Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e382e302f32322d3232203d3e20313335333931.roa
File:                     3132312e34362e382e302f32322d3232203d3e20313335333931.roa (raw, json)
Hash identifier:          e2wMPKcaCDy5pr5mj0tH53vkjh0Khlb94/Rw7W5cVxs=
Subject key identifier:   47:13:58:78:DD:07:65:45:7D:81:D9:65:46:46:13:5D:1F:A7:68:C7
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       540A925F6F5183983BC0789682595AFC1556E76D
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e382e302f32322d3232203d3e20313335333931.roa
Signing time:             Thu 16 Apr 2026 02:31:20 +0000
ROA not before:           Thu 16 Apr 2026 02:26:20 +0000
ROA not after:            Thu 15 Apr 2027 02:31:20 +0000
asID:                     135391
IP address blocks:        121.46.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:0a:92:5f:6f:51:83:98:3b:c0:78:96:82:59:5a:fc:15:56:e7:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 16 02:26:20 2026 GMT
            Not After : Apr 15 02:31:20 2027 GMT
        Subject: CN=47135878DD0765457D81D9654646135D1FA768C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:df:67:6f:c0:90:20:bd:e4:b5:e1:0d:90:f3:
                    4b:1f:14:76:e3:11:c0:24:68:45:7a:4d:b0:22:a3:
                    f1:4b:7d:6a:e0:08:7d:f3:c8:51:f3:7b:a1:86:af:
                    96:c8:85:3e:22:f1:87:c3:c5:8e:fd:d4:5f:48:fe:
                    6d:e1:98:b3:22:fa:fa:87:36:4c:1a:44:5e:53:52:
                    63:73:05:5a:11:78:98:21:67:8e:b1:cb:c0:07:ad:
                    35:fc:8c:69:bf:6e:d4:ac:be:9a:69:c8:ea:33:62:
                    a6:ec:4e:30:25:cb:8d:32:b9:a0:46:8d:3c:7a:4a:
                    af:1d:6d:59:14:50:c7:67:18:11:58:d0:2c:94:f6:
                    7e:5d:ce:ad:be:63:e9:bf:44:66:dd:62:c5:18:d6:
                    22:86:3c:ec:64:6b:0f:3a:ce:72:10:f5:f8:7a:9b:
                    b2:f7:11:7f:f7:b6:49:6b:e5:73:6f:7a:0c:fb:49:
                    97:f2:87:43:14:1b:2d:d2:a6:69:dc:c7:c0:04:05:
                    99:14:1c:70:67:af:bd:c1:26:d0:1d:a2:41:bb:ba:
                    44:b7:a5:30:71:8d:6c:26:36:63:8e:51:4f:48:4c:
                    73:2b:a0:8c:41:54:ec:d6:38:2d:35:00:70:c1:a2:
                    b0:ac:58:39:3c:c2:8c:74:d3:f8:d5:64:f6:24:1e:
                    e9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:13:58:78:DD:07:65:45:7D:81:D9:65:46:46:13:5D:1F:A7:68:C7
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e382e302f32322d3232203d3e20313335333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:96:3a:17:7b:41:64:36:7d:30:d9:45:56:6c:e5:d3:fc:c9:
         ef:5a:e2:11:80:a6:a3:07:d0:ec:13:c5:71:2c:08:de:7a:19:
         87:80:35:83:d2:fb:46:c6:5f:03:c6:3f:5a:a5:e2:86:32:fb:
         f9:9b:8f:ee:6d:e1:ea:c0:d6:4c:90:1b:51:2a:c4:db:c8:e5:
         06:0b:6a:da:da:19:f9:db:cd:d7:97:97:e4:92:23:eb:00:c0:
         d8:7f:f6:62:b0:5f:3a:76:3a:b6:0c:fb:3a:36:df:e9:de:26:
         43:f7:32:d3:ae:f8:f3:6b:13:99:3d:29:ff:88:df:a5:7a:58:
         9e:9c:9e:74:4d:0c:4c:46:b5:54:a3:eb:44:bd:b8:35:8a:d0:
         be:3b:99:79:a6:5b:a8:d0:03:a1:16:42:b3:ab:f0:a1:b8:e8:
         a5:3a:5d:7f:d5:76:1b:39:6f:7f:85:4c:30:8c:10:9a:a6:36:
         70:60:b7:bb:02:fd:de:54:e5:21:e5:3b:f7:a6:78:3d:5d:94:
         c2:32:99:8e:6c:c6:15:98:b2:f3:b7:cf:d5:68:8e:b3:30:8c:
         e8:07:1b:b2:ad:cd:b1:ca:bd:cd:5b:d4:8e:18:7c:53:1d:34:
         ed:09:0d:4c:b1:24:c8:a5:2a:47:12:82:36:73:f5:69:9b:21:
         94:b6:6b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:53:07 2026 by rpki-client