43:d2:c6:7d:c2:99:
                    0f:db:9f:12:e4:f7:e6:20:e8:36:ef:e0:54:63:71:
                    0c:31:dc:8f:ee:ac:7d:48:e0:83:e5:93:60:1b:70:
                    0d:6c:b7:6e:ec:ba:8b:f5:ab:4d:54:aa:6f:35:67:
                    58:e2:bc:85:c1:5c:b2:02:79:e9:c9:68:a4:89:c8:
                    e4:ae:20:66:c6:f0:69:5d:21:07:d2:c7:4e:4b:cc:
                    c2:da:05:06:19:b0:6a:1a:88:88:f5:05:84:6f:5d:
                    9a:ea:c2:41:f4:1e:c7:3c:22:83:12:2a:f0:01:c1:
                    4a:98:f1:e5:31:0a:05:88:0a:8d:15:54:17:0c:d9:
                    3e:ce:75:dd:d3:dd:5e:5b:45:df:16:19:ac:99:e1:
                    4b:d2:ff:b2:41:61:4c:46:8a:d9:56:cc:f1:05:58:
                    d1:f4:da:a2:16:d6:5b:b8:0d:30:9c:91:36:17:e8:
                    de:b1:52:c7:8b:08:4b:e0:4c:9a:b6:ac:df:4b:50:
                    85:cc:9d:f9:bc:f6:d9:ba:64:85:2e:ba:53:82:8a:
                    a4:ca:c9:4e:bb:a1:5c:80:22:ed:db:ba:ba:dc:15:
                    54:d6:01:eb:48:a5:48:df:5b:ea:dd:27:c6:e5:1b:
                    5b:53:25:be:b8:b0:07:5e:d1:b6:ce:c2:00:33:b6:
                    17:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AC:F4:8B:38:37:A8:FD:6B:8C:E0:A9:BC:1A:C1:61:41:66:11:FA
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e342e302f32322d3232203d3e2034313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:85:78:db:7a:d6:44:78:4c:b8:e4:11:1b:c6:b0:51:80:22:
         30:e9:5c:60:60:a4:1a:6d:d1:ab:8e:13:86:f4:20:17:0e:b8:
         80:32:20:d8:ec:e2:35:c4:d3:79:34:30:7c:00:23:36:48:9d:
         c7:e7:71:36:e3:75:79:82:2d:bb:19:31:f5:53:cf:86:58:e5:
         c8:5f:1a:4b:ce:d2:c9:ce:02:ef:a4:27:77:ae:95:6d:15:aa:
         1b:05:09:ff:c0:2c:1a:0d:40:0a:88:0d:40:40:ed:a5:97:5c:
         f0:52:c8:cd:d9:cc:27:e2:3a:cf:47:c2:02:a4:4b:ab:af:e4:
         0f:95:04:8d:ea:76:9b:d9:4d:90:15:22:7d:82:b4:ac:ed:df:
         31:a6:39:b6:22:62:9e:89:9d:5e:47:6a:15:3d:17:21:8e:f6:
         ae:41:74:66:1f:90:bc:31:5f:81:55:ee:7c:4c:3b:96:42:68:
         38:a8:99:93:6f:e2:60:dd:63:d8:88:60:b9:3e:e8:4f:f9:74:
         43:cf:fd:be:cb:f8:94:f7:0c:a3:b7:da:de:b1:3b:4d:c6:6c:
         01:a3:b7:c8:c8:77:7f:52:5b:f5:fd:43:77:62:99:22:10:a9:
         4d:83:46:4a:1d:9f:75:d9:d3:b6:d0:20:27:b0:f3:0f:a0:87:
         13:63:e2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:34:15 2026 by rpki-client