Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3135322e302f32322d3232203d3e203338333730.roa
File:                     3132312e34362e3135322e302f32322d3232203d3e203338333730.roa (raw, json)
Hash identifier:          AUbxyTuMeOmdhozJdWQ5BQfxbFJx+tQ883r4rcwHa2o=
Subject key identifier:   0A:55:52:90:29:97:B7:DD:AE:E4:03:FC:89:A6:DC:DA:FA:19:D2:1F
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       5C4F6BC8B0503AC34D36637690BF5D75376E5E4E
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3135322e302f32322d3232203d3e203338333730.roa
Signing time:             Thu 23 Apr 2026 08:16:43 +0000
ROA not before:           Thu 23 Apr 2026 08:11:43 +0000
ROA not after:            Thu 22 Apr 2027 08:16:43 +0000
asID:                     38370
IP address blocks:        121.46.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 06:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:4f:6b:c8:b0:50:3a:c3:4d:36:63:76:90:bf:5d:75:37:6e:5e:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 23 08:11:43 2026 GMT
            Not After : Apr 22 08:16:43 2027 GMT
        Subject: CN=0A5552902997B7DDAEE403FC89A6DCDAFA19D21F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e0:98:71:c7:ca:09:7e:32:0e:92:c6:89:d7:
                    48:db:0d:44:2b:b2:40:c1:f8:84:91:3e:00:ee:95:
                    0d:fb:4f:20:f4:58:34:16:67:03:1d:33:f4:18:6b:
                    1c:ca:55:80:0d:81:63:43:1e:1f:8a:25:8f:f1:35:
                    a3:cf:d1:7f:28:e3:ec:2e:e8:bd:e9:1d:1a:35:ce:
                    c7:cd:9b:d0:dd:f1:f8:dc:53:e5:b0:6e:0b:71:4b:
                    22:b5:f8:c4:a7:6b:51:48:40:df:b1:4f:6e:5e:9d:
                    12:f8:77:39:56:19:fc:87:e6:fb:8d:c2:20:04:8d:
                    f9:0a:6d:98:fd:25:bf:89:0c:9c:aa:50:c5:74:44:
                    04:7d:de:be:86:ee:a4:8b:c0:c3:e3:be:61:c3:9d:
                    7d:87:72:a2:bf:ad:b8:a4:7f:74:d2:d6:c1:ed:e8:
                    ad:2e:c4:96:bb:b8:47:43:e6:bc:64:4c:bf:c4:52:
                    16:c2:fd:87:bf:ba:d3:4c:fa:cd:fe:a0:ce:da:d0:
                    a9:62:58:bc:f1:95:89:ea:ed:0a:72:85:eb:c5:08:
                    72:29:6c:2a:8b:db:aa:31:0a:0b:71:ee:8d:60:19:
                    0b:0e:88:79:19:31:6d:cb:9b:e4:b6:36:cf:e4:9d:
                    df:11:75:f8:da:71:b2:6b:a6:91:a3:28:74:7f:63:
                    24:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:55:52:90:29:97:B7:DD:AE:E4:03:FC:89:A6:DC:DA:FA:19:D2:1F
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3135322e302f32322d3232203d3e203338333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:24:85:0c:fb:03:11:2e:f6:b8:38:d7:ee:e3:0f:12:f8:7f:
         21:ef:65:5d:bd:d2:3f:95:9b:48:0e:42:c4:50:b0:72:11:ce:
         8a:2e:86:77:a3:a4:34:88:cc:ac:75:bb:e8:10:eb:be:ec:14:
         5a:80:25:a8:6d:8a:b2:c4:14:57:a6:8d:8f:c1:ef:df:bf:dd:
         98:3b:39:17:35:aa:79:cb:12:b1:c7:a1:94:60:34:2d:1b:b8:
         bc:2a:58:99:b2:af:6a:65:2d:68:20:8d:6b:9b:bb:1b:d2:c0:
         49:71:71:39:39:e7:f0:ae:36:44:99:33:2b:86:b7:2d:d5:bb:
         3c:98:0a:2b:2d:74:b3:b7:40:41:dd:6f:a2:e9:b0:aa:5e:4d:
         fc:59:4c:40:9f:85:0f:1d:21:6c:49:90:3d:18:b0:5f:93:0f:
         56:5b:c2:37:d4:89:05:57:72:3f:3a:cd:1e:d4:d2:54:03:a1:
         0c:a1:4e:1f:c7:27:f9:6b:18:42:c7:7d:ee:7d:bc:4e:15:5f:
         17:c7:b6:05:43:a0:d5:89:e6:20:f2:f5:72:25:67:d4:23:36:
         49:eb:68:74:02:0f:50:53:35:75:4e:74:6b:28:66:fa:de:39:
         d0:af:4c:9d:df:44:f5:da:d7:9b:db:73:70:f0:3b:25:47:97:
         8b:5d:86:1f
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUXE9ryLBQOsNNNmN2kL9ddTduXk4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVD
MUE4NjlFNjAeFw0yNjA0MjMwODExNDNaFw0yNzA0MjIwODE2NDNaMDMxMTAvBgNV
BAMTKDBBNTU1MjkwMjk5N0I3RERBRUU0MDNGQzg5QTZEQ0RBRkExOUQyMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa4Jhxx8oJfjIOksaJ10jbDUQr
skDB+ISRPgDulQ37TyD0WDQWZwMdM/QYaxzKVYANgWNDHh+KJY/xNaPP0X8o4+wu
6L3pHRo1zsfNm9Dd8fjcU+WwbgtxSyK1+MSna1FIQN+xT25enRL4dzlWGfyH5vuN
wiAEjfkKbZj9Jb+JDJyqUMV0RAR93r6G7qSLwMPjvmHDnX2HcqK/rbikf3TS1sHt
6K0uxJa7uEdD5rxkTL/EUhbC/Ye/utNM+s3+oM7a0KliWLzxlYnq7QpyhevFCHIp
bCqL26oxCgtx7o1gGQsOiHkZMW3Lm+S2Ns/knd8RdfjacbJrppGjKHR/YyQHAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUClVSkCmXt92u5AP8iabc2voZ0h8wHwYDVR0j
BBgwFoAU4+DHdOOyvFh5DnSZg3pBVcGoaeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjI3NTMzMDc3NzM1MDE0Ni8wL0UzRTBDNzc0RTNCMkJDNTg3OTBFNzQ5OTgzN0E0
MTU1QzFBODY5RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVDMUE4NjlFNi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NjI3NTMzMDc3NzM1MDE0Ni8wLzMxMzIzMTJlMzQz
NjJlMzEzNTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzMzODMzMzczMC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAnkumDANBgkqhkiG9w0BAQsFAAOCAQEAeSSFDPsDES72uDjX7uMPEvh/
Ie9lXb3SP5WbSA5CxFCwchHOii6Gd6OkNIjMrHW76BDrvuwUWoAlqG2KssQUV6aN
j8Hv37/dmDs5FzWqecsSscehlGA0LRu4vCpYmbKvamUtaCCNa5u7G9LASXFxOTnn
8K42RJkzK4a3LdW7PJgKKy10s7dAQd1voumwql5N/FlMQJ+FDx0hbEmQPRiwX5MP
VlvCN9SJBVdyPzrNHtTSVAOhDKFOH8cn+WsYQsd97n28ThVfF8e2BUOg1YnmIPL1
ciVn1CM2SetodAIPUFM1dU50ayhm+t450K9Mnd9E9drXm9tzcPA7JUeXi12GHw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:19 2026 by rpki-client