Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32382e302f32322d3232203d3e203536303430.roa
File:                     3132312e34362e32382e302f32322d3232203d3e203536303430.roa (raw, json)
Hash identifier:          24lTE6+jGWraSvt0EdSohOUC/8HWGD/N+vgr1eNNrpY=
Subject key identifier:   6B:31:F6:D2:30:75:BA:1D:D6:23:A8:85:55:2A:47:2A:3F:91:4E:56
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       676E9AF0E1117C334DD3A02F1440874AE77BAF3D
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32382e302f32322d3232203d3e203536303430.roa
Signing time:             Mon 20 Apr 2026 06:38:07 +0000
ROA not before:           Mon 20 Apr 2026 06:33:07 +0000
ROA not after:            Mon 19 Apr 2027 06:38:07 +0000
asID:                     56040
IP address blocks:        121.46.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 06:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:6e:9a:f0:e1:11:7c:33:4d:d3:a0:2f:14:40:87:4a:e7:7b:af:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 20 06:33:07 2026 GMT
            Not After : Apr 19 06:38:07 2027 GMT
        Subject: CN=6B31F6D23075BA1DD623A885552A472A3F914E56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e2:b4:cc:70:fb:d8:3e:7c:3a:e1:29:59:d4:
                    1f:65:e9:2d:b1:8f:19:d9:f4:7e:ed:2d:e7:25:8a:
                    13:d2:00:ab:b3:a0:e1:2d:96:8d:77:59:07:00:1e:
                    8e:fa:d9:e3:f2:b6:87:6f:62:34:78:78:aa:12:c5:
                    fc:f3:af:f1:66:5f:8a:c5:ef:2d:56:28:07:5c:16:
                    ed:cc:6f:8f:a4:b1:2b:59:8b:a9:b2:c4:f4:ea:d0:
                    8c:50:12:94:9f:c7:f9:97:ce:a8:c0:b3:0b:ed:ec:
                    30:32:c2:e1:30:68:d7:f5:d0:f0:a8:7b:ed:e0:4a:
                    16:9d:da:78:56:1a:91:6a:14:cc:31:43:c0:8a:78:
                    20:cf:49:95:b2:c1:c9:83:d8:a0:51:2d:83:a0:27:
                    a4:fc:24:56:a9:13:e7:03:ac:e6:01:5b:5b:b3:16:
                    e0:04:9e:d2:85:37:b4:08:2a:72:1d:cd:d1:73:83:
                    cb:d9:ef:5b:44:de:70:20:a3:85:65:c8:19:7a:38:
                    04:ca:15:02:9a:ec:0f:1f:89:06:f1:62:3b:35:f8:
                    e3:31:5e:23:a7:d3:f6:44:59:6c:13:13:c2:ec:81:
                    7f:25:92:70:51:0a:f0:8d:f8:b6:b0:eb:cd:d5:13:
                    32:17:5b:e1:85:e3:2b:d2:d4:f8:77:83:a9:3b:e6:
                    c4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:31:F6:D2:30:75:BA:1D:D6:23:A8:85:55:2A:47:2A:3F:91:4E:56
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e32382e302f32322d3232203d3e203536303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:7d:10:1b:8b:2e:21:f6:94:7b:34:48:c0:b1:b6:11:8c:8a:
         86:62:ab:09:a9:fb:6b:2b:20:12:34:03:d2:d4:43:47:be:96:
         b2:d3:7a:21:14:e2:d6:8e:30:86:fb:c0:db:4e:80:62:7b:27:
         35:93:be:7f:31:84:6a:ba:cc:ce:4a:13:db:20:0a:f9:cf:29:
         ba:f2:14:f4:12:b3:fc:fb:26:22:58:36:2f:80:68:a7:de:ee:
         9b:78:96:c4:ab:2b:52:e1:77:3e:49:1e:db:f5:ad:bf:a6:02:
         7a:c2:06:68:cf:91:1b:2d:96:90:0f:d7:ce:40:93:07:db:41:
         d5:0e:22:a1:23:2c:6e:5f:f6:1c:df:db:f1:ca:e9:66:4c:dc:
         9b:5b:fd:02:20:e9:f1:c4:26:e7:5b:2a:df:e9:7d:88:ec:0c:
         d8:33:95:6e:84:d0:af:ce:7b:4e:7d:0f:f3:e7:51:60:e7:1a:
         fb:11:e2:f3:97:aa:3b:57:e6:1b:8e:71:5f:42:a2:49:ab:84:
         d6:44:82:13:23:62:f4:72:d8:7a:86:21:c7:fd:77:0d:7f:cb:
         1f:25:31:0d:4c:f3:c0:87:c6:99:a7:1b:76:7f:67:53:77:40:
         20:36:7a:0c:fc:5b:c3:be:a3:fa:31:95:c7:06:21:71:a8:ff:
         f2:e7:f4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:25 2026 by rpki-client