Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3131332e3230312e302f32342d3234203d3e203536303436.roa
File:                     34352e3131332e3230312e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          06CnH9PlG9icJGosVDf7btTRDmMPalK7xs6uh15q+DU=
Subject key identifier:   24:5D:6E:A1:37:EB:09:A1:D7:A9:16:4C:FF:84:A8:22:BD:1F:6A:37
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       470D619666A054491B805F6436D2EEE67C0064CC
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3131332e3230312e302f32342d3234203d3e203536303436.roa
Signing time:             Tue 12 May 2026 05:13:36 +0000
ROA not before:           Tue 12 May 2026 05:08:36 +0000
ROA not after:            Tue 11 May 2027 05:13:36 +0000
asID:                     56046
IP address blocks:        45.113.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:0d:61:96:66:a0:54:49:1b:80:5f:64:36:d2:ee:e6:7c:00:64:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: May 12 05:08:36 2026 GMT
            Not After : May 11 05:13:36 2027 GMT
        Subject: CN=245D6EA137EB09A1D7A9164CFF84A822BD1F6A37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f5:b1:5d:18:f0:0c:8e:eb:56:1b:4a:12:c5:
                    07:6a:b1:19:44:f9:43:cd:93:e1:ba:2b:f5:76:98:
                    d8:ff:e5:a7:fa:aa:71:ba:4a:60:a1:a7:ee:79:cc:
                    23:c4:fd:4d:4b:2b:f3:9f:a2:f7:0c:0f:03:68:92:
                    60:46:d3:be:20:b0:50:4c:16:ab:0f:68:7a:de:9f:
                    9c:b3:b3:a7:77:7c:94:0a:75:26:4a:3e:c4:50:c2:
                    d4:10:48:81:3f:7c:d9:e7:e1:30:b3:d2:57:a2:f4:
                    ef:ea:b4:1f:0b:cc:75:20:fe:8c:cd:6d:60:f2:36:
                    6d:dc:47:9c:aa:ad:08:4b:1a:1c:61:b3:78:a2:89:
                    03:b0:74:6f:63:2d:bc:fe:29:40:84:f8:72:a1:a6:
                    c3:c6:e9:92:cb:38:6d:38:cf:31:86:06:da:1b:1d:
                    82:d0:e9:2b:cf:00:5f:78:af:cc:c2:f1:e1:42:6b:
                    5b:dc:2d:7c:3c:94:ba:5b:c8:a0:cb:4a:8e:8a:47:
                    7d:14:74:67:6f:50:e8:ea:a6:8b:e6:4a:48:c2:a0:
                    32:9a:77:ba:87:eb:d0:64:65:f0:90:f4:53:9e:ea:
                    d6:d3:e4:8c:44:31:97:34:b2:fd:6e:55:79:4e:d7:
                    b5:cc:ea:42:1d:e5:f8:e8:fe:d9:21:bf:06:f1:d8:
                    4a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5D:6E:A1:37:EB:09:A1:D7:A9:16:4C:FF:84:A8:22:BD:1F:6A:37
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3131332e3230312e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.113.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:7e:3d:28:67:57:ac:ef:a9:0d:d5:c7:d7:71:cd:b4:82:d9:
         f7:87:c0:fd:93:67:6a:07:dc:a3:2b:f2:6c:d0:34:55:fc:d3:
         76:44:9b:2b:a2:bf:1b:d4:14:8b:4b:a3:5b:98:ee:33:ad:1b:
         ab:ef:ad:45:bb:81:e7:4a:5d:b4:db:b3:4a:71:78:6d:8d:87:
         c8:1c:e1:5e:95:75:c3:0d:95:f0:96:16:12:23:cb:de:fd:ec:
         97:9c:86:8c:61:14:36:92:18:50:67:ea:0b:ff:0f:95:44:9c:
         f5:ba:0a:c7:09:2d:2b:52:ab:9d:42:48:97:fc:6b:7b:78:89:
         cd:d7:cf:f2:23:c8:72:7a:ef:a9:a8:c3:3c:67:d4:e5:81:99:
         12:b5:52:d5:28:76:5a:1c:96:8d:3a:af:00:82:70:a7:44:ea:
         ba:fe:74:c6:2b:b4:a9:48:98:d6:1b:38:90:b6:2e:1b:ee:36:
         52:d0:6f:04:39:97:0b:72:ae:ea:2e:43:e9:ae:a0:02:47:65:
         3f:c4:df:1c:84:a3:02:46:f4:bd:a1:b6:33:be:99:5b:91:29:
         e7:bc:5b:9f:10:ea:ad:fd:d4:d2:87:e8:13:70:44:0d:61:47:
         b4:85:8b:1f:39:40:8a:02:6a:d4:24:5b:16:d6:50:94:8f:e7:
         56:bd:b7:14
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 13:58:12 2026 by rpki-client