Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e382e302f32322d3232203d3e203538343636.roa
File:                     3132312e34362e382e302f32322d3232203d3e203538343636.roa (raw, json)
Hash identifier:          bt3EIPIFAN+HIu2lmm4aJ71J5n4uevE/HeCdzAnnbEA=
Subject key identifier:   BF:13:A7:F5:A3:9E:EB:DA:AD:7B:64:DB:8F:D8:24:A8:D6:6E:E5:72
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       2A9814EFF2719BFCEFA27B194ED3461A8F9BF824
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e382e302f32322d3232203d3e203538343636.roa
Signing time:             Thu 16 Apr 2026 02:31:19 +0000
ROA not before:           Thu 16 Apr 2026 02:26:19 +0000
ROA not after:            Thu 15 Apr 2027 02:31:19 +0000
asID:                     58466
IP address blocks:        121.46.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:98:14:ef:f2:71:9b:fc:ef:a2:7b:19:4e:d3:46:1a:8f:9b:f8:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 16 02:26:19 2026 GMT
            Not After : Apr 15 02:31:19 2027 GMT
        Subject: CN=BF13A7F5A39EEBDAAD7B64DB8FD824A8D66EE572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:75:aa:c3:3d:d1:38:44:1d:23:f7:d2:6d:f6:
                    6e:b5:de:c7:b2:a7:48:34:5c:a9:74:14:b3:b6:ab:
                    27:54:bf:f6:80:ba:43:3a:37:b0:6c:96:b7:33:a9:
                    46:14:07:ad:35:75:8e:5e:e7:e7:16:65:f6:8c:f5:
                    30:a2:fb:eb:86:27:fc:1b:d4:2a:1e:fd:61:e9:d5:
                    b8:f1:27:db:aa:fe:22:64:ce:c5:0c:b2:1c:5d:fe:
                    0b:ba:94:bd:c0:d8:84:51:a5:b0:82:02:9a:e4:c8:
                    94:30:e2:94:c6:3b:e3:2d:f4:7b:05:35:44:02:f3:
                    c7:af:29:fa:c1:46:02:6e:a4:7e:ee:39:42:8d:cb:
                    fb:7c:92:d8:8e:80:97:81:9b:2e:43:8c:03:68:70:
                    8d:ae:b9:8e:ee:dc:38:81:ab:7b:48:1a:af:76:ba:
                    36:d5:cf:b5:c1:1f:b7:df:8d:66:e6:df:aa:bc:6a:
                    c8:73:97:d4:66:aa:4d:ea:69:5f:75:8f:23:0c:79:
                    b4:62:03:e6:36:42:c7:30:70:0f:a5:70:70:55:e6:
                    8d:ca:4a:09:5c:d2:82:56:9f:0d:57:43:18:45:f3:
                    76:d1:72:5a:bc:67:be:98:6e:f5:b4:fa:24:d3:af:
                    ff:c1:ac:10:a7:48:d3:e3:95:53:dd:6e:80:9c:b5:
                    2b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:13:A7:F5:A3:9E:EB:DA:AD:7B:64:DB:8F:D8:24:A8:D6:6E:E5:72
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e382e302f32322d3232203d3e203538343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:91:d5:7e:86:43:1f:cf:11:68:19:bc:47:ae:0f:b2:ce:c4:
         a7:21:a4:da:a6:6b:cc:51:97:1f:6c:20:0f:c0:a4:a4:3d:d6:
         3c:cd:c3:17:ba:0c:2d:40:4c:da:4c:27:04:bc:79:48:82:04:
         d5:62:0f:77:56:84:3b:d7:84:d3:10:c0:df:57:20:9d:9c:99:
         f4:37:76:dd:bf:6d:ce:a1:e5:d6:ad:1a:1c:00:57:28:76:f5:
         a5:64:c1:88:9c:f1:bb:d8:b9:c0:1d:11:d2:94:41:8a:2d:ea:
         68:5b:b1:ba:09:90:8b:1f:40:67:2c:63:b1:97:21:81:fe:a6:
         3f:ef:95:5b:a5:ba:4d:5e:ee:ab:ed:e9:32:8f:9f:65:e4:f7:
         a0:31:68:d4:8a:42:28:66:31:20:26:a4:f4:92:f1:9e:a1:83:
         62:11:e1:d1:8a:57:1a:16:03:07:a0:9c:0a:b2:f7:80:5f:75:
         4f:4e:47:fc:da:14:13:2a:ed:96:9c:98:c6:f6:34:fe:44:05:
         3e:39:c1:71:9e:c5:8c:9d:37:d1:d1:5a:5c:a6:dd:d2:39:18:
         6e:56:f2:8c:75:f2:d7:03:d7:c2:52:bf:90:2b:41:3d:9a:1e:
         72:62:86:67:22:60:e2:64:2f:0e:95:98:80:53:ef:3a:e3:ef:
         1a:ef:2a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:50:37 2026 by rpki-client