Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32302e302f32322d3232203d3e203536303430.roa
File:                     3132312e34362e32302e302f32322d3232203d3e203536303430.roa (raw, json)
Hash identifier:          RmCaVdbGBpvDXCg5DT86IwDQ2sb8oACfnuoOr0gGIuo=
Subject key identifier:   95:AE:7D:AB:52:C0:EF:3E:85:E7:9D:EA:BB:16:A0:65:63:CA:DC:C6
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       29AA8AE6F202182BC5EB93A0A416C019ECFB6985
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32302e302f32322d3232203d3e203536303430.roa
Signing time:             Mon 20 Apr 2026 06:29:06 +0000
ROA not before:           Mon 20 Apr 2026 06:24:06 +0000
ROA not after:            Mon 19 Apr 2027 06:29:06 +0000
asID:                     56040
IP address blocks:        121.46.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 06:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:aa:8a:e6:f2:02:18:2b:c5:eb:93:a0:a4:16:c0:19:ec:fb:69:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 20 06:24:06 2026 GMT
            Not After : Apr 19 06:29:06 2027 GMT
        Subject: CN=95AE7DAB52C0EF3E85E79DEABB16A06563CADCC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:14:ed:e8:18:1f:28:46:5f:a7:77:91:cf:e8:
                    05:1e:60:c6:f7:a6:0a:f8:3b:d9:d5:6a:b1:13:6c:
                    15:1d:e0:0b:44:fd:37:70:0e:01:7c:7b:57:76:64:
                    8b:69:41:00:43:4c:66:50:60:f4:06:3e:ec:11:d0:
                    bb:c4:af:6f:91:85:9b:f7:86:6a:9a:a3:1d:f9:81:
                    4c:14:9e:1e:8c:71:1d:8c:08:2f:17:c9:2b:8a:3f:
                    49:71:03:94:cb:34:08:cc:86:30:a2:d7:72:0f:9c:
                    0f:73:3e:d4:74:ad:5b:e4:bf:5a:15:e4:5f:1e:cc:
                    86:ce:5d:65:6e:2a:11:55:ca:48:fa:09:c6:cc:15:
                    7b:69:09:70:26:9d:5e:be:72:d7:81:81:21:49:f2:
                    22:73:1a:b1:34:dc:e2:79:a4:89:6b:b2:ea:f8:f8:
                    46:29:45:8e:04:a7:3e:82:05:b2:e3:4e:3d:1b:96:
                    32:88:11:ab:98:3d:16:69:bb:d1:3c:ff:56:72:df:
                    88:1d:c2:3d:5b:90:e8:4f:e8:f2:23:7d:b5:f5:96:
                    2f:66:5f:23:b4:13:f2:f5:3e:f3:47:0e:a7:52:b0:
                    e3:b5:c2:57:c7:0f:5a:7d:a2:dc:87:2e:59:bd:cc:
                    69:e2:f4:6f:5f:4a:c2:4c:35:1c:a7:2b:68:3c:0d:
                    05:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AE:7D:AB:52:C0:EF:3E:85:E7:9D:EA:BB:16:A0:65:63:CA:DC:C6
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32302e302f32322d3232203d3e203536303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:ff:b3:1d:fa:7c:9c:44:08:8b:0d:d3:8c:e4:6b:96:07:eb:
         9b:2f:0e:24:f2:7c:b2:56:59:aa:6c:0c:34:86:2c:b4:fd:ea:
         aa:22:ca:f0:cd:66:62:23:87:a5:08:10:c6:6d:22:e7:4e:57:
         84:b0:a4:20:2d:87:40:ea:06:42:5e:48:df:53:b8:de:c6:60:
         7b:95:ef:4a:0c:28:10:19:26:8b:c3:ec:49:6a:b3:bc:08:56:
         14:0f:cf:cf:30:a7:0b:e2:e4:a9:4c:d5:3a:7f:05:c3:8a:c6:
         20:c5:d8:c2:2f:1a:36:33:94:4e:31:ba:92:b5:b0:75:8a:24:
         4e:2b:a4:4d:26:f5:ad:b3:af:cc:7d:26:3a:02:54:99:58:6c:
         b9:f9:e3:46:39:06:46:74:ba:2d:18:db:08:13:3b:98:6d:10:
         6c:f3:f4:11:f1:7b:44:d3:9c:dc:6e:9e:61:e3:7e:5e:79:23:
         ef:5e:c6:77:7e:c7:e7:f1:bb:2c:aa:1d:a6:ad:66:04:98:de:
         b0:11:dd:f6:fe:1c:6e:41:e0:c4:87:27:fe:18:a2:3b:d5:6d:
         8e:38:f0:9c:cf:6d:d0:82:d0:00:dd:e4:42:de:87:8c:97:3f:
         1f:19:9d:ef:1a:80:19:be:40:ae:ad:ca:8a:40:0d:a1:e6:b1:
         ed:80:16:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:25 2026 by rpki-client