Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e382e302f32322d3232203d3e2034313334.roa
File:                     3132312e34362e382e302f32322d3232203d3e2034313334.roa (raw, json)
Hash identifier:          w7NMJbctlzWMiszsYbxoLyq7bbw2BzkkdlDDz8JkH7M=
Subject key identifier:   22:33:1E:D3:24:DE:4A:C0:A4:65:61:0E:17:63:8C:55:2E:EA:81:75
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       2E87D88DA832B31762B20380277A611E2EADBAAA
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e382e302f32322d3232203d3e2034313334.roa
Signing time:             Thu 16 Apr 2026 02:31:19 +0000
ROA not before:           Thu 16 Apr 2026 02:26:19 +0000
ROA not after:            Thu 15 Apr 2027 02:31:19 +0000
asID:                     4134
IP address blocks:        121.46.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:87:d8:8d:a8:32:b3:17:62:b2:03:80:27:7a:61:1e:2e:ad:ba:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 16 02:26:19 2026 GMT
            Not After : Apr 15 02:31:19 2027 GMT
        Subject: CN=22331ED324DE4AC0A465610E17638C552EEA8175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:11:12:87:e8:f7:88:b5:b1:97:7b:ae:98:ad:
                    20:ff:06:c2:33:d2:81:1d:5d:fd:fa:41:bd:ac:82:
                    9a:cd:47:32:76:25:94:db:04:4e:0e:08:6f:d3:37:
                    8e:28:12:90:dc:31:09:a0:25:eb:31:b9:c0:4f:96:
                    fc:af:67:72:4e:4d:23:78:1c:7e:e1:40:c2:0c:aa:
                    3e:72:3e:a0:d2:1d:5e:20:f8:34:9e:b4:e5:5b:14:
                    f5:8c:78:6f:2e:64:50:2a:5f:d4:c5:23:1a:67:04:
                    60:8d:6d:93:cb:2d:8a:2c:2d:6f:2d:e4:f6:3e:5e:
                    88:e3:06:b1:76:72:58:9c:c9:0a:cf:2d:17:01:1d:
                    12:8e:63:e6:1f:af:29:dc:89:e5:02:d0:4a:88:0b:
                    9d:a2:f1:cc:14:9d:84:3b:0e:ab:6b:57:b1:d2:11:
                    b5:c1:8b:9d:bd:2f:97:eb:b2:87:a9:61:63:25:2f:
                    43:9a:9f:a4:90:11:6f:b2:f7:f5:c8:fb:c2:bc:1d:
                    b4:f7:eb:74:42:7d:8a:b9:d9:76:7f:55:43:ab:0b:
                    40:d6:aa:f7:84:4b:85:7f:46:ff:4b:41:b8:b5:09:
                    b3:a2:5c:01:b6:a0:0f:b5:99:c5:97:34:92:d8:e8:
                    55:de:a3:33:6c:6f:24:61:f8:41:63:fa:ab:15:b9:
                    d5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:33:1E:D3:24:DE:4A:C0:A4:65:61:0E:17:63:8C:55:2E:EA:81:75
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e382e302f32322d3232203d3e2034313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:56:f1:cd:6b:68:fa:7a:a2:2e:8e:7b:f8:65:84:84:fc:65:
         e8:18:92:f6:4a:c8:8a:b3:ec:f6:f5:6b:72:8c:79:fc:62:ee:
         21:65:76:57:54:c1:1a:7a:88:13:00:09:b8:c1:74:48:55:6a:
         7d:97:22:00:b0:de:59:c9:29:41:b7:b2:51:94:67:6f:b3:1a:
         46:59:59:84:cb:df:88:2a:ef:6b:c1:07:7e:cd:c3:b5:1f:fe:
         fe:74:4b:c5:f7:1e:45:60:c0:2c:21:17:27:65:53:fd:0c:78:
         7c:2a:f7:e9:d0:de:7a:e7:dd:cc:7f:01:8c:a9:2b:a0:5a:5a:
         19:40:11:e0:a2:6c:fd:05:ce:61:78:81:09:74:12:5c:fb:ae:
         7b:a5:64:91:9a:68:50:d3:d0:17:49:34:bd:5f:25:25:02:db:
         49:7e:0a:e9:1f:03:60:60:b2:92:43:74:d9:a4:23:41:44:a5:
         50:07:c0:f2:68:01:71:5a:dd:21:9a:84:f3:d7:51:3b:1b:01:
         06:fa:0f:2a:46:8d:7a:09:99:86:11:01:0f:e0:71:3d:1c:d1:
         77:64:ae:d4:71:25:2b:ba:18:95:d2:02:ab:e6:12:08:33:de:
         4c:db:00:26:76:ef:fc:8b:4e:39:bd:2d:d8:98:e2:37:64:26:
         2d:21:ca:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:20:07 2026 by rpki-client