Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133362e302f32322d3232203d3e203536303430.roa
File:                     3132312e34362e3133362e302f32322d3232203d3e203536303430.roa (raw, json)
Hash identifier:          vK6iY+3IBLr2j1f7syHYEeZIYaoB2KdjumiYmNfZ8hw=
Subject key identifier:   7E:58:36:0E:48:E8:AA:08:A7:B7:B6:CD:7E:59:69:BD:BC:6F:D6:EC
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       0B64D4C9D22E2EBE76D12B6CFC5180CA8552A503
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133362e302f32322d3232203d3e203536303430.roa
Signing time:             Thu 23 Apr 2026 08:01:31 +0000
ROA not before:           Thu 23 Apr 2026 07:56:31 +0000
ROA not after:            Thu 22 Apr 2027 08:01:31 +0000
asID:                     56040
IP address blocks:        121.46.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 06:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:64:d4:c9:d2:2e:2e:be:76:d1:2b:6c:fc:51:80:ca:85:52:a5:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 23 07:56:31 2026 GMT
            Not After : Apr 22 08:01:31 2027 GMT
        Subject: CN=7E58360E48E8AA08A7B7B6CD7E5969BDBC6FD6EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:00:a2:49:19:09:4c:27:0b:e4:cd:ec:ef:48:
                    42:df:66:5d:ac:7f:ee:85:0d:18:6d:d8:cd:84:a3:
                    a3:e5:1f:fd:8e:8c:db:27:b1:84:3a:be:95:e7:33:
                    d5:05:57:02:cf:53:5f:bd:03:f7:6d:1c:eb:b2:14:
                    56:6e:7f:07:7a:d7:7e:c8:ab:83:ac:3f:05:0c:ad:
                    18:01:31:c5:b0:53:a7:ac:50:a9:e7:5e:cf:a5:89:
                    55:b9:e6:01:9d:84:de:fb:b3:4f:cc:da:3c:38:52:
                    b2:14:d5:cb:e8:de:cb:4a:f7:ab:87:e9:0e:4d:26:
                    6b:96:eb:88:ea:85:a1:e7:b1:ff:ae:01:66:da:75:
                    24:19:42:ea:10:4e:cf:89:7a:5f:ed:a8:d4:95:51:
                    8b:ab:36:5e:e4:0d:47:1d:bb:41:7f:b6:90:d0:0b:
                    5f:2b:c2:10:51:0c:18:75:61:44:05:47:22:14:06:
                    bf:9f:6a:98:62:70:ec:8f:da:e1:fc:9f:25:88:50:
                    28:f2:64:a9:17:70:3c:46:da:09:92:b4:c9:c5:0c:
                    47:c5:5d:94:6f:a3:58:6b:4d:95:4c:17:b6:75:c9:
                    a1:d3:91:ec:37:c5:99:cf:7e:4d:5e:eb:3a:07:3a:
                    2f:d9:05:e4:ce:5c:61:05:82:c7:aa:78:55:be:9e:
                    0f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:58:36:0E:48:E8:AA:08:A7:B7:B6:CD:7E:59:69:BD:BC:6F:D6:EC
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133362e302f32322d3232203d3e203536303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:14:1f:38:b8:30:fc:be:58:be:a6:e9:1f:3f:06:a9:19:ea:
         2b:8c:38:2b:a8:b3:dc:cd:53:7a:28:3e:c7:7c:94:e1:5c:b8:
         f1:c8:dc:9f:75:15:49:66:62:75:c6:50:e1:8c:28:8f:3d:66:
         6f:aa:bb:b2:d6:73:c6:7f:fd:9f:a2:4b:ee:c0:06:30:0b:e5:
         ad:4e:ad:d5:e9:3f:9a:f8:20:60:f5:82:de:49:be:84:3d:cc:
         ff:a3:cd:93:9c:c4:26:ca:e6:c5:ec:20:d6:f8:5d:8b:21:2c:
         00:00:6c:d5:28:d9:2b:67:6d:04:4d:20:c6:1d:55:dd:01:46:
         3e:63:ef:dc:cb:34:fb:b9:36:d6:a0:f9:60:41:1c:87:d9:2e:
         dd:b4:13:01:42:10:04:76:b7:ba:0f:fe:99:45:c2:7f:58:d1:
         bc:0d:52:49:fa:6e:96:85:38:49:e2:f5:32:eb:fd:1f:a5:4e:
         c0:3d:22:75:49:20:7d:a0:5b:2c:1e:ee:3b:2c:e2:10:4f:bf:
         50:ea:08:6b:34:76:91:ba:26:6a:9f:9c:15:74:43:81:cf:37:
         fc:32:25:8f:9e:e8:d7:ed:7d:95:40:08:63:41:f3:9f:ef:11:
         40:6b:33:a7:65:a0:c4:78:ff:f4:4b:19:76:42:57:85:fb:06:
         2b:bc:93:85
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:23 2026 by rpki-client