Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e342e302f32322d3232203d3e203536303430.roa
File:                     3132312e34362e342e302f32322d3232203d3e203536303430.roa (raw, json)
Hash identifier:          jME2F/6HoKLUDxlJMOR+CHdrVr5b6r7zHxn4G/6LyOM=
Subject key identifier:   58:06:00:F1:AA:DB:B8:57:9C:AE:64:07:ED:06:60:C2:A2:B3:AB:A2
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       2EB9679E3EC534BC9338C0C99685A892DD0E4B43
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e342e302f32322d3232203d3e203536303430.roa
Signing time:             Thu 16 Apr 2026 02:22:37 +0000
ROA not before:           Thu 16 Apr 2026 02:17:37 +0000
ROA not after:            Thu 15 Apr 2027 02:22:37 +0000
asID:                     56040
IP address blocks:        121.46.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b9:67:9e:3e:c5:34:bc:93:38:c0:c9:96:85:a8:92:dd:0e:4b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 16 02:17:37 2026 GMT
            Not After : Apr 15 02:22:37 2027 GMT
        Subject: CN=580600F1AADBB8579CAE6407ED0660C2A2B3ABA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8e:5d:65:82:1f:03:0c:a9:69:bc:84:f9:ea:
                    d4:df:50:02:f4:31:ee:42:1d:e1:af:69:58:c7:41:
                    c4:33:ad:bc:05:6e:2a:41:95:5d:b2:a0:74:53:fe:
                    b1:73:35:4e:cf:13:86:ac:d8:d4:7a:4b:7d:9a:65:
                    a9:96:64:c8:38:b2:15:6e:51:e9:bb:c4:19:19:5e:
                    fd:50:e0:53:aa:43:2f:87:60:e4:44:f7:c8:79:89:
                    e9:fd:12:b1:b9:5f:a6:47:87:e4:8c:98:86:71:fb:
                    e6:78:22:b1:c9:94:d8:9e:95:a8:f3:62:63:99:b1:
                    9a:80:f1:0f:0f:b4:62:33:9b:d0:16:8a:d5:0c:f6:
                    9d:1f:93:e2:1e:ab:64:44:33:99:d5:9a:a8:13:e0:
                    08:72:40:22:f6:eb:51:fd:89:4b:78:80:38:2e:82:
                    dd:d9:d4:ce:42:53:22:e8:3e:6a:3a:49:5e:85:bb:
                    7e:14:54:b0:eb:3b:a6:50:a2:ab:6d:bc:44:ca:36:
                    8e:4a:8b:a2:f8:6d:f6:8b:c4:33:23:6d:50:82:e7:
                    50:8e:71:48:8c:de:7a:67:37:34:56:79:51:4b:c2:
                    69:60:52:5d:9f:02:6a:bb:9b:6e:23:49:25:c1:3e:
                    f6:2e:3e:72:a8:6a:40:66:38:b7:ab:95:4f:07:ea:
                    07:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:06:00:F1:AA:DB:B8:57:9C:AE:64:07:ED:06:60:C2:A2:B3:AB:A2
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e342e302f32322d3232203d3e203536303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:7a:94:d6:68:97:35:b2:4d:c9:e1:64:f3:39:f2:9c:71:b8:
         44:18:72:fb:a9:93:85:cb:12:07:43:4c:eb:47:7f:a9:06:d8:
         5c:ec:af:69:b6:a3:70:28:ec:65:f0:28:27:7d:a2:b4:c1:64:
         6b:cf:49:cd:c3:16:bc:bd:3c:99:f9:e8:78:b1:1f:23:90:31:
         0d:43:13:52:a3:2b:cd:7f:3c:d8:1e:d7:56:e5:bb:43:88:0f:
         f4:e5:56:83:46:d2:21:13:82:17:21:49:01:c4:73:fb:e9:ae:
         93:f8:32:59:8a:63:04:c3:c7:d5:ad:15:ee:7b:49:33:fe:8a:
         2a:24:29:72:a4:10:d8:09:0c:e1:91:67:82:cb:9a:fc:3b:22:
         3e:f6:ab:d2:47:a4:c6:03:30:d1:04:38:8d:c7:e5:e8:25:ba:
         64:e9:fb:e2:25:ac:9d:e5:56:13:a6:c7:f3:d1:3b:3c:d9:01:
         8c:40:88:f1:b1:e4:ac:e3:1d:10:94:4a:bc:e5:b2:3b:3a:ca:
         84:22:24:2e:2e:e8:fe:70:f4:e7:af:2f:80:40:92:dc:a7:69:
         5d:d4:76:c8:57:57:2b:67:b2:f6:b1:b0:dc:94:cb:3b:a8:8e:
         d8:28:16:7d:91:37:7b:d9:b3:2d:af:53:2e:65:d6:06:5f:09:
         c8:bd:99:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:10:52 2026 by rpki-client