Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134382e302f32322d3232203d3e203538343636.roa
File:                     3132312e34362e3134382e302f32322d3232203d3e203538343636.roa (raw, json)
Hash identifier:          oXeh2EfaWTcHcw1GGWnHPVOHovPI0wDGpl3RlSS7e4k=
Subject key identifier:   69:7F:73:D3:5B:E5:F9:F5:AB:0E:60:B5:7F:89:96:AB:C8:63:F4:D3
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       37C8BBE95757938AD451489A587EA186B756FC8D
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134382e302f32322d3232203d3e203538343636.roa
Signing time:             Thu 23 Apr 2026 08:15:52 +0000
ROA not before:           Thu 23 Apr 2026 08:10:52 +0000
ROA not after:            Thu 22 Apr 2027 08:15:52 +0000
asID:                     58466
IP address blocks:        121.46.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 06:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c8:bb:e9:57:57:93:8a:d4:51:48:9a:58:7e:a1:86:b7:56:fc:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 23 08:10:52 2026 GMT
            Not After : Apr 22 08:15:52 2027 GMT
        Subject: CN=697F73D35BE5F9F5AB0E60B57F8996ABC863F4D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:21:9c:d7:bc:39:43:0b:e2:9e:54:43:ef:d7:
                    b1:93:b3:32:69:c0:3f:68:3e:6b:1e:dd:27:b8:05:
                    1f:59:32:61:4a:bb:b4:ba:6a:c0:6f:9e:ad:22:8d:
                    e0:a4:f9:0b:33:ff:0d:46:8f:49:6a:75:c0:4e:50:
                    dc:17:4b:7c:63:dc:47:b0:c4:e4:a0:00:cc:d1:14:
                    5b:18:0a:c6:5e:bc:ee:29:ac:f4:5a:02:78:11:35:
                    53:18:19:86:0a:51:10:5f:1b:54:7c:7c:93:87:32:
                    78:fd:76:5d:b0:87:39:5e:94:e5:78:8f:21:24:23:
                    05:8e:3b:da:0c:99:03:b6:d7:61:e6:93:83:b9:a0:
                    7f:34:da:14:eb:37:fc:c4:11:0f:09:93:9a:e1:bc:
                    a3:bc:e0:d5:dc:ed:34:e0:77:58:65:0c:4d:c7:b9:
                    54:0d:7f:02:e2:5a:b5:95:70:d9:eb:38:f9:39:ab:
                    79:4a:2f:9e:ed:4a:91:12:96:c4:b4:7a:e6:68:8a:
                    64:d1:5b:b0:50:40:57:32:0e:52:49:40:0f:eb:27:
                    6c:c1:79:88:3f:ac:b6:a6:49:48:dd:06:b5:56:a9:
                    64:25:7c:98:53:78:0c:73:71:a7:1a:55:13:08:b0:
                    9d:2b:29:df:a8:d6:f6:c2:e1:a0:2c:10:14:6e:67:
                    f9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7F:73:D3:5B:E5:F9:F5:AB:0E:60:B5:7F:89:96:AB:C8:63:F4:D3
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134382e302f32322d3232203d3e203538343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:29:a9:80:02:fe:38:52:cb:30:67:67:19:31:ee:88:2a:d2:
         c5:82:9b:ae:8e:88:10:eb:eb:9a:7d:d8:1c:e6:87:c4:26:2c:
         9c:10:d8:62:64:88:1d:12:7d:c8:ac:eb:6d:78:2f:90:d6:c4:
         d3:53:66:c3:e8:f3:55:b7:36:df:d5:85:12:44:b2:81:27:aa:
         66:67:80:ea:97:a6:33:1f:9d:78:83:78:6c:90:d7:af:30:0d:
         f1:c8:88:c7:7b:a1:9d:2c:a2:49:98:bb:ab:39:67:8b:c4:09:
         76:18:da:db:14:91:ed:3c:42:e1:03:3f:aa:92:4c:e4:9b:49:
         17:56:88:fc:e0:4b:ef:ec:d5:f0:5a:41:fc:6e:df:ce:53:57:
         9a:fd:d4:ab:d7:74:ef:3e:63:cf:cf:3c:49:fd:a3:1a:a5:38:
         dc:70:6e:44:40:35:f7:1d:a5:4d:73:c3:01:5e:e4:9c:d8:dc:
         ee:74:75:19:d3:30:90:81:16:bb:e5:04:68:9e:c2:16:dd:f1:
         66:54:20:9a:70:1c:99:48:07:a5:a5:97:94:0d:d4:8e:3d:b3:
         42:d4:bd:df:b0:cf:8f:03:2d:6f:c9:ee:96:99:4e:f2:5a:ea:
         9b:81:1b:fe:ad:15:2f:63:ec:61:5e:1c:58:dd:6b:78:26:19:
         fb:af:dc:3d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:20 2026 by rpki-client