Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3131332e3230302e302f32342d3234203d3e203536303436.roa
File:                     34352e3131332e3230302e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          2/MT+Izltmket/OkMxJTyUMjecKxAqZa/GNeeg9I3vU=
Subject key identifier:   46:1B:59:89:B2:B4:41:DD:5C:CF:11:C3:30:F0:B1:C3:2A:01:01:82
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       4B5E0FE5409671560D65A96E23303A0D2B8AA2BE
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3131332e3230302e302f32342d3234203d3e203536303436.roa
Signing time:             Tue 12 May 2026 05:13:36 +0000
ROA not before:           Tue 12 May 2026 05:08:36 +0000
ROA not after:            Tue 11 May 2027 05:13:36 +0000
asID:                     56046
IP address blocks:        45.113.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:5e:0f:e5:40:96:71:56:0d:65:a9:6e:23:30:3a:0d:2b:8a:a2:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: May 12 05:08:36 2026 GMT
            Not After : May 11 05:13:36 2027 GMT
        Subject: CN=461B5989B2B441DD5CCF11C330F0B1C32A010182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c0:b5:af:36:33:6d:4d:6e:eb:64:c6:9f:75:
                    af:fe:e2:32:76:16:fd:55:0d:2c:20:cb:48:3d:13:
                    61:87:54:85:bc:f2:a1:a5:5f:32:e1:38:b3:83:1e:
                    37:c2:11:2d:0b:4b:d0:ee:46:a4:34:75:27:c2:90:
                    fc:c2:75:f5:93:cb:25:4c:66:ca:2d:10:2a:3f:ef:
                    9a:91:f7:e7:65:ba:2d:c8:2e:e1:19:7e:36:57:a7:
                    28:30:57:ab:df:a7:b3:89:d3:61:cc:03:48:64:b3:
                    fb:50:dd:e9:ce:11:55:3a:28:6c:21:6a:1c:0f:04:
                    86:cc:9d:8a:38:be:a2:27:61:37:52:6d:f8:77:a2:
                    14:68:d3:3b:39:c4:f3:14:25:8b:fe:6d:cf:a2:15:
                    71:59:42:0d:67:49:be:8f:77:ad:8b:00:08:2e:fc:
                    c3:bc:21:1f:78:b9:19:f0:04:80:58:41:14:c8:6d:
                    19:17:93:08:6f:1b:cc:cd:ce:e4:90:55:ad:29:09:
                    51:7f:7d:4d:02:3c:d6:50:e1:c3:b1:0e:07:cb:ae:
                    a8:84:d5:6c:4b:ee:86:02:34:9d:c2:9b:6f:97:b8:
                    3c:3a:3b:7d:27:73:94:7e:b4:aa:d6:97:51:44:cb:
                    f3:a8:0f:d1:4c:8f:f6:86:99:56:f0:29:d9:87:ff:
                    5b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1B:59:89:B2:B4:41:DD:5C:CF:11:C3:30:F0:B1:C3:2A:01:01:82
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3131332e3230302e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.113.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:64:95:c3:d0:b9:d3:6b:99:04:1e:81:e8:3a:04:2d:bd:fc:
         bf:f6:32:2e:1e:29:c2:5d:46:62:38:f3:56:5c:3b:c3:9f:94:
         60:6b:c0:34:9e:f8:15:6d:09:80:ae:5b:5f:5f:f9:c2:a4:32:
         4b:a7:91:c9:c7:cb:7d:10:c7:d3:b2:8e:09:10:e9:ba:d0:df:
         b6:d9:11:0d:a7:58:d3:af:a6:77:07:a2:3f:dd:70:84:3c:49:
         d1:61:d6:54:38:0f:3a:48:56:09:fb:26:4f:2e:ed:97:f6:69:
         58:cc:d0:a4:e3:ad:73:d9:b9:6e:e5:28:64:89:e6:c6:b7:96:
         48:b3:bd:30:96:b1:07:32:20:7e:5f:cd:ea:b6:ca:cd:86:1e:
         a4:30:cc:4f:c4:01:c6:a6:c8:27:72:74:0c:3d:63:44:9c:fc:
         05:62:be:f0:d0:b6:eb:b9:87:b2:8d:2e:a3:fe:ef:01:94:74:
         66:14:20:71:2a:38:3f:bf:8c:8e:05:4a:5f:6f:21:32:0b:80:
         f3:ba:33:55:98:0c:70:57:51:b5:96:02:58:e7:41:ce:c4:b6:
         5a:2e:f1:06:26:bd:f3:c0:76:49:f2:dc:2c:3e:45:47:32:fb:
         ae:08:94:28:90:06:e5:e1:f0:21:4c:b8:c4:e6:2b:48:1d:90:
         9c:10:8d:c9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 13:00:25 2026 by rpki-client