Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3234372e302f32342d3234203d3e2034383131.roa
File:                     3132312e34362e3234372e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier:          /+nt7+UOHmSZFs074ayJyo2pAYIiFXSopSVIKfFhb/s=
Subject key identifier:   18:43:70:C7:75:C9:0D:67:F3:74:FF:0B:F1:35:2A:2C:A2:0B:9F:13
Certificate issuer:       /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial:       65EADB8888167093BCE1050ACEA7ED074392B1F0
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3234372e302f32342d3234203d3e2034383131.roa
Signing time:             Mon 27 Apr 2026 07:59:58 +0000
ROA not before:           Mon 27 Apr 2026 07:54:58 +0000
ROA not after:            Mon 26 Apr 2027 07:59:58 +0000
asID:                     4811
IP address blocks:        121.46.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ea:db:88:88:16:70:93:bc:e1:05:0a:ce:a7:ed:07:43:92:b1:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
        Validity
            Not Before: Apr 27 07:54:58 2026 GMT
            Not After : Apr 26 07:59:58 2027 GMT
        Subject: CN=184370C775C90D67F374FF0BF1352A2CA20B9F13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:dc:48:a3:51:e1:2d:1f:98:93:60:2f:74:16:
                    dc:a8:16:f6:f5:2d:0f:13:8e:f3:02:41:81:e0:f9:
                    65:a1:5f:43:b5:e7:17:bb:21:77:ad:8f:a4:cc:cd:
                    97:62:1b:b0:fe:46:14:41:fc:6a:c1:c9:22:99:a5:
                    a9:78:2a:96:0b:35:3e:ad:5f:cd:69:4f:3e:fb:57:
                    33:71:80:50:50:84:fc:b1:f2:45:2c:35:50:86:d6:
                    36:26:71:4a:b5:e1:9d:69:a5:f9:8c:e0:34:58:59:
                    59:2e:97:37:76:06:84:11:0c:bd:90:1f:48:21:e3:
                    89:21:01:7d:41:6b:f1:9d:36:ca:4d:da:15:e3:49:
                    78:60:be:62:87:4c:e0:c6:10:4b:23:d5:e5:ea:a0:
                    89:6a:c3:ef:f2:70:dd:ce:dc:43:63:7c:fd:db:98:
                    a8:9e:81:47:aa:8a:17:a5:3b:01:8f:4b:6d:17:bb:
                    b8:1d:23:23:62:f3:79:e5:6a:22:d0:10:b1:1d:41:
                    02:35:b9:f0:c7:10:3f:a1:79:38:50:b6:5a:ec:7e:
                    95:82:8d:f6:6c:89:32:41:32:db:fa:fc:6f:cb:71:
                    09:8f:01:47:8e:dd:68:50:e1:b8:9d:4f:44:3b:a0:
                    09:13:6c:f9:c8:df:72:32:0b:12:1c:16:3c:c4:8f:
                    67:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:43:70:C7:75:C9:0D:67:F3:74:FF:0B:F1:35:2A:2C:A2:0B:9F:13
            X509v3 Authority Key Identifier:
                keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3234372e302f32342d3234203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:1d:86:62:2a:ca:81:65:8f:87:c2:b1:33:c3:72:e2:85:8b:
         f9:88:2d:06:0f:e3:91:2d:62:ce:4d:02:f8:87:05:42:bd:9a:
         25:97:ae:13:d4:03:9f:be:a0:2b:66:b7:87:18:a5:12:cc:03:
         aa:28:62:26:ca:93:ce:38:0d:e4:e7:80:2d:09:82:3c:fc:6c:
         d3:ab:e6:a0:da:0d:7a:b3:bd:11:3d:72:a6:f9:15:b7:bf:b0:
         42:d7:97:6d:40:2e:27:d8:3b:9f:16:9f:01:d3:ac:d3:d6:68:
         e1:cb:62:26:8f:8b:33:b2:2e:3e:7d:96:e7:11:de:0e:d9:c4:
         d8:74:17:04:a4:ef:07:25:88:a2:18:c9:58:84:c6:09:f5:0d:
         86:0a:0d:18:5a:70:01:9a:d0:5c:72:8e:c6:84:6f:8b:87:a2:
         21:35:ed:c7:86:72:75:57:0c:11:da:a8:f4:27:06:0e:17:21:
         02:71:92:f9:a8:ee:3c:11:8d:67:a6:70:ce:02:d2:bb:20:02:
         82:49:af:59:6c:c5:40:f2:3a:65:c9:8f:bc:23:04:68:f9:b8:
         09:4e:4b:4f:eb:8e:d4:81:48:f4:0a:5c:d5:f6:22:c9:82:4f:
         b5:a5:9f:82:65:66:8a:41:94:f7:3d:d3:5d:90:89:e5:10:14:
         8d:fb:1e:d9
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUZerbiIgWcJO84QUKzqftB0OSsfAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE4OThCM0U0RUJCNEM1NzdGNzZCQkQ3RjBENzUxRjg1
MDVBREQ5NDAeFw0yNjA0MjcwNzU0NThaFw0yNzA0MjYwNzU5NThaMDMxMTAvBgNV
BAMTKDE4NDM3MEM3NzVDOTBENjdGMzc0RkYwQkYxMzUyQTJDQTIwQjlGMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg3EijUeEtH5iTYC90FtyoFvb1
LQ8TjvMCQYHg+WWhX0O15xe7IXetj6TMzZdiG7D+RhRB/GrBySKZpal4KpYLNT6t
X81pTz77VzNxgFBQhPyx8kUsNVCG1jYmcUq14Z1ppfmM4DRYWVkulzd2BoQRDL2Q
H0gh44khAX1Ba/GdNspN2hXjSXhgvmKHTODGEEsj1eXqoIlqw+/ycN3O3ENjfP3b
mKiegUeqihelOwGPS20Xu7gdIyNi83nlaiLQELEdQQI1ufDHED+heThQtlrsfpWC
jfZsiTJBMtv6/G/LcQmPAUeO3WhQ4bidT0Q7oAkTbPnI33IyCxIcFjzEj2dPAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUGENwx3XJDWfzdP8L8TUqLKILnxMwHwYDVR0j
BBgwFoAUaomLPk67TFd/drvX8NdR+FBa3ZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzQwNTExNTI2ODA3MTQyNy8wLzZBODk4QjNFNEVCQjRDNTc3Rjc2QkJEN0YwRDc1
MUY4NTA1QUREOTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkE4OThCM0U0RUJCNEM1NzdGNzZCQkQ3RjBENzUxRjg1MDVBREQ5NC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk3NDA1MTE1MjY4MDcxNDI3LzAvMzEzMjMxMmUzNDM2
MmUzMjM0MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzEzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAHku9zANBgkqhkiG9w0BAQsFAAOCAQEAvB2GYirKgWWPh8KxM8Ny4oWL+Ygt
Bg/jkS1izk0C+IcFQr2aJZeuE9QDn76gK2a3hxilEswDqihiJsqTzjgN5OeALQmC
PPxs06vmoNoNerO9ET1ypvkVt7+wQteXbUAuJ9g7nxafAdOs09Zo4ctiJo+LM7Iu
Pn2W5xHeDtnE2HQXBKTvByWIohjJWITGCfUNhgoNGFpwAZrQXHKOxoRvi4eiITXt
x4ZydVcMEdqo9CcGDhchAnGS+ajuPBGNZ6ZwzgLSuyACgkmvWWzFQPI6ZcmPvCME
aPm4CU5LT+uO1IFI9Apc1fYiyYJPtaWfgmVmikGU9z3TXZCJ5RAUjfse2Q==
-----END CERTIFICATE-----
Generated at Wed May 13 14:50:21 2026 by rpki-client