Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133322e302f32332d3233203d3e20313335333931.roa
File:                     3132312e34362e3133322e302f32332d3233203d3e20313335333931.roa (raw, json)
Hash identifier:          L5iiqFRIH4XfeKEoQQJ3ga5vFtlihjenzdBRtq4aZBI=
Subject key identifier:   5C:EF:66:B6:84:1F:13:77:B1:CF:91:4D:4E:E9:E2:ED:92:58:CB:FC
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       3890BF6A3230649ACD4E71B4340EB61D9233F17D
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133322e302f32332d3233203d3e20313335333931.roa
Signing time:             Thu 23 Apr 2026 07:56:58 +0000
ROA not before:           Thu 23 Apr 2026 07:51:58 +0000
ROA not after:            Thu 22 Apr 2027 07:56:58 +0000
asID:                     135391
IP address blocks:        121.46.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 06:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:90:bf:6a:32:30:64:9a:cd:4e:71:b4:34:0e:b6:1d:92:33:f1:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 23 07:51:58 2026 GMT
            Not After : Apr 22 07:56:58 2027 GMT
        Subject: CN=5CEF66B6841F1377B1CF914D4EE9E2ED9258CBFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4a:77:94:65:46:c0:d9:67:03:f2:56:88:e3:
                    5a:50:d3:54:d2:60:a1:9a:02:4b:43:85:2d:5e:87:
                    49:05:48:de:22:8d:db:87:fd:98:56:9c:7f:35:86:
                    c6:5d:49:b3:3d:7c:55:24:eb:9b:d8:db:dd:5e:96:
                    ea:90:11:24:29:58:14:9c:da:46:be:36:7b:66:89:
                    19:b9:02:01:10:bd:f8:43:52:db:db:14:01:fa:04:
                    c8:c4:e1:61:1a:3e:9f:29:8f:6c:ef:9b:10:0c:f9:
                    7b:30:d1:a5:f3:a9:2a:80:ee:12:34:8d:0d:d5:96:
                    f4:8d:8e:ac:82:99:d7:bb:4d:3e:45:8c:c4:71:f1:
                    a4:85:cf:a3:6d:be:41:11:74:11:6e:a4:16:b6:d6:
                    27:b7:c5:07:fe:6a:84:d6:0c:56:42:a0:4e:80:df:
                    c3:af:31:63:30:b1:80:c8:b4:c2:ef:5f:65:93:d9:
                    f8:88:90:44:9b:e2:89:79:01:8b:99:c8:08:d8:70:
                    90:16:ba:5e:e8:bf:5b:b6:92:94:9f:27:2f:0d:2f:
                    79:c0:39:26:aa:ca:fc:79:bb:f7:45:95:0c:d3:a2:
                    cc:e5:95:04:5c:b5:4f:16:5e:92:07:ee:07:74:01:
                    3a:33:28:ba:89:32:77:f8:d4:9b:ba:60:16:ef:f8:
                    55:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:EF:66:B6:84:1F:13:77:B1:CF:91:4D:4E:E9:E2:ED:92:58:CB:FC
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133322e302f32332d3233203d3e20313335333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cf:be:62:03:ba:54:cc:4c:84:98:95:e5:4b:84:dc:b6:4c:5c:
         95:b3:a2:16:6f:6d:6d:2d:e3:ad:9e:96:2c:28:44:00:d1:be:
         99:c5:f8:40:b2:4e:e0:37:1a:2a:58:9d:0e:74:cd:1c:85:b6:
         84:ba:5a:88:62:45:d4:13:69:56:35:24:98:42:7a:ee:da:2d:
         5d:c7:62:e9:39:be:02:8b:df:5e:1e:43:96:70:80:44:55:a5:
         1a:d6:78:e0:30:38:1b:5a:f8:4d:f0:c5:24:56:a8:da:81:3e:
         7e:bd:0d:79:25:37:c4:57:4c:21:30:2e:d5:aa:77:75:d4:d1:
         90:bf:5f:6e:78:79:4c:31:07:5b:dc:a6:80:53:a8:2d:a0:60:
         eb:86:b1:84:60:d1:91:e4:02:e9:be:87:58:42:bd:d1:6d:0c:
         a3:e4:78:5e:31:64:0b:f3:82:1b:ba:3f:4d:ac:df:f0:4c:15:
         c2:69:38:fe:c5:a5:34:79:3c:53:bd:0a:a8:69:a5:0b:22:bf:
         dd:8b:50:8b:65:e3:c1:ba:84:29:91:de:57:0e:17:23:7b:6c:
         07:77:64:2f:82:81:8d:91:69:c4:a2:99:2b:ad:5e:ba:14:d8:
         14:dd:7e:9a:56:39:e8:db:04:e0:bc:08:3f:64:68:c0:eb:db:
         1a:8d:7c:69
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUOJC/ajIwZJrNTnG0NA62HZIz8X0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVD
MUE4NjlFNjAeFw0yNjA0MjMwNzUxNThaFw0yNzA0MjIwNzU2NThaMDMxMTAvBgNV
BAMTKDVDRUY2NkI2ODQxRjEzNzdCMUNGOTE0RDRFRTlFMkVEOTI1OENCRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgSneUZUbA2WcD8laI41pQ01TS
YKGaAktDhS1eh0kFSN4ijduH/ZhWnH81hsZdSbM9fFUk65vY291eluqQESQpWBSc
2ka+NntmiRm5AgEQvfhDUtvbFAH6BMjE4WEaPp8pj2zvmxAM+Xsw0aXzqSqA7hI0
jQ3VlvSNjqyCmde7TT5FjMRx8aSFz6NtvkERdBFupBa21ie3xQf+aoTWDFZCoE6A
38OvMWMwsYDItMLvX2WT2fiIkESb4ol5AYuZyAjYcJAWul7ov1u2kpSfJy8NL3nA
OSaqyvx5u/dFlQzToszllQRctU8WXpIH7gd0ATozKLqJMnf41Ju6YBbv+FU7AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUXO9mtoQfE3exz5FNTuni7ZJYy/wwHwYDVR0j
BBgwFoAU4+DHdOOyvFh5DnSZg3pBVcGoaeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjI3NTMzMDc3NzM1MDE0Ni8wL0UzRTBDNzc0RTNCMkJDNTg3OTBFNzQ5OTgzN0E0
MTU1QzFBODY5RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVDMUE4NjlFNi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwOTYyNzUzMzA3NzczNTAxNDYvMC8zMTMyMzEyZTM0
MzYyZTMxMzMzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzMzNTMzMzkzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAXkuhDANBgkqhkiG9w0BAQsFAAOCAQEAz75iA7pUzEyEmJXlS4Tc
tkxclbOiFm9tbS3jrZ6WLChEANG+mcX4QLJO4DcaKlidDnTNHIW2hLpaiGJF1BNp
VjUkmEJ67totXcdi6Tm+AovfXh5DlnCARFWlGtZ44DA4G1r4TfDFJFao2oE+fr0N
eSU3xFdMITAu1ap3ddTRkL9fbnh5TDEHW9ymgFOoLaBg64axhGDRkeQC6b6HWEK9
0W0Mo+R4XjFkC/OCG7o/Tazf8EwVwmk4/sWlNHk8U70KqGmlCyK/3YtQi2XjwbqE
KZHeVw4XI3tsB3dkL4KBjZFpxKKZK61euhTYFN1+mlY56NsE4LwIP2RowOvbGo18
aQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:21 2026 by rpki-client