Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e362e302f32332d3233203d3e20313334373634.roa
File:                     3132312e34362e362e302f32332d3233203d3e20313334373634.roa (raw, json)
Hash identifier:          4IrR0oeJWzj1AOuvkcEkIbCPwfFeMsqDnYjDQXnIfn0=
Subject key identifier:   74:51:F2:30:D0:C0:53:C6:8E:89:48:DB:A6:7D:41:18:D3:F5:8D:76
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       082EE3AF171D1A3E038100F5A5009106E2072E41
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e362e302f32332d3233203d3e20313334373634.roa
Signing time:             Thu 16 Apr 2026 02:22:37 +0000
ROA not before:           Thu 16 Apr 2026 02:17:37 +0000
ROA not after:            Thu 15 Apr 2027 02:22:37 +0000
asID:                     134764
IP address blocks:        121.46.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:2e:e3:af:17:1d:1a:3e:03:81:00:f5:a5:00:91:06:e2:07:2e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 16 02:17:37 2026 GMT
            Not After : Apr 15 02:22:37 2027 GMT
        Subject: CN=7451F230D0C053C68E8948DBA67D4118D3F58D76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:82:3a:58:bd:f9:5a:57:46:88:ac:e9:fa:51:
                    a0:d6:d9:2e:91:4b:47:1b:9b:f3:0b:44:a0:3e:e3:
                    6a:1d:9d:e4:00:93:dd:3c:d1:b1:5e:56:3c:82:f5:
                    ef:a5:85:38:10:26:a7:69:25:4f:50:fe:c5:83:35:
                    d7:e4:b2:56:6e:7e:d2:c9:de:bb:ad:c6:b4:55:5c:
                    39:80:58:ad:d5:a8:37:80:06:9d:a2:38:50:b2:d0:
                    d7:8d:0f:75:0c:dc:85:33:43:8f:d7:ed:9a:46:d6:
                    ef:f2:99:30:85:eb:3e:a4:8f:df:9a:ac:2d:c8:f3:
                    8a:02:cd:69:92:09:52:c9:a8:d6:1c:43:74:63:82:
                    ea:4e:fc:00:d1:d5:e7:54:65:92:27:93:00:4f:b2:
                    ad:48:55:0e:ad:ca:48:38:25:82:6e:3b:f5:96:32:
                    b2:1f:2b:0b:6e:fb:23:a1:96:1a:56:8d:2d:1d:b5:
                    95:e6:35:69:b0:2f:bf:59:13:8f:cd:33:a5:42:07:
                    93:11:ac:b4:0a:94:7e:3f:f4:72:09:8e:93:67:14:
                    c4:58:bb:b5:7a:3b:72:87:30:f0:12:d3:a1:d6:d1:
                    1a:c7:ac:f3:95:6a:ef:33:c1:7c:4b:fb:8b:55:75:
                    13:bc:ce:71:d1:aa:2e:d0:f3:b6:4b:a5:d7:4c:2d:
                    d9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:51:F2:30:D0:C0:53:C6:8E:89:48:DB:A6:7D:41:18:D3:F5:8D:76
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e362e302f32332d3233203d3e20313334373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:c9:23:7c:47:a1:f0:f4:cc:f8:e0:55:05:41:ce:b1:29:05:
         aa:c9:64:f0:37:08:28:2e:92:1c:89:b8:df:8b:76:c6:af:d9:
         cf:c3:a4:ed:e4:d3:f5:8e:c4:6a:2c:a4:d2:40:f0:44:e1:98:
         f1:d2:cc:3b:81:62:e5:d6:fe:c5:6a:52:16:11:42:82:9f:7a:
         28:e4:c7:6d:2e:3d:d9:56:a8:3e:b2:07:81:15:db:13:92:fc:
         0e:27:5d:d0:2a:a0:e1:d1:8f:70:c1:98:0f:50:7c:ac:47:c7:
         d5:41:41:24:78:85:03:74:3c:95:64:95:f1:7d:42:eb:01:7d:
         24:bd:d5:95:0e:21:6c:d5:9e:ca:78:fd:d9:a1:37:a3:43:1c:
         7b:16:34:7c:be:86:be:2f:7d:49:dd:7c:c6:78:37:25:80:66:
         7a:03:26:ac:94:b0:3b:5b:6f:66:c1:33:6f:40:40:35:03:34:
         84:62:e9:ba:f1:59:42:9e:01:f3:5a:b3:9f:4d:b7:1c:e1:3f:
         58:9f:9e:0e:59:bb:73:43:b7:72:5b:ac:80:85:e1:90:f6:c5:
         3e:d6:d9:fe:08:e9:51:d9:68:0f:b7:db:fd:f3:a7:1a:a3:c3:
         0a:f1:db:42:b0:f6:92:39:58:1a:5f:82:66:e2:6c:d3:b8:cf:
         01:c8:b0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:26:42 2026 by rpki-client