Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3233302e302f32332d3233203d3e2034383131.roa
File:                     3132312e34362e3233302e302f32332d3233203d3e2034383131.roa (raw, json)
Hash identifier:          EiA+BqlbegLoPMI7F5c+3foAfHhrJkLe37gcyYaiUmY=
Subject key identifier:   94:B9:CC:F6:6E:36:58:38:48:3E:E6:AC:DE:CB:3D:E0:30:27:CD:FB
Certificate issuer:       /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial:       07ADBD569B54825E20BC1A8C4DBEA5EC20A40FFD
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3233302e302f32332d3233203d3e2034383131.roa
Signing time:             Mon 27 Apr 2026 07:58:01 +0000
ROA not before:           Mon 27 Apr 2026 07:53:01 +0000
ROA not after:            Mon 26 Apr 2027 07:58:01 +0000
asID:                     4811
IP address blocks:        121.46.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ad:bd:56:9b:54:82:5e:20:bc:1a:8c:4d:be:a5:ec:20:a4:0f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
        Validity
            Not Before: Apr 27 07:53:01 2026 GMT
            Not After : Apr 26 07:58:01 2027 GMT
        Subject: CN=94B9CCF66E365838483EE6ACDECB3DE03027CDFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6c:5d:50:ab:5c:4e:11:9a:d9:66:34:da:84:
                    75:d9:96:d4:37:2a:48:1f:db:48:39:83:6a:e4:9b:
                    2e:e1:bc:14:d1:84:dd:2a:0b:b0:45:01:87:5a:5b:
                    49:c7:8f:30:e3:a1:b7:97:08:91:de:67:5f:e8:95:
                    76:c8:58:52:88:9f:a7:08:3c:99:b0:08:db:e4:02:
                    8f:09:8c:1f:25:1d:ae:59:1f:bd:73:9f:e6:65:a2:
                    cf:9f:1b:67:25:e8:be:51:df:6f:28:20:e0:78:fd:
                    cf:fb:0b:e7:3c:97:ae:a2:26:fc:97:3e:b8:2d:ae:
                    a7:5f:3c:36:33:d9:a7:88:c8:1e:dc:62:d7:2a:f7:
                    a7:d0:95:22:71:03:f5:50:7e:2c:aa:c9:a8:b8:cd:
                    75:0b:0f:fc:7b:ad:81:2a:28:96:bd:43:98:47:23:
                    67:fe:b5:2f:3e:7f:53:72:d6:7b:0c:88:7d:6d:ab:
                    2d:31:d4:70:05:3e:d1:e2:b9:7d:70:71:e4:e0:2c:
                    a5:2f:87:97:54:d2:18:c6:5e:25:dc:ce:69:9e:5c:
                    47:07:6a:04:7d:8d:ee:a9:b9:e1:0b:97:91:93:3f:
                    fe:30:90:ba:b8:38:04:7d:ec:2e:ef:46:25:b4:32:
                    32:e1:14:d6:81:6a:75:c1:b5:30:6f:f5:fb:87:52:
                    ac:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B9:CC:F6:6E:36:58:38:48:3E:E6:AC:DE:CB:3D:E0:30:27:CD:FB
            X509v3 Authority Key Identifier:
                keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3233302e302f32332d3233203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:d3:0f:3c:fd:bf:66:1e:37:bb:4f:79:49:6b:9e:6b:28:0f:
         dd:ec:b8:99:4e:f2:bc:c4:a3:12:c1:68:9b:d1:de:65:6a:88:
         c1:02:c0:e5:01:81:68:4f:7e:ab:7b:bc:bc:b0:66:9d:d6:37:
         cf:68:3c:63:48:c0:2e:2a:22:f7:da:e9:71:f4:f6:e9:03:d8:
         96:f0:65:58:86:97:c8:58:1b:b2:65:3f:2a:f6:1d:5f:b0:07:
         57:bd:7a:1f:d4:7f:60:e0:18:e8:1e:c2:4a:e4:4e:83:7b:08:
         83:e8:a7:6a:7b:4d:07:07:92:9e:fb:29:a9:c4:f2:6b:77:d6:
         18:4c:52:47:53:08:19:e4:ea:bb:ff:20:e0:e0:c5:e8:b8:3d:
         8b:b1:44:b5:24:1f:69:e1:65:40:ef:22:bf:5d:21:ed:37:90:
         04:40:f9:fe:42:f3:66:aa:09:9d:00:4f:f4:25:7b:aa:00:e5:
         58:34:8f:53:36:66:01:b6:ec:21:6b:b5:b8:b1:02:c3:26:7e:
         5c:65:f8:1f:54:1a:96:4f:5c:42:f2:02:07:da:b3:97:94:8f:
         82:d1:fe:96:28:e3:89:7f:ca:fe:8c:ed:3c:8a:05:38:fa:e7:
         cb:db:59:04:9a:2b:4c:24:83:f2:19:c3:b5:a0:f3:ec:df:92:
         20:d0:9e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:33:21 2026 by rpki-client