Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133382e302f32332d3233203d3e20313335333931.roa
File:                     3132312e34362e3133382e302f32332d3233203d3e20313335333931.roa (raw, json)
Hash identifier:          DWoMyAbUhkVYhjmxcAQOPZsVVWCyQIXlDwx4sTXPXnY=
Subject key identifier:   68:9D:64:C6:4D:53:67:D5:0A:C1:6F:AF:AB:F8:B6:D0:73:ED:EF:55
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       2CE22173DE3B8C96C9DBACDBF18196B93122A4AD
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133382e302f32332d3233203d3e20313335333931.roa
Signing time:             Thu 23 Apr 2026 08:01:31 +0000
ROA not before:           Thu 23 Apr 2026 07:56:31 +0000
ROA not after:            Thu 22 Apr 2027 08:01:31 +0000
asID:                     135391
IP address blocks:        121.46.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 06:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:e2:21:73:de:3b:8c:96:c9:db:ac:db:f1:81:96:b9:31:22:a4:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 23 07:56:31 2026 GMT
            Not After : Apr 22 08:01:31 2027 GMT
        Subject: CN=689D64C64D5367D50AC16FAFABF8B6D073EDEF55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:59:28:0e:f5:98:14:0a:23:30:73:c2:e4:a9:
                    a4:01:9c:fa:c8:c6:75:29:d6:a0:83:dc:8b:57:35:
                    6f:dd:c2:59:25:7f:a4:5e:e8:4c:3f:0a:cd:33:a7:
                    cd:31:72:54:cf:ad:83:31:6d:5f:36:18:ea:9c:70:
                    22:6d:2a:d8:3b:cf:a2:1d:8a:c5:e0:6f:fb:7c:45:
                    9a:60:98:42:f7:8d:0d:cf:cd:db:db:79:b2:e4:05:
                    11:59:a4:fa:32:7d:17:56:ce:f6:f2:94:43:c5:f5:
                    0e:0f:e8:6a:65:87:27:2e:4f:b9:91:d1:04:9c:cb:
                    f1:2f:c0:80:aa:8a:a8:9f:e1:e2:70:36:1b:b6:de:
                    01:0f:67:8f:11:c5:4f:5b:05:49:d2:98:81:55:ec:
                    e0:f3:9d:19:b1:67:10:57:a5:48:a7:7e:d2:60:28:
                    8d:fa:36:03:3c:81:cf:81:1a:58:a7:e5:4d:f4:62:
                    fb:29:f4:f0:f5:3f:2f:03:9f:01:4f:28:d7:8d:2a:
                    22:e5:ec:5b:19:83:46:05:1c:1a:f9:26:dd:9d:17:
                    97:f4:91:68:d1:72:52:27:77:fd:4a:dd:9c:fa:4b:
                    ec:e0:f6:34:42:37:c6:8c:0a:a9:d7:a2:53:15:b8:
                    33:d0:18:5b:9b:3f:fd:49:a6:8d:e6:0a:2d:f6:32:
                    43:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:9D:64:C6:4D:53:67:D5:0A:C1:6F:AF:AB:F8:B6:D0:73:ED:EF:55
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3133382e302f32332d3233203d3e20313335333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:2d:ac:c8:b2:a9:7a:b9:cc:fc:f0:92:98:54:b4:ff:33:f7:
         94:67:63:1b:d1:07:9c:59:5a:17:e7:88:8c:3a:3a:8e:47:25:
         c3:21:fb:56:00:0a:04:ab:ba:6d:04:64:fa:db:91:23:a6:54:
         ea:63:40:46:10:83:bc:7e:65:cf:e8:d3:9a:05:b2:97:43:fc:
         06:5a:04:5d:c4:43:b6:09:e3:cc:d1:d1:22:95:5f:70:04:a1:
         97:6d:f7:2a:75:64:67:e3:51:86:bf:04:69:12:b4:37:37:be:
         63:9d:eb:5f:04:51:c1:5f:83:56:dd:32:1f:5a:ab:39:65:3c:
         00:04:d3:cc:52:4d:b4:6d:d3:7e:5f:e1:fa:f2:83:34:ca:52:
         f0:a5:d3:dc:74:58:16:73:c3:5b:4b:06:fe:e7:52:af:13:5a:
         fd:85:52:a6:43:36:c8:27:0b:4d:7c:5d:9f:d7:4d:94:fd:b5:
         d0:85:61:e1:a4:16:73:54:6d:93:71:1e:1f:12:a4:eb:17:b3:
         14:50:1f:d4:6e:c0:99:58:a0:ce:ee:21:21:33:14:4d:fa:46:
         30:5b:b7:2e:33:79:4e:a3:6b:6f:57:af:96:4e:59:70:16:7b:
         8f:31:bf:a5:da:6d:db:9d:3e:b2:2a:24:a5:79:89:c4:79:83:
         43:05:f6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:22 2026 by rpki-client