Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3234362e302f32342d3234203d3e2034383131.roa
File:                     3132312e34362e3234362e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier:          UdhPDpYX1v0Mwbch7R6+oi4dEsD74pACn2DpgqSxhjs=
Subject key identifier:   59:B4:C3:C9:C1:B3:05:0E:D4:56:8E:3F:2A:F1:FC:75:03:3B:C4:C9
Certificate issuer:       /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial:       6D061108A45F4F0C6B920BC0D0216510B2E3C79E
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3234362e302f32342d3234203d3e2034383131.roa
Signing time:             Mon 27 Apr 2026 07:59:58 +0000
ROA not before:           Mon 27 Apr 2026 07:54:58 +0000
ROA not after:            Mon 26 Apr 2027 07:59:58 +0000
asID:                     4811
IP address blocks:        121.46.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:06:11:08:a4:5f:4f:0c:6b:92:0b:c0:d0:21:65:10:b2:e3:c7:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
        Validity
            Not Before: Apr 27 07:54:58 2026 GMT
            Not After : Apr 26 07:59:58 2027 GMT
        Subject: CN=59B4C3C9C1B3050ED4568E3F2AF1FC75033BC4C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8c:ee:03:55:ea:65:15:51:0a:71:77:42:dc:
                    e9:bf:0a:0a:b6:eb:0c:f6:50:c6:5d:b2:51:69:89:
                    73:57:52:f4:59:b6:32:c1:37:2e:f5:10:66:96:14:
                    e0:73:9c:32:f8:c5:b4:ee:3f:b3:98:17:4c:d3:b1:
                    4c:63:53:48:ac:42:c4:31:26:06:69:1e:ad:11:db:
                    c2:1c:97:db:59:a6:36:c6:71:2d:5e:54:91:63:57:
                    91:fa:2a:72:20:f1:98:1c:e2:74:4b:96:4f:7a:26:
                    e3:bd:ac:e9:5d:ac:0e:59:c8:10:da:e9:5a:28:e7:
                    1c:6c:6b:6a:51:2c:a6:f4:7c:1f:97:ae:e2:b9:34:
                    69:d1:19:fd:03:81:e8:33:1b:e3:d8:d0:c5:85:45:
                    b3:2a:b7:b0:13:ea:b0:65:1e:97:d1:2e:d7:c9:ee:
                    6d:fb:f4:19:f5:0a:5e:46:52:ff:c7:3e:b9:59:c6:
                    66:46:f7:ff:e3:3a:a9:37:af:2b:3f:1d:3c:96:ed:
                    4c:d1:98:0a:f2:ba:6c:27:1f:1c:4a:fb:89:76:60:
                    44:e9:72:39:de:c8:6b:db:ff:3d:b8:07:a2:8d:11:
                    e6:5d:1c:cd:61:69:80:53:64:09:8a:34:f4:86:43:
                    f4:45:d6:78:7e:ae:e2:88:6a:e9:ce:09:59:20:57:
                    58:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B4:C3:C9:C1:B3:05:0E:D4:56:8E:3F:2A:F1:FC:75:03:3B:C4:C9
            X509v3 Authority Key Identifier:
                keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3234362e302f32342d3234203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:57:1d:11:fc:2a:1c:d7:ed:7f:57:92:e1:fe:c4:6b:88:2a:
         d0:8c:59:7a:c9:17:c9:16:5d:63:6e:4c:9e:9a:f8:3d:b1:4f:
         38:b2:e7:75:d7:ba:cb:3d:5e:6a:40:4f:ec:f7:6c:18:7c:9c:
         74:9e:8c:2b:0c:d8:8d:44:87:24:80:32:79:b5:a4:4f:18:87:
         2f:17:68:2d:11:0f:e8:8f:98:20:e2:92:18:d2:5c:49:18:ae:
         99:fa:0e:4b:02:3b:6f:47:34:99:c4:c2:21:9d:97:7f:39:41:
         54:ea:03:8d:74:aa:26:a0:95:e1:3f:bd:f5:66:10:e8:a3:f0:
         48:89:d1:c1:cb:c7:1f:60:af:9e:35:92:e7:71:7f:33:57:7b:
         89:42:43:d5:bf:d4:ff:bf:dc:7a:1c:04:44:1a:dd:6d:e7:de:
         80:96:c5:46:73:0a:11:4f:8c:87:e9:0e:01:fb:be:d6:02:fe:
         4a:52:43:0f:2a:14:3b:5b:90:fe:73:44:0d:26:44:7a:2a:f8:
         2e:d2:8f:70:2d:a1:49:00:1c:00:35:87:72:3d:76:c7:63:76:
         a1:8d:32:17:cd:52:6f:05:2f:ce:e1:f2:b1:bf:96:10:1f:48:
         de:37:bc:51:89:71:3e:a2:91:21:f8:9b:8f:08:93:a7:4a:b2:
         fa:8f:c3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:27:37 2026 by rpki-client