Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3232362e302f32332d3233203d3e2034383131.roa
File:                     3132312e34362e3232362e302f32332d3233203d3e2034383131.roa (raw, json)
Hash identifier:          TE+nHvbai0rOmuiAoOp6hiRQdCcjZDZicZ84eL8lEVU=
Subject key identifier:   67:D7:3E:53:A3:7A:48:52:81:A8:EF:BC:F2:B8:DE:23:0B:75:CE:20
Certificate issuer:       /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial:       1232429772393EAE9F2A77582F85714923588C88
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3232362e302f32332d3233203d3e2034383131.roa
Signing time:             Sun 23 Aug 2026 15:03:29 +0000
ROA not before:           Sun 23 Aug 2026 14:58:29 +0000
ROA not after:            Sun 22 Aug 2027 15:03:29 +0000
asID:                     4811
IP address blocks:        121.46.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 10:44:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:32:42:97:72:39:3e:ae:9f:2a:77:58:2f:85:71:49:23:58:8c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
        Validity
            Not Before: Aug 23 14:58:29 2026 GMT
            Not After : Aug 22 15:03:29 2027 GMT
        Subject: CN=67D73E53A37A485281A8EFBCF2B8DE230B75CE20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:39:de:65:0c:f7:55:03:4f:af:67:e0:73:55:
                    b9:17:4b:c9:8e:3e:2c:6a:ef:cb:f5:c2:ce:0e:89:
                    5c:d7:e5:a2:2c:2e:46:55:3f:46:dd:a1:1c:97:a6:
                    6a:dc:bf:a6:5e:dd:7f:b4:5c:89:e9:5e:3a:02:e0:
                    59:1d:f6:72:39:45:6e:a7:84:19:dc:6d:3b:cb:f6:
                    5f:2a:13:1d:fc:18:71:3e:78:46:a5:c8:52:92:78:
                    2b:d5:df:ec:3d:4e:67:74:9d:34:8c:58:2e:a8:82:
                    f8:d9:77:4b:19:5f:b3:07:a5:14:60:5d:30:9a:3b:
                    37:f1:e2:7b:e4:4f:d6:e8:3e:c4:4c:be:74:f1:4a:
                    0d:c7:b0:f5:67:cd:f6:59:fb:52:12:7b:7f:eb:5a:
                    8b:fb:66:ca:da:e3:94:b2:79:80:ef:5b:2d:97:1f:
                    69:a6:b6:fe:f9:c0:b3:a3:f1:64:4b:72:34:89:24:
                    0c:a2:6e:b7:57:8c:ae:03:f0:55:c9:5c:9c:f5:26:
                    12:e9:8f:ac:69:f2:cd:09:3d:a9:1a:22:df:25:9b:
                    f7:84:7d:c0:99:d9:40:31:b8:63:b3:19:69:44:6c:
                    12:44:d0:50:d0:6e:65:03:b8:37:a2:e6:8d:01:c5:
                    91:b6:1c:c0:ea:a1:28:8a:62:46:6f:95:4d:fb:35:
                    6c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D7:3E:53:A3:7A:48:52:81:A8:EF:BC:F2:B8:DE:23:0B:75:CE:20
            X509v3 Authority Key Identifier:
                keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3232362e302f32332d3233203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:1b:0f:12:10:35:f1:51:c2:bf:05:24:fb:8e:2b:6c:0b:f0:
         25:77:0c:f4:6c:5e:e4:a0:c1:d3:51:4c:57:d9:db:87:71:b2:
         1e:2e:d6:d1:b3:2c:02:18:33:a7:e2:15:dd:61:fb:7f:e7:1b:
         fa:18:a2:54:2a:08:0a:17:e2:f0:5c:44:d5:93:46:76:c1:6c:
         7b:bc:4f:6c:ab:fe:01:6e:67:e6:de:80:bf:a0:a1:38:a1:3a:
         8f:12:4a:69:b5:52:f0:78:c5:57:19:74:43:bb:59:80:88:46:
         6b:cb:ba:a8:80:1d:6f:cc:a2:0a:b1:23:e7:6c:8a:2e:ae:9b:
         ea:1d:4d:05:c3:c5:67:0b:9d:78:b4:d1:50:50:5f:83:08:c3:
         eb:8e:83:ae:c1:61:c5:0f:01:af:50:a7:ae:3b:77:82:31:78:
         1f:7b:df:08:f7:6a:09:2f:a0:c4:08:ae:e6:5f:a1:8f:e4:8e:
         28:93:d2:c2:75:f4:2d:a8:9e:2f:1f:44:1b:7d:28:2a:15:b5:
         2d:16:7f:26:d3:3b:47:88:60:02:67:f5:bb:4c:01:85:ff:4f:
         60:5a:a1:3c:9e:af:10:4f:8e:22:fa:c6:14:08:32:98:32:5e:
         81:b0:f5:50:af:3e:13:a0:0e:e3:73:1d:d0:be:9d:ff:53:ff:
         34:60:1e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:43:22 2026 by rpki-client