Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134302e302f32322d3232203d3e203338333730.roa
File:                     3132312e34362e3134302e302f32322d3232203d3e203338333730.roa (raw, json)
Hash identifier:          loZA/kBrOyBcrH//2hz0W6AU7YLl7J3Z1iAynog+SfM=
Subject key identifier:   58:2D:89:5B:E4:27:A9:66:10:2A:0A:20:64:E2:AF:04:16:D5:73:E1
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       01E06ACBEA12A382D88C08FBB2FFFDBED1B3BB0A
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134302e302f32322d3232203d3e203338333730.roa
Signing time:             Thu 23 Apr 2026 08:09:20 +0000
ROA not before:           Thu 23 Apr 2026 08:04:20 +0000
ROA not after:            Thu 22 Apr 2027 08:09:20 +0000
asID:                     38370
IP address blocks:        121.46.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 06:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e0:6a:cb:ea:12:a3:82:d8:8c:08:fb:b2:ff:fd:be:d1:b3:bb:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 23 08:04:20 2026 GMT
            Not After : Apr 22 08:09:20 2027 GMT
        Subject: CN=582D895BE427A966102A0A2064E2AF0416D573E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4c:2a:6d:2a:0a:61:fe:14:f4:76:aa:d3:b9:
                    c1:a6:9d:f3:fc:f6:a4:86:0d:3a:02:96:64:ff:3f:
                    db:d9:35:af:9d:8d:90:a4:2e:cd:7c:0d:ac:44:a5:
                    a2:66:15:bf:45:c6:19:9f:c3:41:86:4b:3c:06:d9:
                    3f:38:85:42:38:f2:9a:91:69:ed:f3:77:e5:fb:46:
                    a0:f9:e8:ef:3d:74:47:56:9c:32:8a:47:37:17:fd:
                    62:4d:81:e4:e7:f8:2a:91:94:72:19:ae:2d:80:d8:
                    ea:36:6c:3f:7d:de:7c:d0:ff:a8:07:b5:04:8f:bd:
                    ce:1d:f8:1f:e6:06:8c:7f:05:8f:0d:7e:48:66:f6:
                    27:c0:aa:9b:a8:e7:6b:ac:d7:f0:6b:07:42:2b:62:
                    7c:76:fe:a2:40:4b:ae:bd:7a:a1:c1:63:82:6d:92:
                    df:67:05:82:96:c4:85:29:8d:ea:4a:ae:3b:d6:ab:
                    95:57:d9:df:fc:a7:cd:ea:55:73:9f:54:9e:d9:4d:
                    08:d5:28:d7:60:47:d2:dc:e1:57:27:9b:eb:c5:48:
                    da:72:4a:25:d2:d2:aa:41:37:d6:88:a8:b3:96:e8:
                    cb:3c:54:46:7e:3d:8c:8f:99:53:6c:78:88:d4:5f:
                    46:95:f1:eb:24:6c:c2:af:9b:77:f5:04:0b:c2:e6:
                    e6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2D:89:5B:E4:27:A9:66:10:2A:0A:20:64:E2:AF:04:16:D5:73:E1
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134302e302f32322d3232203d3e203338333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         dc:6a:29:5d:cb:f6:8c:fc:4d:df:11:27:80:ca:dc:fe:29:92:
         18:16:69:1b:8d:16:3f:df:a7:8d:bb:a2:0c:05:33:36:32:2c:
         1b:69:c5:c0:5a:2b:72:35:63:b1:44:8a:68:d5:bb:3e:8b:ce:
         c6:e9:f0:92:29:d7:a7:9f:d0:44:f8:c2:55:06:20:9b:42:e8:
         8c:b3:94:08:31:10:08:7e:3f:ca:6f:0e:4e:85:ea:fa:da:86:
         b3:68:9e:b0:f9:e5:1f:ec:f4:b6:eb:d1:6d:5d:7b:81:9a:40:
         19:8e:6c:af:14:52:5d:cf:d7:9e:f2:2b:8c:3d:6f:fc:5e:ec:
         ec:77:8a:e7:43:90:21:35:7d:48:8b:1a:0a:13:e1:9c:18:07:
         42:78:2b:e7:71:d3:af:63:c0:bb:6f:17:57:7a:29:e4:c2:60:
         0c:29:f4:c3:53:66:a1:25:33:20:76:2e:c2:17:ce:26:7b:2e:
         d6:fe:b9:14:c0:15:03:94:d4:1e:97:7f:34:23:94:0a:07:6d:
         88:8c:09:fe:17:a5:42:03:e3:01:07:99:76:c9:92:e7:2a:c4:
         d1:1c:6c:e3:af:3e:98:8f:eb:f7:ae:d2:37:d7:78:fd:12:67:
         e6:37:f8:71:b2:0c:40:97:3e:39:78:b1:46:f6:70:ee:11:23:
         ee:77:12:e2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:19 2026 by rpki-client