Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e342e302f32322d3232203d3e203538343636.roa
File:                     3132312e34362e342e302f32322d3232203d3e203538343636.roa (raw, json)
Hash identifier:          qLewtZF6I9oYMhChMBUpONInxSFpe1/n4ID0qILYee8=
Subject key identifier:   CC:45:35:F1:AA:72:A2:12:AD:2D:D7:40:03:DE:59:4B:50:7C:FB:2C
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       FEFCE069D07AAE2E0C0894012B91DEA9C4D202
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e342e302f32322d3232203d3e203538343636.roa
Signing time:             Thu 16 Apr 2026 02:22:37 +0000
ROA not before:           Thu 16 Apr 2026 02:17:37 +0000
ROA not after:            Thu 15 Apr 2027 02:22:37 +0000
asID:                     58466
IP address blocks:        121.46.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            fe:fc:e0:69:d0:7a:ae:2e:0c:08:94:01:2b:91:de:a9:c4:d2:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 16 02:17:37 2026 GMT
            Not After : Apr 15 02:22:37 2027 GMT
        Subject: CN=CC4535F1AA72A212AD2DD74003DE594B507CFB2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:62:7e:6d:10:60:90:d3:21:07:5b:ad:3b:66:
                    65:fc:82:a4:c2:cf:1c:b5:f0:ac:3d:8f:20:56:9c:
                    d3:2e:59:9a:73:cc:c1:68:0c:bb:14:e7:df:ac:c1:
                    27:a6:3f:a0:b6:a4:e2:eb:c9:d2:3a:fa:b5:5c:57:
                    31:a1:51:fa:11:a8:d1:ab:4f:3f:66:87:12:f0:05:
                    b5:ac:c6:07:f9:a0:17:0c:e1:ab:bf:ee:ab:00:f3:
                    ad:ee:e9:9d:28:31:e6:75:0f:5d:17:59:32:7f:29:
                    e7:98:49:a7:6b:12:0b:93:c1:b7:3b:5b:5d:f1:81:
                    a7:16:2e:cb:64:d0:b3:d5:2b:3d:e2:5e:1d:99:c8:
                    01:0c:6d:b1:d8:b2:f9:9c:60:92:60:a7:23:46:20:
                    5b:44:49:4a:b2:9a:13:14:b5:54:1a:c8:10:98:db:
                    09:21:dd:ff:2f:d2:08:7f:b9:16:a1:c8:26:10:21:
                    c4:c5:38:cf:c1:f1:f7:8a:66:c9:98:f3:51:05:d9:
                    b1:49:3c:9b:a6:9d:7b:f7:dc:4d:ba:b2:ba:ab:e6:
                    2f:18:5b:30:ae:5b:fd:52:1a:cb:a4:f4:a2:6c:61:
                    f2:1e:74:d0:45:c4:3c:f3:b1:2b:c1:61:4a:1c:e9:
                    9f:80:a3:a9:fe:17:f9:63:01:1d:fa:db:12:00:55:
                    09:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:45:35:F1:AA:72:A2:12:AD:2D:D7:40:03:DE:59:4B:50:7C:FB:2C
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e342e302f32322d3232203d3e203538343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:d6:67:43:97:28:be:d0:e6:68:54:9a:98:9f:78:41:c4:e0:
         91:74:cf:91:a7:c6:3d:64:36:ad:71:b9:8c:c8:a8:85:04:aa:
         db:1b:34:f0:9f:c1:4f:3c:a3:3e:89:88:d3:75:d7:c1:89:80:
         10:05:82:49:ae:9f:79:38:34:08:08:07:91:3c:9f:d9:af:3a:
         36:81:c0:c3:ca:eb:50:8c:76:7b:c2:c9:5a:97:3b:5a:49:4b:
         30:a3:15:9a:34:02:6e:54:87:28:f7:29:99:83:65:d9:f8:82:
         c2:19:60:f9:7e:c9:15:1f:56:18:46:f5:96:61:a6:9d:c5:ad:
         4e:5e:47:b9:1a:e9:45:12:83:08:b1:46:5e:fc:35:c2:ab:ab:
         b4:d0:c0:fe:9c:cc:d1:e1:1b:78:4c:7f:f4:99:68:ca:6d:b8:
         55:ef:c4:90:0d:04:2f:61:f6:d4:2f:e4:f6:e4:fb:de:69:e2:
         0b:af:16:f7:37:64:59:9a:e1:33:6b:69:cb:3b:34:92:c7:45:
         16:2c:f9:6c:1b:dd:b8:4d:a9:32:9d:d3:0a:b0:e8:cb:37:38:
         81:bf:bc:99:68:49:ef:7b:09:b9:90:92:62:7a:26:f3:6c:43:
         dc:b1:24:b3:e9:0a:e5:4f:e4:d4:96:ca:1b:6c:8b:65:eb:a9:
         52:b3:14:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:50:47 2026 by rpki-client