Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e33302e302f32332d3233203d3e20313335333931.roa
File:                     3132312e34362e33302e302f32332d3233203d3e20313335333931.roa (raw, json)
Hash identifier:          yWlFM0CoZAYUaouhFoQ3m+cujN+5VmN7SEmJEaEfNdc=
Subject key identifier:   FE:55:C7:66:04:D3:61:C7:F5:92:1A:C8:D4:5D:71:71:4B:66:30:DC
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       0E739B790187AF8791D0C0261F31C58375AE1062
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e33302e302f32332d3233203d3e20313335333931.roa
Signing time:             Mon 20 Apr 2026 06:38:07 +0000
ROA not before:           Mon 20 Apr 2026 06:33:07 +0000
ROA not after:            Mon 19 Apr 2027 06:38:07 +0000
asID:                     135391
IP address blocks:        121.46.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 06:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:73:9b:79:01:87:af:87:91:d0:c0:26:1f:31:c5:83:75:ae:10:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 20 06:33:07 2026 GMT
            Not After : Apr 19 06:38:07 2027 GMT
        Subject: CN=FE55C76604D361C7F5921AC8D45D71714B6630DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:71:cb:db:10:0d:98:27:86:99:ce:d6:34:1f:
                    d9:34:b9:b7:be:f3:eb:8a:86:0f:02:b6:76:43:91:
                    37:4f:66:f6:98:2f:15:77:d8:03:5f:1a:1a:70:d4:
                    16:01:60:26:e0:5a:bb:88:85:20:ac:d0:6f:0a:3e:
                    d3:9a:93:60:dc:1d:04:a0:20:d2:a6:02:b9:22:dc:
                    cd:b3:ea:75:a3:8e:9e:9c:05:e3:4d:c5:e3:60:d1:
                    b4:e6:b4:4f:9a:89:65:a5:54:28:cb:05:83:58:99:
                    87:53:a0:c1:53:7b:99:9d:93:93:90:41:ad:0b:43:
                    6a:b0:5d:bd:88:e7:7d:64:af:2c:76:4a:26:1d:82:
                    e9:25:b0:47:9c:b8:d5:7c:4a:be:f1:96:e1:2a:00:
                    be:47:96:20:90:9b:95:dc:e3:74:99:ef:55:e1:69:
                    a0:97:91:69:74:d6:4b:89:75:16:2f:ad:65:50:2e:
                    69:8c:8b:01:25:86:ab:b6:fe:a3:0a:83:d1:f4:63:
                    af:af:58:c6:20:d4:af:f6:33:09:02:34:2b:2d:4e:
                    3d:c9:18:12:08:d6:e5:13:36:14:17:f7:20:76:f6:
                    4e:df:18:33:80:45:25:ae:ff:6d:ee:2e:5b:4f:67:
                    8e:a6:66:75:e3:5d:9a:90:38:6b:52:61:10:07:33:
                    62:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:55:C7:66:04:D3:61:C7:F5:92:1A:C8:D4:5D:71:71:4B:66:30:DC
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e33302e302f32332d3233203d3e20313335333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cf:d0:35:6f:e5:5b:f2:2b:12:c5:cd:88:46:81:29:76:21:6a:
         37:c6:1c:30:25:ec:84:52:f0:08:22:8e:b4:8a:dc:7e:6e:e0:
         61:60:58:a9:53:9f:b9:47:d2:dd:05:14:f9:91:f6:8d:6e:e4:
         c4:36:81:75:01:39:a6:07:37:a5:10:6a:52:68:40:15:4e:68:
         54:22:57:11:38:d3:d5:4c:0c:68:2c:75:19:a1:6c:0f:19:9c:
         2d:22:db:32:68:ca:fd:47:08:ca:60:7a:b0:b3:82:91:0d:be:
         4a:f0:09:c9:45:33:2a:3a:c5:85:b6:3b:b1:03:57:cb:15:d0:
         3d:5e:e3:da:f1:ba:ba:8a:b7:d5:d3:99:f9:2a:cf:53:b0:cf:
         c2:43:68:64:5b:da:29:67:c5:62:e4:07:90:b6:ee:9e:ca:1f:
         23:fd:60:84:a9:07:6b:eb:10:41:8d:1e:fc:b1:4d:98:2b:4d:
         63:d6:98:61:0a:50:ff:9d:c5:a0:be:cf:b4:55:74:8d:8f:4d:
         19:4e:29:5c:24:7c:15:40:89:f9:df:3c:d8:04:1f:1b:1e:ed:
         31:38:55:26:0f:28:4a:29:eb:79:c9:50:f0:2c:ff:fd:14:21:
         d8:c1:92:9c:b0:6c:02:92:a6:4a:06:aa:1d:e7:c6:8b:84:33:
         6a:d2:c1:5e
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUDnObeQGHr4eR0MAmHzHFg3WuEGIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVD
MUE4NjlFNjAeFw0yNjA0MjAwNjMzMDdaFw0yNzA0MTkwNjM4MDdaMDMxMTAvBgNV
BAMTKEZFNTVDNzY2MDREMzYxQzdGNTkyMUFDOEQ0NUQ3MTcxNEI2NjMwREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfccvbEA2YJ4aZztY0H9k0ube+
8+uKhg8CtnZDkTdPZvaYLxV32ANfGhpw1BYBYCbgWruIhSCs0G8KPtOak2DcHQSg
INKmArki3M2z6nWjjp6cBeNNxeNg0bTmtE+aiWWlVCjLBYNYmYdToMFTe5mdk5OQ
Qa0LQ2qwXb2I531kryx2SiYdguklsEecuNV8Sr7xluEqAL5HliCQm5Xc43SZ71Xh
aaCXkWl01kuJdRYvrWVQLmmMiwElhqu2/qMKg9H0Y6+vWMYg1K/2MwkCNCstTj3J
GBII1uUTNhQX9yB29k7fGDOARSWu/23uLltPZ46mZnXjXZqQOGtSYRAHM2I1AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU/lXHZgTTYcf1khrI1F1xcUtmMNwwHwYDVR0j
BBgwFoAU4+DHdOOyvFh5DnSZg3pBVcGoaeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjI3NTMzMDc3NzM1MDE0Ni8wL0UzRTBDNzc0RTNCMkJDNTg3OTBFNzQ5OTgzN0E0
MTU1QzFBODY5RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVDMUE4NjlFNi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NjI3NTMzMDc3NzM1MDE0Ni8wLzMxMzIzMTJlMzQz
NjJlMzMzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzMzNTMzMzkzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAXkuHjANBgkqhkiG9w0BAQsFAAOCAQEAz9A1b+Vb8isSxc2IRoEpdiFq
N8YcMCXshFLwCCKOtIrcfm7gYWBYqVOfuUfS3QUU+ZH2jW7kxDaBdQE5pgc3pRBq
UmhAFU5oVCJXETjT1UwMaCx1GaFsDxmcLSLbMmjK/UcIymB6sLOCkQ2+SvAJyUUz
KjrFhbY7sQNXyxXQPV7j2vG6uoq31dOZ+SrPU7DPwkNoZFvaKWfFYuQHkLbunsof
I/1ghKkHa+sQQY0e/LFNmCtNY9aYYQpQ/53FoL7PtFV0jY9NGU4pXCR8FUCJ+d88
2AQfGx7tMThVJg8oSinreclQ8Cz//RQh2MGSnLBsApKmSgaqHefGi4QzatLBXg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:25 2026 by rpki-client