Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133362e302f32322d3232203d3e203538343636.roa
File:                     3132312e34362e3133362e302f32322d3232203d3e203538343636.roa (raw, json)
Hash identifier:          v8mvXci3BrbBDBOwGtLEw8J9fPGtbotCrxNbymI0ibY=
Subject key identifier:   D9:9A:C9:4D:13:09:36:91:A8:E2:9B:81:5D:01:79:8D:AE:20:95:07
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       7819CA7C392D9F7091C7BF5EB47F15CAB620620E
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133362e302f32322d3232203d3e203538343636.roa
Signing time:             Thu 23 Apr 2026 08:01:32 +0000
ROA not before:           Thu 23 Apr 2026 07:56:32 +0000
ROA not after:            Thu 22 Apr 2027 08:01:32 +0000
asID:                     58466
IP address blocks:        121.46.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 06:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:19:ca:7c:39:2d:9f:70:91:c7:bf:5e:b4:7f:15:ca:b6:20:62:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 23 07:56:32 2026 GMT
            Not After : Apr 22 08:01:32 2027 GMT
        Subject: CN=D99AC94D13093691A8E29B815D01798DAE209507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:41:ee:fb:df:26:90:60:fb:3d:ff:1d:70:c6:
                    7b:24:65:a9:c0:cf:6b:7c:df:8b:02:1e:c1:78:b1:
                    5a:a3:2f:3d:fe:1a:91:77:86:84:2f:f1:46:24:36:
                    00:49:3d:f0:4c:34:3f:b2:45:c4:6f:15:d8:48:47:
                    18:fc:2d:4c:a4:d1:ba:b4:a8:90:a3:c9:89:a1:d9:
                    47:0d:06:6d:6a:29:03:26:42:45:53:22:8f:31:13:
                    34:a3:6c:9e:e9:1b:16:83:ef:08:91:b7:d2:9d:77:
                    30:f8:da:43:7a:30:16:4b:f0:35:9c:cf:8e:11:07:
                    19:54:a8:2b:e3:c4:f5:be:20:cf:4f:b1:f0:37:67:
                    67:00:e4:6d:4e:c4:70:64:e0:78:5a:17:b8:7a:66:
                    4d:8a:da:89:07:ed:77:02:bd:53:18:6a:c6:ae:b0:
                    65:24:24:af:64:c8:96:a0:87:98:14:01:82:73:53:
                    61:82:36:50:bb:6d:11:19:e8:c0:f6:3e:b7:29:4f:
                    6d:61:b3:78:de:83:59:c9:bf:80:96:dd:ca:79:ab:
                    92:f0:76:f7:85:06:07:5b:8a:2b:b3:43:5c:d8:8c:
                    49:85:6d:a2:fa:b8:b4:3c:83:b9:94:f9:da:fc:8b:
                    60:c6:4d:91:86:73:23:99:7e:64:0d:8a:7b:35:ce:
                    bf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:9A:C9:4D:13:09:36:91:A8:E2:9B:81:5D:01:79:8D:AE:20:95:07
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133362e302f32322d3232203d3e203538343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:5d:b8:bd:a9:35:4a:60:ed:19:78:5e:2a:d8:d0:0c:c5:b4:
         ac:0b:d5:fd:80:b4:fb:5a:91:ee:a7:84:4e:c7:17:70:b6:60:
         0b:1a:f4:d6:2c:7a:3f:a4:40:13:70:d7:89:c6:9e:65:c5:d9:
         f0:fb:21:18:1e:c8:93:0e:7a:a6:af:5f:13:4e:42:a8:37:1d:
         20:6b:5b:16:c1:fb:6d:97:43:da:8a:ab:ba:f7:56:ae:fd:3d:
         04:8f:ab:dc:a6:4f:7a:0f:d6:3f:d3:be:d9:2c:04:da:d0:44:
         96:dc:06:97:2b:ca:58:02:17:c9:92:91:11:13:3f:c0:ce:2e:
         ad:0a:4b:f7:ef:96:a0:43:4e:5d:89:60:0b:16:8c:70:f6:a1:
         ca:54:57:9a:8a:9d:e2:75:44:03:9d:16:5d:7e:96:0e:75:9f:
         dc:73:f7:f8:4e:17:2c:fc:2d:5b:4a:ec:2e:8a:6e:c5:34:73:
         1f:66:02:45:d4:39:ea:3f:b8:7a:ad:e0:04:a0:a4:bc:90:a2:
         ed:f7:2e:a2:b9:00:5f:1f:84:cf:36:cf:95:fa:0a:8e:11:fe:
         eb:e8:37:55:e0:6a:7b:c1:28:45:57:78:41:9e:5e:df:58:e9:
         40:1e:ed:0c:8c:34:a9:66:86:39:62:d6:58:c4:4f:1e:64:cd:
         82:e7:87:aa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:23 2026 by rpki-client