Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3232342e302f32322d3232203d3e2034383132.roa
File:                     3132312e34362e3232342e302f32322d3232203d3e2034383132.roa (raw, json)
Hash identifier:          yKAHVIn3NJVUHJeWRyBNQvW/+Ho4lCgMnLH+ppAs5Js=
Subject key identifier:   80:25:02:43:74:CC:87:EB:29:9F:00:72:1B:7A:B9:CA:4C:92:43:FC
Certificate issuer:       /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial:       0CAF26D1C0FD11457092F4BBAC1FA263ED6CA7DE
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3232342e302f32322d3232203d3e2034383132.roa
Signing time:             Mon 27 Apr 2026 07:56:56 +0000
ROA not before:           Mon 27 Apr 2026 07:51:56 +0000
ROA not after:            Mon 26 Apr 2027 07:56:56 +0000
asID:                     4812
IP address blocks:        121.46.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:af:26:d1:c0:fd:11:45:70:92:f4:bb:ac:1f:a2:63:ed:6c:a7:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
        Validity
            Not Before: Apr 27 07:51:56 2026 GMT
            Not After : Apr 26 07:56:56 2027 GMT
        Subject: CN=8025024374CC87EB299F00721B7AB9CA4C9243FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:eb:45:33:dc:3d:14:1e:f5:88:f9:29:fe:85:
                    6c:e3:3e:0a:f3:f6:86:8f:24:ce:f9:8f:d6:4c:70:
                    3c:c7:9b:c7:0c:7d:f6:ff:21:7a:a2:be:96:d8:ed:
                    9c:06:db:8b:7f:5b:ce:4d:2e:40:ee:c8:54:ed:7b:
                    45:bb:7c:64:d9:b6:bb:0c:c3:3c:05:96:f1:61:1a:
                    8a:34:7f:31:8a:33:c0:ad:63:e9:d3:3b:74:99:00:
                    f5:ee:fd:d4:68:40:de:62:9c:a9:09:4b:75:30:86:
                    fc:0a:39:d4:7c:f0:42:69:14:3f:db:c7:91:ef:44:
                    fb:84:65:c9:88:1b:49:e1:2e:fc:ab:28:5c:ab:ff:
                    1d:4d:18:6b:38:73:3a:6d:7b:fa:07:cc:a7:f0:dc:
                    7e:80:f3:8e:84:5b:dd:6c:96:91:b2:e0:9e:bf:69:
                    fa:4a:d9:32:6a:47:33:39:62:75:e8:f8:a0:20:97:
                    0d:8e:3b:eb:2e:69:8e:2f:6c:ba:44:ee:87:da:30:
                    0d:f2:7d:5d:94:7e:6e:93:19:58:22:2d:28:7f:79:
                    e6:2e:b1:e7:ec:6a:f4:e4:73:d2:16:02:79:2e:25:
                    0b:14:41:a9:b7:11:19:8b:a1:4f:f4:29:9b:d2:5e:
                    a5:04:a8:0c:6a:9f:70:85:17:a9:ec:67:1c:67:22:
                    88:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:25:02:43:74:CC:87:EB:29:9F:00:72:1B:7A:B9:CA:4C:92:43:FC
            X509v3 Authority Key Identifier:
                keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3232342e302f32322d3232203d3e2034383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:fb:68:07:db:75:5b:a8:7a:a1:25:3c:c3:2f:e3:cb:f1:8b:
         16:95:6e:35:d6:0b:e6:6a:01:cc:2b:ec:bd:d0:70:2e:0e:50:
         22:39:67:d7:20:04:b6:41:7a:14:97:2c:0f:39:8b:4c:1a:c3:
         85:1a:f1:65:4f:ac:be:4f:4d:79:5e:f2:3b:ef:cc:f9:97:b9:
         19:c3:05:8c:85:93:61:d0:eb:bd:80:a7:d2:4a:ce:5e:af:2e:
         9a:e6:65:60:99:37:89:9b:31:e3:d2:a3:81:99:f6:7b:bf:f6:
         d4:f7:8c:45:bc:06:7a:61:14:69:93:3a:67:70:f9:4c:a6:42:
         3a:23:18:6c:dc:a6:99:c3:ad:76:6f:0d:d1:82:38:3d:54:32:
         fb:9f:9e:07:12:e7:b7:f5:91:9d:12:b3:d4:ba:9b:19:cd:e5:
         f4:46:8b:90:47:89:57:71:a9:74:50:f9:44:b9:a6:4d:f9:f2:
         92:9c:14:f2:be:f4:75:0f:50:5e:73:de:3f:c1:7b:6c:77:d5:
         2a:ec:6f:ba:bd:64:70:37:43:d1:ab:72:7b:de:fc:47:f0:d2:
         dd:84:6f:12:fb:7a:37:63:fe:5d:42:74:d7:35:c4:eb:b8:ff:
         36:10:3e:d3:fb:d9:a1:91:59:a8:7c:c3:d1:a4:8e:7c:c6:e8:
         d8:03:92:5e
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUDK8m0cD9EUVwkvS7rB+iY+1sp94wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE4OThCM0U0RUJCNEM1NzdGNzZCQkQ3RjBENzUxRjg1
MDVBREQ5NDAeFw0yNjA0MjcwNzUxNTZaFw0yNzA0MjYwNzU2NTZaMDMxMTAvBgNV
BAMTKDgwMjUwMjQzNzRDQzg3RUIyOTlGMDA3MjFCN0FCOUNBNEM5MjQzRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa60Uz3D0UHvWI+Sn+hWzjPgrz
9oaPJM75j9ZMcDzHm8cMffb/IXqivpbY7ZwG24t/W85NLkDuyFTte0W7fGTZtrsM
wzwFlvFhGoo0fzGKM8CtY+nTO3SZAPXu/dRoQN5inKkJS3UwhvwKOdR88EJpFD/b
x5HvRPuEZcmIG0nhLvyrKFyr/x1NGGs4czpte/oHzKfw3H6A846EW91slpGy4J6/
afpK2TJqRzM5YnXo+KAglw2OO+suaY4vbLpE7ofaMA3yfV2Ufm6TGVgiLSh/eeYu
sefsavTkc9IWAnkuJQsUQam3ERmLoU/0KZvSXqUEqAxqn3CFF6nsZxxnIohTAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUgCUCQ3TMh+spnwByG3q5ykySQ/wwHwYDVR0j
BBgwFoAUaomLPk67TFd/drvX8NdR+FBa3ZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzQwNTExNTI2ODA3MTQyNy8wLzZBODk4QjNFNEVCQjRDNTc3Rjc2QkJEN0YwRDc1
MUY4NTA1QUREOTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkE4OThCM0U0RUJCNEM1NzdGNzZCQkQ3RjBENzUxRjg1MDVBREQ5NC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk3NDA1MTE1MjY4MDcxNDI3LzAvMzEzMjMxMmUzNDM2
MmUzMjMyMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzEzMi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAnku4DANBgkqhkiG9w0BAQsFAAOCAQEAlPtoB9t1W6h6oSU8wy/jy/GLFpVu
NdYL5moBzCvsvdBwLg5QIjln1yAEtkF6FJcsDzmLTBrDhRrxZU+svk9NeV7yO+/M
+Ze5GcMFjIWTYdDrvYCn0krOXq8umuZlYJk3iZsx49KjgZn2e7/21PeMRbwGemEU
aZM6Z3D5TKZCOiMYbNymmcOtdm8N0YI4PVQy+5+eBxLnt/WRnRKz1LqbGc3l9EaL
kEeJV3GpdFD5RLmmTfnykpwU8r70dQ9QXnPeP8F7bHfVKuxvur1kcDdD0atye978
R/DS3YRvEvt6N2P+XUJ01zXE67j/NhA+0/vZoZFZqHzD0aSOfMbo2AOSXg==
-----END CERTIFICATE-----
Generated at Wed May 13 07:52:36 2026 by rpki-client