Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134302e302f32322d3232203d3e2034313334.roa
File:                     3132312e34362e3134302e302f32322d3232203d3e2034313334.roa (raw, json)
Hash identifier:          +PLVTq7avu9c9ROBcOqEpIpJAqg5WDIFZVKdu+5fK5M=
Subject key identifier:   E8:8C:2A:21:86:CA:48:32:8E:B4:AA:4C:76:57:9F:AF:9A:2B:03:CB
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       789F57B9ACCF0E20767C44FF4BE069DB673366E4
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134302e302f32322d3232203d3e2034313334.roa
Signing time:             Thu 23 Apr 2026 08:09:21 +0000
ROA not before:           Thu 23 Apr 2026 08:04:21 +0000
ROA not after:            Thu 22 Apr 2027 08:09:21 +0000
asID:                     4134
IP address blocks:        121.46.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 06:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:9f:57:b9:ac:cf:0e:20:76:7c:44:ff:4b:e0:69:db:67:33:66:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 23 08:04:21 2026 GMT
            Not After : Apr 22 08:09:21 2027 GMT
        Subject: CN=E88C2A2186CA48328EB4AA4C76579FAF9A2B03CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:73:31:b4:ab:68:a0:89:e9:23:34:7b:da:18:
                    f9:65:5e:57:cd:3a:90:d3:88:4d:b6:31:db:47:e7:
                    94:22:db:5c:d2:b0:31:15:37:bc:39:7e:c7:d8:9d:
                    39:8b:e2:42:00:55:40:7d:39:e2:ba:ac:ee:b6:d7:
                    43:19:3c:cc:be:93:0d:e7:6c:f3:29:5c:78:8b:f2:
                    e3:7a:50:6c:29:3c:53:46:a6:70:dc:1f:86:7f:84:
                    af:4e:2d:5b:e6:9e:4e:28:2f:7b:2c:80:16:40:06:
                    7e:ea:36:13:55:c6:85:28:bc:11:cf:a0:84:af:ab:
                    9c:cc:37:74:66:0e:7f:0e:86:7b:71:3b:a7:80:a8:
                    37:0a:bc:13:27:8f:a7:09:e8:79:96:bf:49:7f:41:
                    bc:e4:32:00:fd:0f:17:ab:66:95:eb:6c:11:29:07:
                    12:67:06:94:54:dd:07:95:db:89:8c:d6:d1:36:c0:
                    61:bb:02:e3:9d:1e:eb:29:4a:e0:77:1e:ba:10:2c:
                    3f:24:8f:e0:88:fc:f8:c0:e6:16:5e:11:5e:c0:3b:
                    89:8e:9a:9c:a1:f3:eb:8b:80:4b:93:14:5d:9d:60:
                    2d:ef:32:83:80:f4:b6:26:83:7f:e0:35:d4:43:b9:
                    01:f0:bc:34:3e:4b:34:6f:ac:68:85:e2:1c:69:42:
                    be:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8C:2A:21:86:CA:48:32:8E:B4:AA:4C:76:57:9F:AF:9A:2B:03:CB
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134302e302f32322d3232203d3e2034313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:32:d0:8b:92:19:a1:06:bf:71:6e:16:26:7e:ea:42:8a:6b:
         52:39:4e:6e:86:f2:65:05:56:c9:2f:83:71:02:8d:b0:df:a3:
         9d:98:01:16:7c:88:ab:07:47:8f:3f:64:db:de:38:96:69:2f:
         31:e9:2c:c6:d5:97:2e:3a:2c:e1:31:5e:a9:9c:bd:26:ea:4e:
         17:28:a8:be:09:1e:e5:c9:63:e4:9b:0c:6f:2e:73:c8:24:d4:
         38:94:9b:e8:ee:6a:d7:6c:68:85:21:2f:2f:88:8c:2b:81:4e:
         dc:45:b8:dd:11:13:63:4f:f5:cf:d0:3f:f5:8e:d8:b0:94:33:
         ce:59:e2:04:1e:1e:df:f2:38:23:98:7a:72:fc:63:5a:89:59:
         00:2c:a7:c4:fb:da:76:fc:be:50:90:4c:11:c7:f5:e8:94:e5:
         f4:74:79:96:70:ab:bb:de:7f:39:d9:70:37:55:7a:56:c8:a3:
         86:00:93:75:0a:fa:93:32:63:e0:99:1e:6d:6c:42:64:e6:1b:
         d3:d8:48:18:f9:c2:42:be:6b:cb:cd:32:90:6b:8f:cd:d6:0c:
         9c:f5:d0:1a:82:6c:3a:8d:17:13:97:2d:77:d3:5b:5e:90:f9:
         74:31:51:df:bc:c4:5d:4a:8a:b4:ca:7b:51:15:25:52:c5:b5:
         f1:20:f9:11
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUeJ9XuazPDiB2fET/S+Bp22czZuQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVD
MUE4NjlFNjAeFw0yNjA0MjMwODA0MjFaFw0yNzA0MjIwODA5MjFaMDMxMTAvBgNV
BAMTKEU4OEMyQTIxODZDQTQ4MzI4RUI0QUE0Qzc2NTc5RkFGOUEyQjAzQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoczG0q2igiekjNHvaGPllXlfN
OpDTiE22MdtH55Qi21zSsDEVN7w5fsfYnTmL4kIAVUB9OeK6rO6210MZPMy+kw3n
bPMpXHiL8uN6UGwpPFNGpnDcH4Z/hK9OLVvmnk4oL3ssgBZABn7qNhNVxoUovBHP
oISvq5zMN3RmDn8OhntxO6eAqDcKvBMnj6cJ6HmWv0l/QbzkMgD9DxerZpXrbBEp
BxJnBpRU3QeV24mM1tE2wGG7AuOdHuspSuB3HroQLD8kj+CI/PjA5hZeEV7AO4mO
mpyh8+uLgEuTFF2dYC3vMoOA9LYmg3/gNdRDuQHwvDQ+SzRvrGiF4hxpQr49AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU6IwqIYbKSDKOtKpMdlefr5orA8swHwYDVR0j
BBgwFoAU4+DHdOOyvFh5DnSZg3pBVcGoaeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjI3NTMzMDc3NzM1MDE0Ni8wL0UzRTBDNzc0RTNCMkJDNTg3OTBFNzQ5OTgzN0E0
MTU1QzFBODY5RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVDMUE4NjlFNi5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2Mjc1MzMwNzc3MzUwMTQ2LzAvMzEzMjMxMmUzNDM2
MmUzMTM0MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDMxMzMzNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAnkujDANBgkqhkiG9w0BAQsFAAOCAQEAfzLQi5IZoQa/cW4WJn7qQoprUjlO
bobyZQVWyS+DcQKNsN+jnZgBFnyIqwdHjz9k2944lmkvMeksxtWXLjos4TFeqZy9
JupOFyiovgke5clj5JsMby5zyCTUOJSb6O5q12xohSEvL4iMK4FO3EW43RETY0/1
z9A/9Y7YsJQzzlniBB4e3/I4I5h6cvxjWolZACynxPvadvy+UJBMEcf16JTl9HR5
lnCru95/OdlwN1V6VsijhgCTdQr6kzJj4JkebWxCZOYb09hIGPnCQr5ry80ykGuP
zdYMnPXQGoJsOo0XE5ctd9NbXpD5dDFR37zEXUqKtMp7URUlUsW18SD5EQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 13:50:48 2026 by rpki-client