Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3135362e302f32322d3232203d3e203536303430.roa
File:                     3132312e34362e3135362e302f32322d3232203d3e203536303430.roa (raw, json)
Hash identifier:          UuHSt45VGpVNVu0Pjvz/4EJFDFWWHkyj0NcIRnhjyp8=
Subject key identifier:   7D:2C:27:AF:10:77:34:73:2A:03:94:46:BB:BD:8C:A2:DD:B6:6D:03
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       0C93CDF8B3E8E3AE1DE0E33A8AB3F76B1EC89A49
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3135362e302f32322d3232203d3e203536303430.roa
Signing time:             Thu 23 Apr 2026 08:17:53 +0000
ROA not before:           Thu 23 Apr 2026 08:12:53 +0000
ROA not after:            Thu 22 Apr 2027 08:17:53 +0000
asID:                     56040
IP address blocks:        121.46.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 06:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:93:cd:f8:b3:e8:e3:ae:1d:e0:e3:3a:8a:b3:f7:6b:1e:c8:9a:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 23 08:12:53 2026 GMT
            Not After : Apr 22 08:17:53 2027 GMT
        Subject: CN=7D2C27AF107734732A039446BBBD8CA2DDB66D03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:44:20:80:ca:cc:8d:86:31:db:af:39:d0:83:
                    d2:28:e1:61:cb:e9:c8:6a:81:d7:b1:3d:40:6a:ea:
                    a4:ef:a1:6e:11:6c:86:bf:7a:dd:94:79:08:29:76:
                    e6:a0:e9:98:44:75:dd:67:c4:6f:24:5c:58:e0:4f:
                    05:8c:25:1c:2a:cd:1f:59:b4:d8:1c:82:5e:4a:77:
                    be:c8:06:98:55:af:65:e2:cf:e7:e4:5e:3e:08:62:
                    60:b0:82:a8:50:7a:fc:56:bb:4d:64:45:fd:3b:36:
                    a2:c6:0f:91:90:20:ef:e7:22:bc:b0:ec:6e:30:22:
                    9c:66:00:c1:ad:0c:6e:f1:ed:5c:56:ec:43:ad:41:
                    20:29:21:6c:1a:b7:3f:05:14:e6:33:59:df:a2:27:
                    37:c5:43:92:11:9d:98:ce:ab:dd:37:04:8e:76:9e:
                    2e:4c:98:49:02:42:6e:75:4d:91:d7:51:b7:f5:2a:
                    f8:cb:fa:4e:cc:7f:e2:9e:10:c2:e7:93:3d:5b:b1:
                    4b:3a:cb:1a:b6:dc:fd:0d:2b:84:df:11:d3:32:fe:
                    77:25:14:1e:6d:48:52:f7:e2:d3:e9:aa:88:81:32:
                    4d:fd:e6:7d:7e:26:30:03:3e:3d:63:74:a1:89:cf:
                    46:40:a3:67:12:9d:0a:6b:5e:4a:29:e1:35:66:04:
                    13:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:2C:27:AF:10:77:34:73:2A:03:94:46:BB:BD:8C:A2:DD:B6:6D:03
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3135362e302f32322d3232203d3e203536303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:56:34:e5:61:f7:f7:0c:cc:60:61:d4:33:9e:76:08:ca:75:
         a6:de:9b:2c:9b:4a:ad:25:d3:f2:a2:15:4c:a5:82:0f:94:f3:
         54:1a:ad:a8:fc:51:04:88:80:ff:02:2a:80:6b:20:b1:d7:1e:
         c4:64:a7:73:3c:b6:a2:6f:5b:6b:e6:e1:a6:de:3d:29:dd:55:
         f6:a2:99:55:92:06:ee:5a:7d:63:87:09:10:de:4f:28:7f:75:
         0d:4b:2f:13:4d:19:90:a6:20:4f:7f:06:28:42:2c:f8:ea:5d:
         19:1b:d6:c3:2e:8b:35:67:22:36:a5:39:d0:3d:35:d1:0f:f2:
         7e:4a:4c:b8:b0:9b:d4:ba:0a:61:d0:27:34:a3:73:1f:bb:f7:
         b1:1d:c9:7d:46:b8:24:1f:3d:98:0d:28:82:ac:25:ab:9a:90:
         0b:11:7a:43:ae:d5:a6:f5:b5:0b:ab:51:df:34:ab:20:8c:b8:
         3a:79:4f:54:a3:47:c8:70:b0:61:06:6e:d5:cb:9d:5d:51:2c:
         c5:77:a9:72:e3:0e:a0:26:8d:a2:0b:0a:82:f5:dd:a6:4d:d8:
         9a:01:30:99:c9:13:88:ee:87:d5:6e:d4:13:07:ee:4b:86:a7:
         c1:68:b5:cc:c5:ae:a0:b9:40:2d:e0:9a:e2:01:1e:01:45:9b:
         c8:63:8f:c9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:21 2026 by rpki-client