Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133322e302f32322d3232203d3e203338333730.roa
File:                     3132312e34362e3133322e302f32322d3232203d3e203338333730.roa (raw, json)
Hash identifier:          i5L1h/SCoLyLNkMTyDpU/wKj7/52oNhKrDiIzR8Hy+A=
Subject key identifier:   FF:3F:8C:BD:3C:2F:C3:A0:E8:63:69:B4:21:CD:FC:CE:82:25:59:8C
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       4FAF7922935B14A10B662C60F09E0925AB30246D
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133322e302f32322d3232203d3e203338333730.roa
Signing time:             Thu 23 Apr 2026 07:56:05 +0000
ROA not before:           Thu 23 Apr 2026 07:51:05 +0000
ROA not after:            Thu 22 Apr 2027 07:56:05 +0000
asID:                     38370
IP address blocks:        121.46.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 06:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:af:79:22:93:5b:14:a1:0b:66:2c:60:f0:9e:09:25:ab:30:24:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 23 07:51:05 2026 GMT
            Not After : Apr 22 07:56:05 2027 GMT
        Subject: CN=FF3F8CBD3C2FC3A0E86369B421CDFCCE8225598C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d0:c3:9a:4d:90:13:5f:e7:a0:e3:7e:86:1b:
                    f3:ce:af:de:da:4c:c2:20:67:dd:c5:bf:22:b8:9c:
                    8f:e4:76:c9:2b:8d:5e:0f:0e:f5:00:21:a9:f4:12:
                    aa:24:31:3d:a7:80:ba:66:e2:67:b4:37:e7:d9:53:
                    0b:fc:2d:e0:8c:b9:f6:4e:17:a4:61:d1:48:39:03:
                    80:c9:c7:f1:6c:3f:c9:f2:60:b2:c4:6e:ad:f7:d7:
                    af:b7:4d:14:e1:57:43:ba:c1:43:56:31:08:43:e8:
                    59:43:08:fc:a7:52:67:03:95:7a:d0:e2:86:25:2c:
                    e2:37:13:25:6a:9a:34:2d:53:d2:e0:f8:29:ea:e3:
                    ed:3c:2b:85:9d:1b:8c:58:f2:cc:26:50:3c:7b:d6:
                    ff:eb:de:87:3b:e4:a6:5d:a7:3d:6c:53:ec:dd:6f:
                    95:0a:0d:e5:d6:71:a4:23:28:fd:02:a1:cf:49:bd:
                    6f:df:6f:b2:af:42:a1:88:88:3b:c2:13:5a:b0:5c:
                    d8:06:8a:a8:66:7e:fb:ec:fd:be:9f:a1:d3:ea:26:
                    52:af:41:fa:fa:11:03:ed:ba:54:5e:94:13:cc:98:
                    08:51:be:f7:26:12:cb:e2:87:50:45:d5:76:89:70:
                    7a:0e:b6:ba:01:c0:f0:c2:10:93:b7:75:96:83:4d:
                    11:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:3F:8C:BD:3C:2F:C3:A0:E8:63:69:B4:21:CD:FC:CE:82:25:59:8C
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133322e302f32322d3232203d3e203338333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:9d:ec:07:38:2a:48:c8:b8:d4:7d:d6:6e:e4:91:1b:98:44:
         cf:20:8d:d0:00:29:52:cd:2a:7b:c3:28:8e:3a:a6:9c:4d:1b:
         02:95:aa:f2:9e:67:40:ac:3e:96:a2:8d:2b:de:f0:85:91:2d:
         ba:75:03:9c:b7:5b:14:98:ac:86:82:4c:8d:14:f1:6a:e4:24:
         69:65:51:3f:bf:90:5a:8d:b1:03:5d:0b:93:91:55:5d:e4:34:
         78:2e:10:ce:90:54:27:d4:08:8e:7d:62:32:85:c8:d2:a5:7a:
         e7:a1:dd:51:75:d4:2e:60:60:c8:5f:dc:1c:32:37:74:ef:29:
         44:08:e9:55:b3:a2:ca:b9:8b:1a:10:84:9d:7f:60:bc:5d:f0:
         5a:c8:12:ce:97:6b:fa:a1:73:3a:20:15:7c:17:68:a8:50:f8:
         58:77:0f:3b:34:4a:75:aa:12:17:ee:9a:95:f1:66:9a:ec:75:
         bf:fa:8b:78:95:c0:f5:12:d8:6d:9b:b8:e3:f5:a6:3c:5b:34:
         5b:96:cf:b8:21:12:9d:24:86:e8:f1:ae:3c:b4:da:70:1a:11:
         47:58:d2:d0:46:ea:eb:94:3c:1d:70:f0:ef:fb:bf:0f:54:25:
         65:5a:bb:78:a2:25:03:1a:da:20:42:81:67:4f:c6:c6:7f:1c:
         cb:d5:25:82
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:19 2026 by rpki-client