Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3234382e302f32342d3234203d3e2034383131.roa
File:                     3132312e34362e3234382e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier:          BY+32YYbz6Jpz8IY+jYppjE5SMjBqxs8ovr+0lLa7LY=
Subject key identifier:   EC:7F:BC:27:E4:2B:5A:4D:10:2B:F1:F1:37:63:B2:DC:E7:6E:00:A7
Certificate issuer:       /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial:       4EE3B2CB0A7C442CD6A622AF747F35B55CF67AE6
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3234382e302f32342d3234203d3e2034383131.roa
Signing time:             Mon 27 Apr 2026 07:59:58 +0000
ROA not before:           Mon 27 Apr 2026 07:54:58 +0000
ROA not after:            Mon 26 Apr 2027 07:59:58 +0000
asID:                     4811
IP address blocks:        121.46.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e3:b2:cb:0a:7c:44:2c:d6:a6:22:af:74:7f:35:b5:5c:f6:7a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
        Validity
            Not Before: Apr 27 07:54:58 2026 GMT
            Not After : Apr 26 07:59:58 2027 GMT
        Subject: CN=EC7FBC27E42B5A4D102BF1F13763B2DCE76E00A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:55:ef:61:45:b6:a8:88:21:4a:85:ce:f1:b0:
                    00:91:5c:48:3a:a6:ad:9b:85:4c:d1:59:7d:f1:e4:
                    75:a2:0f:e9:a2:60:44:64:2c:9f:a7:f9:25:e9:9c:
                    c5:d1:b2:b5:7a:8d:8d:3c:62:71:c2:fc:2e:4e:5b:
                    96:f2:ad:a7:13:0a:69:c6:cd:46:9d:2b:17:73:6d:
                    31:98:0c:0a:09:4f:9b:40:f7:11:c5:1c:b2:30:15:
                    bb:35:59:16:97:7e:34:98:38:17:7e:d8:df:cc:ea:
                    30:2a:68:cb:af:19:75:3a:e6:6c:81:0b:b5:c3:fc:
                    ec:6b:f5:0f:99:69:4f:54:bd:0f:e0:3a:5e:a7:e7:
                    5b:3e:3b:e5:d9:66:9d:e3:c3:75:db:e7:8b:70:2d:
                    45:43:83:4e:b9:a8:f5:80:09:64:20:12:92:ec:07:
                    43:d2:04:b6:98:55:c2:1f:bb:21:d7:e5:a3:75:db:
                    74:d5:b5:a1:1e:86:1f:2c:35:f2:bf:03:60:68:65:
                    95:74:a8:79:12:21:0a:6d:0e:ca:87:8f:23:c1:19:
                    72:f1:24:d2:6a:ca:a7:40:06:06:be:a4:c7:da:91:
                    87:0a:f3:16:e4:85:c5:54:24:af:89:0c:3a:af:97:
                    6f:4b:ad:25:09:d1:6e:cc:3a:36:d2:71:23:30:d9:
                    98:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7F:BC:27:E4:2B:5A:4D:10:2B:F1:F1:37:63:B2:DC:E7:6E:00:A7
            X509v3 Authority Key Identifier:
                keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3132312e34362e3234382e302f32342d3234203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:56:b1:43:eb:ea:ab:de:58:ca:ec:14:2f:a2:f7:35:99:b9:
         ae:8a:9e:79:3d:ee:7d:1d:4a:b7:78:44:20:dd:a4:b3:f7:88:
         cf:3b:cc:17:9f:cb:c9:29:8c:99:8a:9f:c4:7f:c9:d5:7a:2e:
         c5:b7:88:a3:85:ee:b8:54:7c:ad:2c:3d:dd:cd:2c:d1:ec:95:
         80:1b:e2:c6:ba:b0:19:52:87:83:6f:9d:1c:20:21:00:22:12:
         b6:3d:e2:9a:50:c1:17:94:96:1e:10:2c:c5:fc:8e:0b:d0:1e:
         b3:76:63:2e:b1:aa:2b:d6:ce:29:60:77:1b:d0:a8:83:d3:00:
         6e:d7:a0:72:81:3b:e1:df:51:2d:ca:92:d7:2a:9f:a3:4e:08:
         5b:45:db:79:5d:95:02:77:09:53:b0:e9:84:c5:d5:97:07:b3:
         4a:da:0e:8f:01:c6:c0:73:41:0e:d5:02:b2:9f:2a:f6:ea:9d:
         48:1f:9b:86:d4:63:a1:7f:ca:46:98:f8:f3:d7:52:29:25:cb:
         49:8a:bf:3f:27:8d:18:40:e1:2f:b5:83:01:13:54:c7:b9:02:
         ba:2b:5d:9e:66:a5:d1:97:c4:b8:66:90:40:8d:d0:65:b9:ad:
         18:99:d9:6f:99:dc:da:34:28:8e:97:62:8a:3b:67:db:5c:25:
         21:2e:d0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:24:26 2026 by rpki-client