Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134382e302f32322d3232203d3e203536303430.roa
File:                     3132312e34362e3134382e302f32322d3232203d3e203536303430.roa (raw, json)
Hash identifier:          Vxxs3xkUPz/kUyq0mf6AD1aAdkOx9ufY16GSfRCp3ok=
Subject key identifier:   56:64:75:71:41:00:BE:D5:1D:8D:86:B6:E6:C8:B9:D4:31:F2:A0:35
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       5E2A08C7EA05DAFC00DE9FD87CBBBD97DBE5D413
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134382e302f32322d3232203d3e203536303430.roa
Signing time:             Thu 23 Apr 2026 08:15:52 +0000
ROA not before:           Thu 23 Apr 2026 08:10:52 +0000
ROA not after:            Thu 22 Apr 2027 08:15:52 +0000
asID:                     56040
IP address blocks:        121.46.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 06:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:2a:08:c7:ea:05:da:fc:00:de:9f:d8:7c:bb:bd:97:db:e5:d4:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 23 08:10:52 2026 GMT
            Not After : Apr 22 08:15:52 2027 GMT
        Subject: CN=566475714100BED51D8D86B6E6C8B9D431F2A035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:3a:8e:62:97:58:28:1f:01:5c:eb:30:d6:50:
                    25:0d:d5:41:7f:de:08:4c:8f:52:f6:ad:79:13:f9:
                    3e:8e:68:8c:c8:e4:26:f1:43:29:d0:80:10:d2:3d:
                    d5:23:2b:27:d6:41:e7:1f:a6:66:a5:4e:23:26:e7:
                    3c:95:33:51:bd:2d:16:c6:be:f9:f7:d9:8b:3c:77:
                    51:03:d8:aa:b8:fa:c8:4c:e5:25:9f:5f:93:27:94:
                    2b:3a:b2:ff:7c:d5:4a:10:6d:9a:3e:8b:2d:fd:93:
                    f7:8c:10:bf:83:db:37:48:f1:65:22:0c:b6:24:db:
                    ec:70:18:b6:73:f9:41:74:39:38:9b:e9:12:74:7f:
                    df:37:c3:e6:f4:5c:70:65:d0:3b:af:69:d5:3f:dd:
                    eb:81:08:d6:bd:2e:d9:d8:f7:ed:53:73:12:ca:e3:
                    f7:55:d3:16:21:98:20:92:e4:98:9e:26:c6:6e:71:
                    87:6d:48:6f:cf:30:2f:6e:79:ac:82:7f:b5:52:a5:
                    f8:96:23:7e:33:49:18:d2:6a:c9:d6:bb:f7:b2:39:
                    a5:85:4f:b3:61:8b:ea:3f:9a:05:39:96:76:76:c5:
                    5c:fa:26:f8:d8:06:e2:71:a7:8f:f2:81:da:a9:2e:
                    b2:96:a5:dd:3b:e5:4d:62:d5:3a:f9:4f:e1:2a:ba:
                    5b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:64:75:71:41:00:BE:D5:1D:8D:86:B6:E6:C8:B9:D4:31:F2:A0:35
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134382e302f32322d3232203d3e203536303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         de:8c:5f:85:a7:f3:44:56:42:2f:52:26:df:83:44:e6:a5:5d:
         c6:e7:e7:66:6c:c9:e8:11:c6:9f:eb:f1:f4:4a:72:89:07:b2:
         ca:eb:db:8f:bb:84:24:2a:99:e9:a7:b8:fc:c0:4b:cc:c8:01:
         c3:29:07:aa:9e:90:c7:a9:a9:9d:1c:1a:f0:3f:6d:43:ed:27:
         9a:92:10:90:16:63:ad:93:19:c4:f2:a6:8e:50:c4:52:9a:0b:
         67:7f:43:a0:4f:11:2a:33:6d:ec:61:cf:41:a9:9c:1f:29:ca:
         19:8b:4e:35:c7:8b:ef:ca:18:9d:4c:9a:b7:b4:a5:f3:84:6c:
         e5:5b:d3:28:ed:d5:07:b8:71:37:f9:93:d3:40:60:07:f1:c2:
         92:8c:15:d5:86:bd:7e:94:de:f1:9b:f5:d6:af:9c:8b:10:cd:
         32:6d:74:9d:e0:e5:1a:1d:d2:09:a3:e3:bc:79:a9:67:f7:22:
         e1:0c:2b:dc:c3:9a:00:a4:e7:4c:e7:c0:a2:70:22:29:bb:28:
         a8:16:67:5a:37:f5:24:74:aa:27:c9:14:cf:b0:1a:ed:15:36:
         4c:e9:3b:f5:b2:88:5e:6f:c9:61:34:0f:e5:73:19:6d:cf:39:
         9d:da:be:df:6b:28:4e:e5:5c:7d:6c:19:60:99:3e:79:15:61:
         4b:70:cf:74
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:20 2026 by rpki-client