Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3135362e302f32322d3232203d3e2034313334.roa
File:                     3132312e34362e3135362e302f32322d3232203d3e2034313334.roa (raw, json)
Hash identifier:          XPHfr9QG/rAfUsCxNNvsw3T2T0NiGMNi9ZMG+XGu3gE=
Subject key identifier:   1B:CC:D3:5F:A2:BB:CF:83:C2:FB:EB:AE:5D:80:BB:22:FF:00:74:C8
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       62FCF39C50EA76E5FE8617F8D66CB449431BC49C
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3135362e302f32322d3232203d3e2034313334.roa
Signing time:             Thu 23 Apr 2026 08:17:53 +0000
ROA not before:           Thu 23 Apr 2026 08:12:53 +0000
ROA not after:            Thu 22 Apr 2027 08:17:53 +0000
asID:                     4134
IP address blocks:        121.46.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 06:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:fc:f3:9c:50:ea:76:e5:fe:86:17:f8:d6:6c:b4:49:43:1b:c4:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 23 08:12:53 2026 GMT
            Not After : Apr 22 08:17:53 2027 GMT
        Subject: CN=1BCCD35FA2BBCF83C2FBEBAE5D80BB22FF0074C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:39:55:b8:31:35:7a:56:0e:32:3e:e7:3b:3e:
                    87:12:57:c9:20:4a:70:d4:99:ed:ce:fe:1b:41:d5:
                    81:fc:a9:d1:83:0c:2a:a9:51:c9:40:2c:92:30:de:
                    57:23:ba:34:19:9b:25:54:a3:cd:7f:f9:e0:15:46:
                    ca:4b:24:1b:d9:f2:97:cb:05:31:0a:da:5b:41:8f:
                    c5:93:7c:7e:fb:b1:c5:c5:95:e6:65:af:70:2c:7e:
                    85:11:20:27:3c:e2:fc:40:54:f3:f5:02:b8:1e:56:
                    4c:e9:c9:0b:a3:ff:d6:48:a4:e9:72:38:a6:a6:3e:
                    ac:ae:4e:07:1f:39:01:4a:e0:91:48:d4:8f:5c:45:
                    0d:0b:7c:3f:e2:ef:70:06:fa:2f:8f:71:2b:bf:6f:
                    11:33:0a:54:3f:d4:fa:e3:30:d9:d3:e9:83:f0:d8:
                    6c:99:92:51:79:aa:9c:da:10:8f:0b:3d:c4:48:17:
                    7c:b6:f8:21:dd:41:04:f5:77:86:d4:74:87:b7:c5:
                    13:63:dc:c5:d0:3f:92:33:e9:73:68:ef:d5:47:66:
                    06:c3:6b:5e:5d:91:b5:b9:8b:08:a0:9a:19:08:eb:
                    48:fe:7c:df:0d:2b:95:1b:a9:e3:f4:83:d3:42:da:
                    f4:bc:3c:ab:a3:cc:70:42:02:f4:b7:50:5f:7c:f2:
                    88:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CC:D3:5F:A2:BB:CF:83:C2:FB:EB:AE:5D:80:BB:22:FF:00:74:C8
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3135362e302f32322d3232203d3e2034313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:53:4d:76:12:50:65:8c:7d:0e:36:62:b5:28:22:29:60:b1:
         f6:b9:15:70:8e:ad:bf:10:d5:8d:66:ff:72:81:65:e0:39:83:
         82:b6:24:62:b2:c1:a7:df:ea:2f:59:f9:97:42:78:00:c5:4c:
         ad:50:95:f3:e7:e1:c3:03:2e:56:8e:7c:5c:91:c4:89:84:c4:
         44:2f:4f:d5:8e:86:71:de:ad:69:bc:b9:18:68:28:d1:40:d5:
         2e:c0:b8:0f:d7:3a:5a:80:d1:34:be:bb:af:d3:ff:34:7e:6d:
         6a:c3:46:df:06:a7:8c:48:3b:fc:e7:34:af:fa:a7:61:b6:d1:
         3e:d5:17:11:52:b7:3b:3a:64:7e:03:ab:90:cb:39:87:b5:a9:
         29:89:7b:ac:01:27:05:84:c4:9c:2c:17:28:4f:be:8a:aa:31:
         ae:94:9b:2b:48:21:01:63:81:32:43:ad:e4:8d:01:ce:f3:f6:
         0f:59:31:69:22:7f:5e:a0:56:5d:a9:99:1e:0a:d7:16:f0:2a:
         15:2b:5c:23:74:e8:f3:dc:f6:14:fa:3d:d4:dd:52:45:e4:7b:
         18:12:4c:30:8f:91:0f:f6:40:94:00:c0:0c:ec:3b:08:c5:c6:
         06:8b:e5:5f:b1:91:38:ab:b7:c7:9d:7c:0a:ff:1f:ab:18:39:
         4f:44:53:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:51:47 2026 by rpki-client