Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/AS38730.roa
File:                     AS38730.roa (raw, json)
Hash identifier:          R6GUDNjhj7Y2lemEXh2qBIc7qq98BsfLVSYfayFPICM=
Subject key identifier:   2E:F6:DA:6D:0D:F8:E6:6B:6E:0A:D5:88:25:B4:1D:47:6B:3B:55:5D
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       711A1962FAF863A65EC190B82886EF913DE97DFC
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/AS38730.roa
Signing time:             Wed 27 May 2026 07:20:00 +0000
ROA not before:           Wed 27 May 2026 07:15:00 +0000
ROA not after:            Wed 26 May 2027 07:20:00 +0000
asID:                     38730
IP address blocks:        121.46.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Jun 2026 23:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:1a:19:62:fa:f8:63:a6:5e:c1:90:b8:28:86:ef:91:3d:e9:7d:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: May 27 07:15:00 2026 GMT
            Not After : May 26 07:20:00 2027 GMT
        Subject: CN=2EF6DA6D0DF8E66B6E0AD58825B41D476B3B555D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d1:72:2e:b6:5a:b0:92:9c:9a:11:c8:9d:a6:
                    62:e3:44:ba:7f:66:43:34:40:cb:56:52:ea:25:0f:
                    80:90:97:c9:30:f9:e7:2f:64:a3:57:04:13:9b:ea:
                    a8:f9:37:02:dc:90:8b:df:b1:15:d4:e1:df:55:db:
                    d7:88:34:9c:5b:2d:d0:02:ef:86:9b:1d:10:73:35:
                    12:bd:5f:95:c1:1f:19:3f:bd:5c:4a:9b:91:3f:c0:
                    4f:ef:78:47:e4:f5:7b:09:e3:32:ce:73:a6:1a:1f:
                    65:4c:20:09:00:15:e7:df:9b:eb:e6:c0:ba:36:73:
                    a0:72:fa:ee:bb:65:e6:32:cf:b0:d6:90:a1:24:0c:
                    de:19:4e:e2:bb:a0:63:38:28:ff:c7:94:03:c3:75:
                    1a:66:a7:43:49:2e:3d:cb:69:4a:2d:1d:8d:93:1c:
                    6b:88:ac:f0:b5:a5:42:9e:8e:5b:11:b0:c4:26:45:
                    7b:ff:b7:de:35:8e:45:2a:47:48:12:d3:a8:fb:36:
                    41:07:5b:db:26:ee:eb:8e:98:39:23:5b:8f:15:f6:
                    d0:3d:dd:42:3c:f3:56:8a:1e:37:8e:ad:7e:01:5e:
                    7f:ec:86:16:71:ed:63:c5:00:2b:1e:2b:e5:84:39:
                    a6:f3:06:10:3c:af:db:1a:5e:4d:4b:9c:08:c8:e1:
                    77:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F6:DA:6D:0D:F8:E6:6B:6E:0A:D5:88:25:B4:1D:47:6B:3B:55:5D
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/AS38730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:68:e8:63:49:ff:79:7c:88:3d:29:0d:03:5b:91:fe:45:85:
         3d:b7:65:8c:e9:18:d6:d6:a2:01:ed:ae:e9:24:3d:54:96:70:
         f0:3f:e6:6a:14:ba:81:3c:54:71:ec:17:e2:e5:f9:15:b2:46:
         64:ee:29:cb:f3:16:9e:1c:83:d2:97:7a:80:e2:e5:b7:d7:67:
         ce:e1:00:12:d2:17:f5:e5:3b:d3:3a:5d:63:2a:1d:86:1b:4a:
         1e:b9:f9:7c:5a:74:57:2e:c0:e3:88:c3:5a:aa:6e:02:1b:45:
         51:95:79:2c:99:24:d0:8c:ff:f6:ad:a6:ec:1a:04:4d:4f:87:
         70:4b:53:59:28:74:58:91:63:e8:02:17:92:12:39:d8:5f:a1:
         ae:83:9a:0e:53:dc:29:d0:19:01:86:a9:d2:6a:0e:8f:64:e5:
         31:4d:e4:aa:54:56:1e:89:7e:fe:e1:09:76:e5:41:fd:87:0e:
         cc:aa:5d:bd:09:d4:66:78:3e:14:8c:25:2e:9c:25:32:97:ad:
         1e:b4:b9:55:aa:6f:fc:37:f1:4a:21:4e:01:c5:1e:2b:4d:e4:
         98:6d:4f:ca:9d:67:35:1d:a6:65:44:8b:21:15:3a:db:fa:b7:
         29:97:e9:d6:8a:2c:4f:d7:70:b3:92:60:11:7d:34:02:fc:e5:
         eb:2c:b3:38
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUcRoZYvr4Y6ZewZC4KIbvkT3pffwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVD
MUE4NjlFNjAeFw0yNjA1MjcwNzE1MDBaFw0yNzA1MjYwNzIwMDBaMDMxMTAvBgNV
BAMTKDJFRjZEQTZEMERGOEU2NkI2RTBBRDU4ODI1QjQxRDQ3NkIzQjU1NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM0XIutlqwkpyaEcidpmLjRLp/
ZkM0QMtWUuolD4CQl8kw+ecvZKNXBBOb6qj5NwLckIvfsRXU4d9V29eINJxbLdAC
74abHRBzNRK9X5XBHxk/vVxKm5E/wE/veEfk9XsJ4zLOc6YaH2VMIAkAFeffm+vm
wLo2c6By+u67ZeYyz7DWkKEkDN4ZTuK7oGM4KP/HlAPDdRpmp0NJLj3LaUotHY2T
HGuIrPC1pUKejlsRsMQmRXv/t941jkUqR0gS06j7NkEHW9sm7uuOmDkjW48V9tA9
3UI881aKHjeOrX4BXn/shhZx7WPFACseK+WEOabzBhA8r9saXk1LnAjI4XfxAgMB
AAGjggHjMIIB3zAdBgNVHQ4EFgQULvbabQ345mtuCtWIJbQdR2s7VV0wHwYDVR0j
BBgwFoAU4+DHdOOyvFh5DnSZg3pBVcGoaeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjI3NTMzMDc3NzM1MDE0Ni8wL0UzRTBDNzc0RTNCMkJDNTg3OTBFNzQ5OTgzN0E0
MTU1QzFBODY5RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVDMUE4NjlFNi5jZXIw
XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTYyNzUzMzA3NzczNTAxNDYvMC9BUzM4NzMwLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQCeS6cMA0GCSqGSIb3DQEBCwUAA4IBAQBiaOhjSf95fIg9KQ0DW5H+RYU9
t2WM6RjW1qIB7a7pJD1UlnDwP+ZqFLqBPFRx7Bfi5fkVskZk7inL8xaeHIPSl3qA
4uW312fO4QAS0hf15TvTOl1jKh2GG0oeufl8WnRXLsDjiMNaqm4CG0VRlXksmSTQ
jP/2rabsGgRNT4dwS1NZKHRYkWPoAheSEjnYX6Gug5oOU9wp0BkBhqnSag6PZOUx
TeSqVFYeiX7+4Ql25UH9hw7Mql29CdRmeD4UjCUunCUyl60etLlVqm/8N/FKIU4B
xR4rTeSYbU/KnWc1HaZlRIshFTrb+rcpl+nWiixP13CzkmARfTQC/OXrLLM4
-----END CERTIFICATE-----
Generated at Sat Jun 6 15:49:54 2026 by rpki-client