Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32302e302f32322d3232203d3e20313335333931.roa
File:                     3132312e34362e32302e302f32322d3232203d3e20313335333931.roa (raw, json)
Hash identifier:          4bkjUDwm9djYVf+HZ8cZSZt/G2XLhdWi969p0AJy4KI=
Subject key identifier:   BE:A8:42:E3:92:B6:FD:13:B7:C8:32:24:2F:15:9C:48:82:15:88:04
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       59C70B24DFC824A61264EAD838693F1B49B6292C
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32302e302f32322d3232203d3e20313335333931.roa
Signing time:             Mon 20 Apr 2026 06:29:06 +0000
ROA not before:           Mon 20 Apr 2026 06:24:06 +0000
ROA not after:            Mon 19 Apr 2027 06:29:06 +0000
asID:                     135391
IP address blocks:        121.46.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 06:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c7:0b:24:df:c8:24:a6:12:64:ea:d8:38:69:3f:1b:49:b6:29:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 20 06:24:06 2026 GMT
            Not After : Apr 19 06:29:06 2027 GMT
        Subject: CN=BEA842E392B6FD13B7C832242F159C4882158804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b0:86:9b:17:77:36:42:c5:a1:40:47:74:05:
                    72:05:2f:e6:ac:7f:2f:44:6f:4e:61:1e:ab:62:07:
                    99:70:76:01:ea:6d:05:1c:71:e5:33:04:e9:33:bb:
                    1e:36:50:47:df:24:db:28:a3:a5:03:6e:27:f2:da:
                    21:8d:59:d7:d2:f5:37:1a:7a:54:a5:d3:8e:e3:43:
                    42:8a:0b:4b:32:e6:77:f8:c0:60:34:1f:97:d9:ab:
                    af:46:d8:59:8f:f9:a1:f0:d4:aa:f7:6e:4f:2d:d7:
                    b8:5d:c8:c8:14:df:f8:e7:26:9b:4b:b5:54:33:74:
                    50:3c:99:1a:ec:6e:dd:9b:bb:1e:35:1d:54:7a:6a:
                    0f:25:07:4f:b2:b4:eb:db:28:31:00:21:4a:fc:43:
                    f3:48:4e:e0:36:5c:c8:22:15:16:80:3a:98:07:6a:
                    be:4b:d3:9c:5d:59:41:1b:ec:f9:65:be:63:21:98:
                    31:c2:b7:a5:7f:b9:42:49:6d:f3:5d:bc:90:71:f8:
                    76:b1:1d:00:2d:05:44:e2:6f:41:9c:f6:ef:a1:31:
                    13:0d:83:c7:af:ae:1e:e0:cd:ee:0c:e2:00:be:71:
                    10:2c:44:d5:03:ce:0c:16:9b:15:07:79:a7:5f:21:
                    0f:1e:b4:c6:e3:e0:e7:13:ca:72:29:e8:d8:b8:0b:
                    5c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A8:42:E3:92:B6:FD:13:B7:C8:32:24:2F:15:9C:48:82:15:88:04
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32302e302f32322d3232203d3e20313335333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:b5:54:b2:54:22:e0:82:84:85:16:a5:59:03:80:af:ba:ff:
         d2:f3:0d:c5:5d:38:85:82:f1:30:5c:3e:27:ae:91:78:05:ff:
         dc:89:79:1b:43:33:cf:24:29:aa:f9:25:6c:49:79:1c:bd:12:
         f7:5a:d0:c1:6d:82:00:95:3c:de:dd:6f:b8:20:57:2d:b4:92:
         58:77:c1:ab:52:59:8d:05:07:e6:52:4e:55:aa:46:5d:f7:1e:
         dd:11:1d:38:1a:87:48:a5:e9:a7:43:0f:5d:30:1a:10:3e:33:
         3e:1a:89:8b:23:d9:10:47:03:10:91:27:be:14:90:40:40:e2:
         9f:17:cf:ad:5d:3e:74:e3:fe:e5:8a:65:ed:f3:f7:75:3a:11:
         75:85:36:a3:66:db:4c:de:34:73:61:20:a1:58:dc:40:16:99:
         f0:5e:08:21:2f:c9:59:29:01:f4:d9:e8:5a:e2:d9:68:c9:99:
         b0:ed:52:ec:05:63:bc:31:fb:4e:1f:99:d0:9c:3a:66:96:8e:
         56:c4:69:8e:af:36:54:b8:c9:45:6d:e1:3b:c2:30:12:41:35:
         42:25:c2:97:55:70:46:0b:f1:f6:70:ac:41:dd:43:39:aa:65:
         90:ec:29:5c:2b:50:57:12:b0:1a:20:d5:cf:b9:24:36:bb:fa:
         7d:bf:91:f0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:23 2026 by rpki-client