Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3233342e302f32342d3234203d3e2034383131.roa
File:                     3132312e34362e3233342e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier:          rJ8PevUKkS81OG8WLF73jjwLU+IGqr6tI9ot5kVJi+Y=
Subject key identifier:   63:B5:D7:E6:C3:E3:73:11:5F:AE:18:FF:B8:D4:F1:4D:D9:2D:D2:42
Certificate issuer:       /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial:       75430177835B98AA22C719B0A81D01B1D18E1E93
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3233342e302f32342d3234203d3e2034383131.roa
Signing time:             Mon 27 Apr 2026 07:58:43 +0000
ROA not before:           Mon 27 Apr 2026 07:53:43 +0000
ROA not after:            Mon 26 Apr 2027 07:58:43 +0000
asID:                     4811
IP address blocks:        121.46.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:43:01:77:83:5b:98:aa:22:c7:19:b0:a8:1d:01:b1:d1:8e:1e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
        Validity
            Not Before: Apr 27 07:53:43 2026 GMT
            Not After : Apr 26 07:58:43 2027 GMT
        Subject: CN=63B5D7E6C3E373115FAE18FFB8D4F14DD92DD242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:63:60:46:23:8a:65:fc:11:bb:aa:2c:d3:08:
                    9e:53:d2:35:51:e2:77:44:ba:46:ab:ab:90:37:6a:
                    66:04:11:b0:36:30:83:35:9f:77:2c:15:ea:5f:58:
                    9d:f2:0a:be:49:1e:7a:ab:9e:2a:0c:f6:d7:55:d3:
                    a1:f9:64:10:05:98:fb:bc:0b:99:89:91:71:a0:c6:
                    65:62:06:ae:b7:74:34:c3:b4:42:6b:35:11:c9:fb:
                    f1:16:b4:02:5e:e4:f4:b0:f8:bd:a0:d5:d2:eb:09:
                    ff:1d:10:10:e3:31:f1:8e:84:3f:05:92:9e:96:99:
                    72:a1:a5:69:d1:9b:40:12:92:b5:ba:5f:59:6a:ca:
                    3c:39:23:78:8a:e8:3a:f7:e7:3d:7f:52:29:fb:48:
                    21:94:bd:0f:57:ca:6a:c3:6b:38:16:5e:b7:da:f0:
                    1d:7e:14:63:52:c5:4d:8c:e9:22:76:cd:99:a4:b4:
                    1c:51:49:a9:76:12:3e:0b:e5:ce:70:b8:7a:fe:b2:
                    cf:e4:de:1f:7a:5f:f4:1e:14:33:6d:f9:b6:db:c6:
                    6f:c5:40:f9:d5:1a:1b:3f:8c:24:27:7e:3d:44:5c:
                    d6:f6:15:32:9d:60:20:5b:fa:f6:06:2d:a6:ec:fa:
                    d8:f3:e2:47:75:a4:e2:7e:88:f2:5f:9b:55:ca:60:
                    88:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B5:D7:E6:C3:E3:73:11:5F:AE:18:FF:B8:D4:F1:4D:D9:2D:D2:42
            X509v3 Authority Key Identifier:
                keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3233342e302f32342d3234203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:0f:15:0b:81:94:31:2d:32:73:76:a0:79:aa:a0:c8:09:7c:
         bb:a2:79:10:08:25:b0:c3:c7:0e:13:70:a4:a3:98:68:1f:2f:
         89:1d:e9:b6:96:ed:5b:b5:eb:39:00:39:13:d5:d1:c1:9f:98:
         1b:2b:74:7f:dc:4e:f7:5f:c0:e3:e4:8e:a7:15:a9:dd:ea:55:
         4a:00:ba:dc:97:d1:69:39:32:46:ef:6f:4d:8d:98:8e:6b:b5:
         f0:9e:36:3e:3a:84:24:c2:2c:f0:14:77:06:0e:b7:ed:b0:17:
         54:bf:8e:2e:1a:59:75:85:d2:2c:8d:7a:9c:08:99:ee:fa:a7:
         33:9d:74:d6:54:86:f0:4b:18:0b:a2:88:59:15:6b:ac:d4:2b:
         d2:62:c2:88:e6:3b:7c:c8:50:3f:4b:bc:30:2a:50:69:4b:70:
         a8:8e:3c:48:c5:87:a8:a8:13:59:5a:9d:95:bc:91:ec:7f:4c:
         de:be:91:b6:3a:8d:25:1f:8f:0d:b8:fb:0c:28:26:90:1e:8d:
         e6:6a:15:d3:17:2d:fc:f5:26:39:3b:5c:cd:23:70:b6:6f:9f:
         b1:1a:6b:50:d8:d4:df:b1:13:76:dc:c9:76:4c:3c:93:dc:93:
         28:36:fe:2e:a3:46:74:96:cf:46:6e:70:81:71:aa:c0:84:cf:
         64:72:eb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:26:33 2026 by rpki-client