Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134342e302f32322d3232203d3e203536303430.roa
File:                     3132312e34362e3134342e302f32322d3232203d3e203536303430.roa (raw, json)
Hash identifier:          WBHvchqasj1kCogLmkMkSvck1PW/fFi9laYzM+xhw2Q=
Subject key identifier:   82:D0:90:69:03:43:34:EB:75:B0:BC:18:FF:C1:27:A9:B8:9B:3B:83
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       5BAA50377C4073F11C63EE879DC8BE17A8565C6F
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134342e302f32322d3232203d3e203536303430.roa
Signing time:             Thu 23 Apr 2026 08:14:09 +0000
ROA not before:           Thu 23 Apr 2026 08:09:09 +0000
ROA not after:            Thu 22 Apr 2027 08:14:09 +0000
asID:                     56040
IP address blocks:        121.46.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 06:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:aa:50:37:7c:40:73:f1:1c:63:ee:87:9d:c8:be:17:a8:56:5c:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 23 08:09:09 2026 GMT
            Not After : Apr 22 08:14:09 2027 GMT
        Subject: CN=82D09069034334EB75B0BC18FFC127A9B89B3B83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c9:00:84:91:41:d1:62:b6:43:70:1e:74:1e:
                    97:36:c2:e2:d2:71:d7:27:84:6b:c4:f1:c6:ac:b0:
                    37:c2:4c:33:c1:5a:b1:53:a2:e9:66:db:b4:74:0b:
                    e8:41:54:2e:d1:d9:b5:aa:70:9a:1f:1c:1a:cf:6f:
                    42:7b:31:f1:10:56:b9:0c:bb:6e:12:ab:8a:f3:b1:
                    c2:13:04:5d:8a:5c:68:cf:45:8e:35:53:a2:38:67:
                    11:bc:df:e9:64:f4:ef:a2:6d:36:dd:2c:2b:f0:36:
                    b3:51:7b:6b:ad:64:a4:a0:85:d3:ec:15:22:40:f9:
                    5e:f3:83:cf:c3:ed:f7:cb:e4:df:b6:bb:67:01:2c:
                    f1:e7:dc:3b:04:df:f6:49:d1:79:b1:d7:17:91:e2:
                    5e:32:1a:47:14:8e:dc:50:e7:e4:20:bb:0b:86:0b:
                    0c:b3:94:31:1b:b9:25:e5:d2:b3:35:3c:62:4c:3c:
                    48:17:d3:a5:35:8d:18:f4:5c:6d:f4:fd:5c:bc:da:
                    c4:42:15:3a:d5:15:f2:ce:99:b2:6e:91:4d:45:77:
                    07:1d:c4:f0:fa:3e:4f:03:86:06:f4:5a:ce:e0:04:
                    f1:22:84:27:cf:7a:f1:de:d6:c7:bc:4f:12:50:b3:
                    c8:6c:e0:f3:96:bd:49:2d:8f:95:a9:28:86:a8:ee:
                    b5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D0:90:69:03:43:34:EB:75:B0:BC:18:FF:C1:27:A9:B8:9B:3B:83
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134342e302f32322d3232203d3e203536303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:e3:f0:d5:64:dc:aa:4f:20:79:8c:72:c3:f1:da:b0:eb:84:
         1d:a3:bd:33:a4:8e:76:5a:c6:ba:9d:e5:39:ac:90:71:0a:27:
         c9:0b:26:a6:76:e2:c0:e5:f2:c3:67:a5:41:ca:73:cd:25:75:
         c1:de:cb:69:a2:82:f8:49:a9:a8:f2:9e:01:d0:7c:91:68:30:
         50:f0:78:11:24:b1:a2:c6:86:31:59:e8:ab:b7:83:c9:5d:55:
         a0:65:71:c9:df:59:aa:8a:7f:59:a1:0f:f8:8d:ed:2d:97:f6:
         8a:0b:5a:0c:01:61:b1:7d:38:42:d3:9c:f4:3a:cf:b3:b3:0c:
         ae:17:83:23:14:72:55:a2:f9:9e:39:9f:6d:c5:7f:da:f0:74:
         09:97:0e:aa:b7:37:7f:f2:b0:12:0e:ef:31:65:1f:8f:24:5e:
         7e:e5:b9:12:7f:42:2e:19:29:25:8e:8f:20:14:0e:3e:21:62:
         e3:a4:65:c9:5a:bf:24:d0:ce:00:10:69:85:63:11:75:66:95:
         bb:ad:65:e1:f0:c8:51:81:ea:b9:64:17:02:39:11:76:96:1e:
         0c:2d:40:7d:e1:50:c9:09:0a:d5:3e:b7:d0:e0:ee:fb:80:4d:
         99:d3:f4:94:4f:3c:f8:a6:aa:83:e9:4a:8f:2f:ef:26:88:18:
         28:f6:c7:1b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:22 2026 by rpki-client