Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3131332e3230322e302f32332d3233203d3e203536303436.roa
File:                     34352e3131332e3230322e302f32332d3233203d3e203536303436.roa (raw, json)
Hash identifier:          eZT65lIVUbOYTZ2/7mVUeBoZn9vHqE3Ki38FagRPpcs=
Subject key identifier:   44:E0:A0:4F:26:F4:81:A2:18:54:AB:DD:FB:E1:A5:1C:8A:57:52:72
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       6715C87C8228700DC7A484735F503BEA466A89ED
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3131332e3230322e302f32332d3233203d3e203536303436.roa
Signing time:             Wed 23 Sep 2026 07:57:54 +0000
ROA not before:           Wed 23 Sep 2026 07:52:54 +0000
ROA not after:            Wed 22 Sep 2027 07:57:54 +0000
asID:                     56046
IP address blocks:        45.113.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 12:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:15:c8:7c:82:28:70:0d:c7:a4:84:73:5f:50:3b:ea:46:6a:89:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: Sep 23 07:52:54 2026 GMT
            Not After : Sep 22 07:57:54 2027 GMT
        Subject: CN=44E0A04F26F481A21854ABDDFBE1A51C8A575272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:10:62:1a:ed:8a:dd:20:00:1c:3c:57:7e:37:
                    d6:d6:11:f2:63:52:59:7b:81:89:26:5d:1e:ec:10:
                    35:5f:95:95:5b:5e:a5:6f:cc:f2:57:7e:2b:14:81:
                    e1:e1:0a:42:da:54:fb:aa:93:00:0a:9e:d1:03:31:
                    d1:a5:5e:3e:44:ba:df:e2:ab:5d:3f:a1:d6:90:cc:
                    38:dd:d7:fd:f3:dd:e1:bd:4d:c0:2a:e4:c8:c5:26:
                    55:e1:05:93:df:ae:1b:89:27:e8:3d:10:66:af:37:
                    7c:e1:f2:22:1a:58:e4:dc:e7:91:d7:b5:b3:ec:45:
                    6c:37:25:63:52:f2:92:d1:2f:01:cb:7c:2e:c8:eb:
                    10:55:b2:b0:a7:29:7d:ab:0f:a0:f9:3c:50:88:42:
                    c0:ee:71:9b:e2:dc:b5:0f:e3:c5:b2:55:5a:f7:92:
                    15:93:5c:c8:b2:d5:0a:49:f5:98:89:a2:d1:29:26:
                    53:35:e8:5d:de:ac:7d:50:4a:b1:a7:71:e1:7f:11:
                    c6:19:9b:4f:22:13:a2:30:ce:46:f9:d3:fb:af:dd:
                    8d:1a:aa:75:23:46:12:23:f7:0f:58:34:c9:37:d6:
                    d6:cd:e7:d3:82:03:ba:8d:c6:93:ec:83:64:55:f7:
                    f9:a5:20:ef:58:2e:f0:a7:ca:bc:3b:28:49:40:de:
                    60:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E0:A0:4F:26:F4:81:A2:18:54:AB:DD:FB:E1:A5:1C:8A:57:52:72
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3131332e3230322e302f32332d3233203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.113.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:2a:db:73:ae:8b:0c:9b:53:7c:27:8c:d0:81:e6:57:d2:75:
         98:a3:59:6f:1a:1b:41:c7:96:9c:ff:a3:25:0d:f6:20:9c:7e:
         41:ea:5b:87:f6:93:b9:8d:c7:fa:b7:00:7d:09:6b:35:99:61:
         12:a3:81:05:16:a8:4e:54:7b:32:d5:42:59:5d:16:77:60:5f:
         4c:98:b8:91:c4:39:bd:69:01:27:fc:2c:6a:9e:54:d3:57:91:
         f2:fe:0d:d8:a0:92:3e:e7:03:a7:2d:74:59:75:2a:85:6d:eb:
         84:2d:b8:37:6a:2e:0e:c7:ba:87:f3:5e:e2:ce:bb:4f:b1:b6:
         cb:d0:38:21:f6:b7:e1:e8:5e:78:8a:9b:5d:14:1b:3a:80:b1:
         ab:6e:10:01:db:8a:68:e9:20:49:61:e2:73:4f:5f:78:b8:a9:
         75:9c:28:09:8c:e1:3a:8f:9d:ac:50:75:60:26:46:38:7f:8d:
         4a:52:fc:0e:0f:db:a9:ef:3b:08:6d:ef:38:54:07:d3:23:f5:
         a9:e9:2a:d4:2f:2c:11:17:e6:a5:6a:6f:d0:29:ec:d7:f3:57:
         2a:5d:05:10:e6:c9:95:4f:d7:79:48:ef:1d:f4:06:cf:83:e4:
         6e:bd:93:d9:09:01:a8:4a:e7:b4:ae:a9:b4:47:cf:e9:d6:44:
         f5:db:80:5a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Sep 26 11:48:05 2026 by rpki-client