Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3232382e302f32332d3233203d3e2034383131.roa
File:                     3132312e34362e3232382e302f32332d3233203d3e2034383131.roa (raw, json)
Hash identifier:          TBV0rA9ZmBSUANRyc1CQcvo6lPmJXx2ohYh8pyszCa4=
Subject key identifier:   0A:BA:02:CB:08:22:05:BE:71:6C:9D:CC:74:D2:40:FC:C1:0E:E8:4C
Certificate issuer:       /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial:       307427A6EF7C11CAD29A8ADFF092A9CF9F4497CF
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3232382e302f32332d3233203d3e2034383131.roa
Signing time:             Mon 27 Apr 2026 07:58:00 +0000
ROA not before:           Mon 27 Apr 2026 07:53:00 +0000
ROA not after:            Mon 26 Apr 2027 07:58:00 +0000
asID:                     4811
IP address blocks:        121.46.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:74:27:a6:ef:7c:11:ca:d2:9a:8a:df:f0:92:a9:cf:9f:44:97:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
        Validity
            Not Before: Apr 27 07:53:00 2026 GMT
            Not After : Apr 26 07:58:00 2027 GMT
        Subject: CN=0ABA02CB082205BE716C9DCC74D240FCC10EE84C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:40:5b:85:e7:c0:d6:6b:8c:72:63:13:ba:f5:
                    2f:4f:f7:57:49:bc:f6:fa:6e:df:40:60:58:3a:47:
                    4e:fe:8b:6c:d6:bf:5a:a4:a3:d7:29:1f:2f:64:a3:
                    58:c0:08:35:d3:7b:13:69:41:0d:f8:2c:fb:f5:f6:
                    7c:95:9b:70:15:6c:f3:dd:0b:dc:e1:2e:1e:e7:79:
                    a1:f9:90:9d:a1:30:3e:2e:2f:48:6c:8e:7e:5d:30:
                    a7:cd:15:6e:ad:98:c3:86:84:a9:18:f9:18:f3:c5:
                    1d:fc:94:81:72:15:52:21:71:e5:d7:45:d4:32:ce:
                    00:75:a5:f6:aa:57:18:9c:18:fd:89:83:76:1f:88:
                    09:05:f5:5c:01:d1:50:d8:c1:99:49:fb:4f:54:c2:
                    9c:b2:14:09:2a:a4:48:94:d6:88:18:3a:a4:6e:d4:
                    fd:14:55:1e:6f:01:a2:1a:29:79:17:d4:da:a3:b3:
                    8a:4b:29:8a:6c:96:81:5e:b9:56:8d:0a:b2:28:83:
                    f2:96:8c:7e:01:1e:08:df:1a:f1:40:67:37:5e:7a:
                    54:39:fe:11:c3:6d:5e:af:9e:85:2f:c2:33:2d:2e:
                    53:df:c5:a2:59:04:cb:d9:b2:2b:f6:4a:81:4d:66:
                    9c:27:0e:24:73:13:bf:bf:1c:0f:bd:e1:d2:70:3b:
                    6e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BA:02:CB:08:22:05:BE:71:6C:9D:CC:74:D2:40:FC:C1:0E:E8:4C
            X509v3 Authority Key Identifier:
                keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3232382e302f32332d3233203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:fb:a4:ea:b9:f4:36:62:83:29:b6:83:e5:c2:f9:0e:27:fd:
         b4:ee:44:d6:0f:54:f9:4a:0e:98:73:d4:3e:fa:d0:c8:15:6f:
         91:f3:02:3c:cb:41:a5:ae:09:01:16:47:9d:78:17:a0:26:8b:
         f0:74:7d:e6:d8:66:62:cb:60:8f:fd:60:47:9e:8b:13:b7:56:
         2f:92:ec:cb:8e:a9:ad:ee:23:d6:5f:a7:30:03:1d:f0:b2:6e:
         04:fc:5f:d9:03:56:34:8b:05:fd:c0:f4:e5:55:82:01:69:dd:
         1d:7d:f9:ae:f8:82:ad:c8:45:c9:a1:a8:61:19:38:15:a0:ac:
         b1:da:6b:a6:18:a1:a8:78:2e:cc:05:d5:84:aa:cd:d2:51:d0:
         cb:0a:81:07:ef:28:68:5a:ff:b3:4a:b0:88:47:6d:40:5a:80:
         9d:4a:c7:9e:f0:79:0b:ed:20:25:c7:cd:f3:1e:0d:48:da:ae:
         a4:2c:be:f0:4c:9b:33:fd:5d:c2:13:45:1c:71:91:e1:b1:30:
         52:11:9e:98:a9:6c:7a:df:61:6a:2e:a6:d7:d6:d8:3c:fd:c0:
         60:2c:f7:5e:84:0a:84:c7:ce:d3:56:d3:ba:a0:51:80:49:20:
         cd:b5:00:6a:b0:2d:48:2a:12:f0:9f:a4:a3:f3:c7:0d:9f:a6:
         78:62:f7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:02:02 2026 by rpki-client