Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3233382e302f32342d3234203d3e2034383131.roa
File:                     3132312e34362e3233382e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier:          lreg6XU0+Tzz4w970jTicRygNZq0vFs5IE++gRHl1AU=
Subject key identifier:   9B:A0:12:34:84:15:32:52:73:F1:DB:C6:80:35:59:94:5D:26:81:98
Certificate issuer:       /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial:       496449B51CD575F0571371ABE065284D9E484944
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3233382e302f32342d3234203d3e2034383131.roa
Signing time:             Mon 27 Apr 2026 07:58:43 +0000
ROA not before:           Mon 27 Apr 2026 07:53:43 +0000
ROA not after:            Mon 26 Apr 2027 07:58:43 +0000
asID:                     4811
IP address blocks:        121.46.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:64:49:b5:1c:d5:75:f0:57:13:71:ab:e0:65:28:4d:9e:48:49:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
        Validity
            Not Before: Apr 27 07:53:43 2026 GMT
            Not After : Apr 26 07:58:43 2027 GMT
        Subject: CN=9BA012348415325273F1DBC6803559945D268198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7a:eb:72:9e:83:67:b9:f8:d1:89:98:a7:81:
                    43:24:93:2f:35:cf:95:7e:84:48:82:8e:d8:5a:d7:
                    ad:85:34:f2:a0:75:dc:c4:12:27:b2:69:d8:88:81:
                    26:86:fb:e3:65:1e:21:0d:f8:68:a0:13:ea:87:d6:
                    e6:d2:a6:69:44:5a:61:19:eb:3e:9e:1e:f6:31:5b:
                    3a:af:ad:9f:43:73:9a:12:2d:a8:a9:63:76:93:1e:
                    37:cd:67:5c:30:3c:57:ee:b2:33:e7:84:58:4d:53:
                    c4:9f:42:26:bb:e2:ea:de:c6:f0:4c:f5:d3:fb:4e:
                    10:1c:ca:bd:cf:24:4c:65:d5:2d:cf:96:86:91:de:
                    69:38:e1:08:9b:81:99:57:bc:c2:55:a8:33:45:31:
                    f4:d7:7e:77:5f:df:69:e9:5b:31:27:6e:03:d3:aa:
                    74:20:51:6e:3d:a0:3b:78:24:f5:65:ad:f7:53:3d:
                    a7:5c:11:c2:89:a9:9d:f8:01:5e:25:9a:bf:1a:96:
                    4f:60:85:c4:02:cf:8a:0d:20:b5:96:f2:31:71:c9:
                    37:81:9e:f7:bb:a5:47:9e:76:b1:15:e7:b4:96:73:
                    c5:36:44:36:1c:a8:61:49:dd:d7:6b:b1:3a:bd:11:
                    c2:aa:c3:91:63:98:c4:00:5f:3e:a1:2e:30:c7:2e:
                    35:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A0:12:34:84:15:32:52:73:F1:DB:C6:80:35:59:94:5D:26:81:98
            X509v3 Authority Key Identifier:
                keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3233382e302f32342d3234203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:e3:ae:de:17:02:98:47:b1:e0:79:f8:31:95:f0:f8:5e:e7:
         72:39:d3:80:17:af:90:a6:d9:db:09:e5:6d:2f:20:f2:4c:6c:
         e9:25:ce:14:84:aa:d7:c7:9a:30:b4:0f:c6:f3:00:7e:b4:42:
         09:2b:b8:2a:f2:44:f6:2c:26:a7:f4:48:a2:19:a1:25:cc:35:
         82:d0:5e:3b:96:af:f7:13:47:b4:1e:44:f0:fa:05:78:50:f2:
         d9:7d:08:f3:5c:55:eb:af:66:ac:21:98:73:11:c4:3e:eb:a5:
         bd:4f:6e:8b:18:b4:fb:41:2d:4b:23:53:19:fc:e6:cd:a3:d2:
         02:2d:dd:62:b2:9d:9f:f0:11:fe:65:15:ba:f9:21:c4:eb:11:
         cd:ba:08:08:3a:f9:1b:70:6a:0d:1c:ac:1e:0b:7e:8e:f9:2d:
         25:4b:a7:ff:4b:86:d9:ff:2e:53:9f:9e:8e:22:f9:c3:cc:48:
         a7:2a:3e:58:90:8b:0d:d8:10:10:1d:a8:c1:bd:01:41:30:bd:
         d0:02:14:3a:61:c5:70:c5:be:1b:26:9d:e2:48:85:d7:c9:e8:
         89:03:59:ef:a6:ea:3b:5c:7c:12:dd:8e:49:8e:a1:22:bf:b9:
         76:85:92:3f:a6:29:e1:15:aa:52:eb:36:bf:c5:8e:8f:39:e3:
         69:88:07:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:13:39 2026 by rpki-client