Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133362e302f32322d3232203d3e203338333730.roa
File:                     3132312e34362e3133362e302f32322d3232203d3e203338333730.roa (raw, json)
Hash identifier:          lyoWuIOWYMy8p6sStUH83C12M4x6T0ozuyd6G/wTN4I=
Subject key identifier:   1A:79:91:E7:C5:08:36:C6:61:93:94:BE:15:63:B8:42:7D:05:21:9D
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       7B72E1E171E7A05B8221738643B588187EFFC0D4
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133362e302f32322d3232203d3e203338333730.roa
Signing time:             Thu 23 Apr 2026 08:01:31 +0000
ROA not before:           Thu 23 Apr 2026 07:56:31 +0000
ROA not after:            Thu 22 Apr 2027 08:01:31 +0000
asID:                     38370
IP address blocks:        121.46.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 06:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:72:e1:e1:71:e7:a0:5b:82:21:73:86:43:b5:88:18:7e:ff:c0:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 23 07:56:31 2026 GMT
            Not After : Apr 22 08:01:31 2027 GMT
        Subject: CN=1A7991E7C50836C6619394BE1563B8427D05219D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:22:33:b0:0e:f3:67:11:c2:70:c4:7e:ff:53:
                    00:ca:fd:90:97:e7:19:80:29:03:53:73:ce:39:cb:
                    45:20:89:4b:61:c6:dc:9a:7d:d8:26:94:bd:a3:30:
                    d9:86:8f:c9:fe:5a:3d:06:b2:d2:22:19:cc:2f:f2:
                    7d:a8:4c:77:e3:d6:fb:4a:ae:cc:af:09:b8:9e:2e:
                    c6:97:d7:4b:6f:01:b1:0a:12:bb:a5:c8:65:4e:01:
                    d8:ec:7e:db:df:f1:32:fb:d0:df:56:dd:67:16:ad:
                    75:54:c6:29:e4:cb:83:6f:8b:1c:92:34:8d:39:f1:
                    28:93:e5:82:1b:c9:aa:c2:b5:4d:e5:4f:ba:f4:fd:
                    a6:bc:ae:74:79:70:32:77:6f:73:a8:bf:b8:59:f7:
                    c8:a4:38:45:ef:23:c4:27:78:6b:74:c8:4b:ea:6c:
                    1d:f2:4f:6e:9c:78:d5:d9:4d:7a:60:f4:5f:57:a6:
                    20:23:cf:80:37:cf:cf:b4:82:aa:f5:11:a1:d1:61:
                    26:6e:d3:4b:60:85:ba:48:1b:cb:d9:d1:14:21:ae:
                    c5:1c:6a:88:68:43:73:94:93:20:ea:41:50:3c:d9:
                    28:19:cc:d5:f6:54:f3:b6:f5:fe:7c:bf:15:f1:ee:
                    fc:dd:f1:b1:ae:12:27:05:45:87:2a:c0:97:b2:9e:
                    c8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:79:91:E7:C5:08:36:C6:61:93:94:BE:15:63:B8:42:7D:05:21:9D
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133362e302f32322d3232203d3e203338333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:9b:7d:e3:87:09:0a:18:e5:e2:50:9d:ae:8f:10:3e:28:09:
         a6:75:9a:87:28:e2:b4:b9:ed:c4:06:77:0c:3f:6d:10:a8:15:
         9f:a9:3a:29:19:c2:97:5f:73:0d:3e:82:ba:60:f9:7f:94:47:
         7e:27:44:82:17:40:2a:f0:94:7f:71:99:12:f6:c0:95:83:2e:
         45:22:83:bf:ce:f6:8d:7d:2a:6a:f7:d8:77:43:88:70:8a:8f:
         47:24:08:cb:df:d5:3e:e1:91:99:e4:d8:e1:c2:9b:c7:bf:a1:
         f1:23:75:21:09:2e:a6:d0:94:71:34:03:b5:69:04:ab:28:9c:
         6f:11:6f:01:05:5f:d2:e4:56:cf:61:44:6a:7f:72:71:e7:56:
         7c:ad:11:75:27:49:4e:42:0d:30:5b:9a:cd:0c:f9:b3:7e:c0:
         54:03:63:6b:9a:50:47:b6:3b:64:57:88:d8:ca:31:69:9f:90:
         da:f0:3b:6a:61:7d:09:f4:cc:b1:e4:c1:91:3a:7a:4b:6c:d2:
         39:64:40:a7:93:24:19:b3:64:10:43:38:8f:19:dc:8e:33:c6:
         13:b8:5e:a3:64:4e:ba:e5:6b:9b:d4:82:5d:ab:f2:f3:32:e8:
         bd:09:83:98:4b:46:b9:73:1a:b6:c1:44:b5:4e:3c:8b:8a:fd:
         d8:67:6d:18
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:20 2026 by rpki-client