Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134302e302f32322d3232203d3e203538343636.roa
File:                     3132312e34362e3134302e302f32322d3232203d3e203538343636.roa (raw, json)
Hash identifier:          ufuqE8vUxPKYKtIS37e26c/6q/r4pf+BYFpNUZ/Z2uQ=
Subject key identifier:   E3:B7:6F:C9:81:93:5E:E7:F6:04:FA:82:4D:97:35:1A:B8:E9:DE:0D
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       5793CC8942917E76E8C3A2288B2DFEEE5F493B8C
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134302e302f32322d3232203d3e203538343636.roa
Signing time:             Thu 23 Apr 2026 08:09:21 +0000
ROA not before:           Thu 23 Apr 2026 08:04:21 +0000
ROA not after:            Thu 22 Apr 2027 08:09:21 +0000
asID:                     58466
IP address blocks:        121.46.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 06:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:93:cc:89:42:91:7e:76:e8:c3:a2:28:8b:2d:fe:ee:5f:49:3b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 23 08:04:21 2026 GMT
            Not After : Apr 22 08:09:21 2027 GMT
        Subject: CN=E3B76FC981935EE7F604FA824D97351AB8E9DE0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0c:f5:2e:62:4e:16:38:da:e2:ac:02:8f:87:
                    26:ef:b3:2d:10:a0:ff:b4:24:9d:81:9f:96:d2:9c:
                    16:4f:bc:1f:1b:6e:97:c5:96:27:53:2a:f3:5a:bd:
                    2a:7b:a8:e1:4e:6d:6a:5f:65:f3:3a:91:d5:eb:33:
                    61:33:b1:c3:0f:51:73:ac:66:6b:a4:94:4c:73:45:
                    74:6a:ed:ea:c9:5e:ae:6e:e8:e0:00:06:21:77:6f:
                    ac:91:34:d3:ee:e8:80:48:d2:29:e8:f6:97:72:46:
                    fb:e4:dc:3b:27:1f:55:47:01:23:7d:8a:62:f4:e5:
                    c7:1d:84:48:27:83:f7:df:5b:1a:0b:d3:58:a0:31:
                    58:9c:4a:9c:41:86:0b:63:d0:af:54:fd:5d:c2:f2:
                    6c:67:9b:48:f0:80:87:89:d9:43:a7:de:ef:1e:c6:
                    41:b6:09:3b:2a:06:11:cb:44:cc:ed:f3:0d:cb:1f:
                    69:33:0b:3c:53:7c:04:1f:59:7e:35:24:42:60:eb:
                    87:5c:e8:82:70:49:7e:f5:c1:3c:94:1a:97:f7:7b:
                    6c:00:29:23:75:9c:ca:62:16:38:86:8d:cf:32:13:
                    e8:27:65:b7:63:0e:84:98:94:85:51:81:2b:d0:d9:
                    fa:c5:cd:32:25:ac:a4:ae:20:05:f4:5f:bd:34:a0:
                    b6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B7:6F:C9:81:93:5E:E7:F6:04:FA:82:4D:97:35:1A:B8:E9:DE:0D
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134302e302f32322d3232203d3e203538343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:54:4e:8b:2c:7b:f3:82:ac:89:15:5b:7f:2e:dd:6e:da:59:
         8d:9f:6a:38:9e:07:d7:76:40:76:e9:e4:da:22:70:6e:26:bb:
         78:e1:ec:1c:7c:4c:b6:09:b6:ad:84:f3:0b:50:4f:ad:3b:a7:
         db:db:87:14:cc:eb:38:e1:4c:a0:c7:47:e1:a5:93:74:17:73:
         be:46:17:2f:1b:03:d0:9d:3e:50:27:5f:e0:dd:9e:26:d5:e3:
         8c:46:b3:14:f7:7b:9d:d2:3e:4d:9d:32:6f:b2:39:08:58:9d:
         8b:ac:4a:30:c4:9e:7f:21:5f:24:28:ca:19:7a:59:60:3f:43:
         46:4e:9a:8a:e6:51:4b:35:a8:c1:86:c9:7e:c4:29:28:02:cc:
         48:14:48:c1:cc:7d:2b:04:48:eb:ed:9c:85:84:03:ca:54:d9:
         e8:55:68:09:da:75:7f:54:e5:e1:8f:c1:53:0a:a4:ae:d3:d4:
         39:e3:58:b8:6f:01:45:ff:9c:fa:0e:0a:9b:0a:01:74:ca:1d:
         20:1b:6a:2a:4d:a6:bc:6b:77:ca:79:0e:56:dc:fc:13:b0:11:
         fb:07:2b:36:60:c2:f6:11:a5:35:42:95:b7:bc:7d:eb:7e:11:
         c9:24:cd:1a:e0:bf:84:7a:8e:c3:ea:8c:75:a4:e4:bc:16:80:
         fd:6e:fa:2e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:21 2026 by rpki-client