Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134322e302f32332d3233203d3e20313335333931.roa
File:                     3132312e34362e3134322e302f32332d3233203d3e20313335333931.roa (raw, json)
Hash identifier:          1s+Ck5bO99/SN48A28NgUDa0iOYmuTwsOiNnTy8HUpo=
Subject key identifier:   B6:0D:0A:FD:16:57:9C:03:2F:53:41:06:AE:84:C6:5C:40:E0:BA:B6
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       32AC737C740855656F5EF340723C5C0075688E6F
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134322e302f32332d3233203d3e20313335333931.roa
Signing time:             Thu 23 Apr 2026 08:09:21 +0000
ROA not before:           Thu 23 Apr 2026 08:04:21 +0000
ROA not after:            Thu 22 Apr 2027 08:09:21 +0000
asID:                     135391
IP address blocks:        121.46.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 06:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ac:73:7c:74:08:55:65:6f:5e:f3:40:72:3c:5c:00:75:68:8e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 23 08:04:21 2026 GMT
            Not After : Apr 22 08:09:21 2027 GMT
        Subject: CN=B60D0AFD16579C032F534106AE84C65C40E0BAB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6b:af:df:5c:74:7f:08:ba:ee:90:24:20:cd:
                    4b:dc:67:3c:e4:63:fe:90:25:ef:be:cd:a1:1e:0c:
                    b4:4d:9c:3c:bb:1a:06:ba:1b:be:7e:04:72:a8:30:
                    74:d1:f2:62:07:a9:6c:e2:29:c6:80:86:e3:9e:d8:
                    15:48:54:2b:95:40:ae:65:71:a9:ab:69:5d:6b:f2:
                    c6:06:2d:71:69:e0:28:87:21:d1:9c:f0:73:11:72:
                    bd:74:28:ba:41:e3:19:b3:af:eb:40:0c:06:1e:45:
                    d6:7d:45:b6:4e:ec:31:21:0f:13:68:d8:6d:37:7d:
                    ae:0e:9e:84:a7:e6:a2:f6:f5:d3:dc:30:29:f8:36:
                    d6:2e:fe:70:ee:7c:73:55:d5:c4:ae:1a:c6:79:db:
                    6e:9a:e6:f1:af:35:59:15:29:d4:fd:5d:cf:f8:04:
                    29:c7:90:25:b1:f6:cd:9f:11:6e:63:77:e3:c4:bb:
                    3a:d2:d5:50:73:3f:bd:55:ab:ee:17:69:12:a2:04:
                    fe:1e:79:05:1c:58:ac:06:a9:32:0e:f2:b0:6b:b9:
                    54:60:69:5b:f2:d6:07:fd:e9:0f:71:4f:cb:a1:26:
                    24:13:0c:56:50:43:8e:5f:1e:6b:0c:96:a7:9c:a8:
                    b6:06:5e:d6:e7:57:21:69:1a:ae:60:7b:91:c9:40:
                    fe:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:0D:0A:FD:16:57:9C:03:2F:53:41:06:AE:84:C6:5C:40:E0:BA:B6
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134322e302f32332d3233203d3e20313335333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:9b:02:f7:30:4d:01:cc:62:c8:f7:15:0c:8b:5b:2c:ec:8b:
         84:ae:d2:ef:dd:b0:a5:ce:69:19:de:33:4e:bd:2d:c2:10:b5:
         f5:75:20:36:50:08:b6:6c:87:2b:6c:5f:33:69:4f:35:eb:2f:
         7b:05:73:1a:f5:06:df:29:40:4c:53:1e:6e:aa:ad:50:48:48:
         e9:2b:29:9a:86:80:61:8f:36:d5:25:e9:05:2e:dc:e8:7e:bc:
         35:a3:c1:5a:a5:69:16:2d:29:11:9a:3a:d4:22:7d:cf:6e:04:
         13:90:94:45:a4:68:08:24:99:77:ef:f9:ea:f1:9e:ad:f5:91:
         67:12:e6:63:3c:e6:ba:7d:c4:ee:9f:d8:8d:bd:d2:2b:41:28:
         d3:d3:a3:a4:bf:b8:dd:bf:a5:81:8d:90:1d:f5:f0:6e:f6:f8:
         ec:41:f8:18:f3:bf:6a:04:ae:9c:10:d3:d9:53:13:75:36:37:
         2d:4c:74:87:ab:1e:1d:3d:75:14:2c:67:a6:9f:29:d6:7e:ed:
         36:18:ee:59:c7:30:4b:d1:42:68:b3:2a:ff:ab:f4:01:7a:05:
         34:f1:d8:69:ce:fb:1b:74:31:ca:ce:dc:01:f6:d4:5a:9d:86:
         18:f6:31:09:83:29:31:a4:46:03:e9:55:b2:d9:70:a9:98:7f:
         72:55:80:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:21 2026 by rpki-client