Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3233392e302f32342d3234203d3e2034383131.roa
File:                     3132312e34362e3233392e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier:          caHxbqdTaK/FENayyJGGA0UrdY4LzN4IKHKwr6s7HqI=
Subject key identifier:   C8:32:EF:F6:26:69:1B:E0:2F:A0:A1:CB:A7:0C:10:F0:56:F7:05:06
Certificate issuer:       /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial:       40460114225A0404539157DD643005D8E5E1D248
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3233392e302f32342d3234203d3e2034383131.roa
Signing time:             Mon 27 Apr 2026 07:58:43 +0000
ROA not before:           Mon 27 Apr 2026 07:53:43 +0000
ROA not after:            Mon 26 Apr 2027 07:58:43 +0000
asID:                     4811
IP address blocks:        121.46.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:46:01:14:22:5a:04:04:53:91:57:dd:64:30:05:d8:e5:e1:d2:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
        Validity
            Not Before: Apr 27 07:53:43 2026 GMT
            Not After : Apr 26 07:58:43 2027 GMT
        Subject: CN=C832EFF626691BE02FA0A1CBA70C10F056F70506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e7:7e:0a:ba:4b:88:41:3a:04:ba:2c:1d:0a:
                    84:ef:7d:a8:17:58:0f:09:cb:d2:cf:0c:da:bf:ea:
                    4f:be:be:1c:87:5e:03:c5:dd:98:5b:14:6e:9b:3f:
                    75:c6:80:12:59:a6:89:00:20:f2:dd:a2:61:c7:a5:
                    23:a4:be:46:2a:3d:51:fc:11:e6:4d:2b:aa:bc:e8:
                    cc:3e:99:f8:a5:54:fa:8c:d7:a8:40:58:19:6a:2f:
                    f6:e4:cf:ea:79:32:dc:c3:76:98:4d:cf:f1:00:f9:
                    fe:bb:91:c3:e7:3b:dd:86:22:56:e2:44:58:d1:2e:
                    0f:fc:23:be:40:5a:6a:d9:54:0d:0b:a8:db:e5:de:
                    64:d7:bb:13:92:e8:29:cf:98:59:94:aa:0e:5f:f0:
                    df:13:d5:0a:5c:7b:6a:02:e3:fc:02:7e:3a:1b:2e:
                    92:06:c6:bd:f7:ba:9e:77:98:5e:34:5a:91:3e:1e:
                    31:64:ff:82:ad:f7:80:32:c7:8e:82:ce:a8:8c:a7:
                    de:f9:d3:fc:05:8c:db:26:47:1b:25:29:ad:d9:3a:
                    ba:72:be:71:f2:aa:7a:d1:40:22:55:16:03:70:21:
                    0a:03:25:ac:b4:91:d0:eb:66:89:8a:a2:f3:e5:45:
                    8b:a4:49:9e:11:49:60:45:8b:57:23:d3:02:36:af:
                    af:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:32:EF:F6:26:69:1B:E0:2F:A0:A1:CB:A7:0C:10:F0:56:F7:05:06
            X509v3 Authority Key Identifier:
                keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3233392e302f32342d3234203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:3e:f3:ab:51:f5:36:11:0f:2d:cf:df:3b:26:05:2b:5f:60:
         ec:6f:e0:29:ee:1b:01:0b:23:ea:6e:42:1a:b9:55:c6:e7:b3:
         dd:67:1f:e7:f0:36:92:33:45:9b:fe:99:ab:54:aa:93:4f:5d:
         04:ae:db:4e:81:87:ad:4a:97:0c:02:32:b9:b3:e4:1a:19:b7:
         65:ae:2a:42:6c:da:e2:71:db:39:ef:8a:f2:9d:8e:69:5e:ac:
         41:06:02:e3:8a:57:6e:6f:16:29:b5:7b:8e:7b:6b:db:d7:7f:
         a2:ea:38:77:df:82:f0:d5:72:c7:62:4a:05:39:29:3c:e9:97:
         92:5f:30:7e:19:14:55:92:ed:6a:49:f9:bb:28:cb:ca:04:23:
         8d:e7:82:ff:13:e0:41:5d:7c:88:ac:04:ff:c0:77:2a:d6:74:
         40:d1:74:bb:40:6d:62:3c:88:59:8e:1c:a9:c3:5f:e0:f0:ec:
         57:1a:29:d8:41:6e:4a:84:e9:b1:5f:d4:8d:d2:b6:08:53:b2:
         84:cd:ab:e2:5b:bc:71:d4:94:80:91:13:5c:d4:2d:51:b0:40:
         e0:56:15:55:ff:8c:95:37:6c:f9:12:0b:53:5e:23:9d:a1:c6:
         c3:c6:20:46:8c:2b:53:66:66:db:fb:aa:af:72:54:6d:7b:fd:
         42:3a:60:b0
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUQEYBFCJaBARTkVfdZDAF2OXh0kgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE4OThCM0U0RUJCNEM1NzdGNzZCQkQ3RjBENzUxRjg1
MDVBREQ5NDAeFw0yNjA0MjcwNzUzNDNaFw0yNzA0MjYwNzU4NDNaMDMxMTAvBgNV
BAMTKEM4MzJFRkY2MjY2OTFCRTAyRkEwQTFDQkE3MEMxMEYwNTZGNzA1MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC534KukuIQToEuiwdCoTvfagX
WA8Jy9LPDNq/6k++vhyHXgPF3ZhbFG6bP3XGgBJZpokAIPLdomHHpSOkvkYqPVH8
EeZNK6q86Mw+mfilVPqM16hAWBlqL/bkz+p5MtzDdphNz/EA+f67kcPnO92GIlbi
RFjRLg/8I75AWmrZVA0LqNvl3mTXuxOS6CnPmFmUqg5f8N8T1Qpce2oC4/wCfjob
LpIGxr33up53mF40WpE+HjFk/4Kt94Ayx46CzqiMp9750/wFjNsmRxslKa3ZOrpy
vnHyqnrRQCJVFgNwIQoDJay0kdDrZomKovPlRYukSZ4RSWBFi1cj0wI2r68bAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUyDLv9iZpG+AvoKHLpwwQ8Fb3BQYwHwYDVR0j
BBgwFoAUaomLPk67TFd/drvX8NdR+FBa3ZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzQwNTExNTI2ODA3MTQyNy8wLzZBODk4QjNFNEVCQjRDNTc3Rjc2QkJEN0YwRDc1
MUY4NTA1QUREOTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkE4OThCM0U0RUJCNEM1NzdGNzZCQkQ3RjBENzUxRjg1MDVBREQ5NC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk3NDA1MTE1MjY4MDcxNDI3LzAvMzEzMjMxMmUzNDM2
MmUzMjMzMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzEzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAHku7zANBgkqhkiG9w0BAQsFAAOCAQEAuT7zq1H1NhEPLc/fOyYFK19g7G/g
Ke4bAQsj6m5CGrlVxuez3Wcf5/A2kjNFm/6Zq1Sqk09dBK7bToGHrUqXDAIyubPk
Ghm3Za4qQmza4nHbOe+K8p2OaV6sQQYC44pXbm8WKbV7jntr29d/ouo4d9+C8NVy
x2JKBTkpPOmXkl8wfhkUVZLtakn5uyjLygQjjeeC/xPgQV18iKwE/8B3KtZ0QNF0
u0BtYjyIWY4cqcNf4PDsVxop2EFuSoTpsV/UjdK2CFOyhM2r4lu8cdSUgJETXNQt
UbBA4FYVVf+MlTds+RILU14jnaHGw8YgRowrU2Zm2/uqr3JUbXv9QjpgsA==
-----END CERTIFICATE-----
Generated at Wed May 13 12:46:20 2026 by rpki-client