Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3131332e3230322e302f32342d3234203d3e203536303436.roa
File:                     34352e3131332e3230322e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          oSNt8sddBxklJu/VJo6/2d/k0aVGt8NiUETmfAqawWQ=
Subject key identifier:   D4:96:20:18:67:63:51:B2:0C:73:91:82:66:F6:BE:9A:47:21:2F:AD
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       267AF41D6F767E5E87DB557213416C419AF76674
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3131332e3230322e302f32342d3234203d3e203536303436.roa
Signing time:             Tue 12 May 2026 05:13:36 +0000
ROA not before:           Tue 12 May 2026 05:08:36 +0000
ROA not after:            Tue 11 May 2027 05:13:36 +0000
asID:                     56046
IP address blocks:        45.113.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:7a:f4:1d:6f:76:7e:5e:87:db:55:72:13:41:6c:41:9a:f7:66:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: May 12 05:08:36 2026 GMT
            Not After : May 11 05:13:36 2027 GMT
        Subject: CN=D4962018676351B20C73918266F6BE9A47212FAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:aa:e6:94:49:a1:98:95:d2:14:bf:de:18:03:
                    0b:b4:6b:9d:a1:13:03:ea:bc:78:a2:28:cf:81:59:
                    3a:d4:44:ad:f9:97:4d:53:47:65:1d:f3:d2:5b:ed:
                    41:cf:3d:05:de:74:95:09:7f:91:fa:f6:e5:37:eb:
                    e3:b1:9d:6f:83:33:0a:0a:ff:10:d7:bf:db:c3:5d:
                    3e:ae:f8:8b:fb:40:f4:ae:9e:a7:2f:72:77:ac:29:
                    a2:d6:8b:cf:c7:01:f9:91:f4:68:5d:0f:16:95:e0:
                    5c:1e:7c:f8:f0:34:2a:6c:1b:28:50:a3:1d:f1:42:
                    ef:f9:7d:62:06:19:55:43:ec:ae:8f:b2:2c:82:f8:
                    6a:be:48:61:38:72:4c:11:fe:ae:b9:68:e5:06:dd:
                    c6:25:f5:94:1f:21:3f:78:9d:2d:55:5b:fc:54:be:
                    6a:96:e1:52:fa:fb:b2:65:97:b0:07:05:9b:e4:3f:
                    f8:e2:04:54:08:93:09:90:07:31:83:6c:32:cb:66:
                    6d:66:e6:7c:bc:5b:bc:d9:e7:c2:cb:6c:1c:f3:21:
                    c4:ba:b8:3f:5a:ae:26:3a:69:fb:f2:dd:f8:3a:72:
                    e5:b7:31:70:66:14:9f:15:fe:e9:e7:d3:c9:d8:c8:
                    75:46:ff:b6:45:e3:84:80:73:04:13:82:72:c5:ae:
                    a9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:96:20:18:67:63:51:B2:0C:73:91:82:66:F6:BE:9A:47:21:2F:AD
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3131332e3230322e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.113.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:83:56:d6:89:2d:d8:f7:89:f1:e0:68:d6:fe:95:6e:f9:ba:
         b3:39:88:2e:ae:4a:f8:44:6b:3a:9b:a4:76:f0:8b:cb:dc:d6:
         ad:33:db:18:20:2c:ee:3b:f0:d4:a1:41:7c:1a:b8:e6:45:de:
         29:f1:9f:70:ba:38:b4:67:87:77:db:09:01:fe:9d:ca:32:31:
         1d:df:71:9a:51:eb:11:20:c0:a2:91:a6:1a:f1:80:16:9e:de:
         ea:a1:83:24:d2:80:9a:b4:4f:a2:04:3c:e0:69:c9:08:16:a2:
         01:57:7d:1b:51:63:b6:f8:6f:e5:ec:c4:40:73:32:1a:6d:72:
         1d:ff:0b:0e:5e:d1:fe:08:ce:73:b5:b2:8b:c2:97:4e:d6:48:
         5d:f0:24:18:32:2a:32:43:b0:76:a9:b8:7d:66:84:30:be:b1:
         4f:3e:24:e2:44:9d:55:83:69:f3:34:1b:9f:73:50:e2:5e:d9:
         e0:dd:52:12:46:3b:7b:cc:99:d0:0b:09:e1:b6:ee:0e:51:8b:
         f8:54:63:36:bd:77:53:b8:72:83:6f:b0:87:1d:c9:b5:b9:ec:
         46:fd:ad:48:83:ef:5e:1b:1e:88:85:25:75:fc:bf:91:6b:21:
         e5:0c:fb:08:49:a9:47:0e:6c:d7:c0:78:52:c4:5a:46:d6:52:
         68:fb:23:55
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUJnr0HW92fl6H21VyE0FsQZr3ZnQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZD
RERCNDRGMDAeFw0yNjA1MTIwNTA4MzZaFw0yNzA1MTEwNTEzMzZaMDMxMTAvBgNV
BAMTKEQ0OTYyMDE4Njc2MzUxQjIwQzczOTE4MjY2RjZCRTlBNDcyMTJGQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLquaUSaGYldIUv94YAwu0a52h
EwPqvHiiKM+BWTrURK35l01TR2Ud89Jb7UHPPQXedJUJf5H69uU36+OxnW+DMwoK
/xDXv9vDXT6u+Iv7QPSunqcvcnesKaLWi8/HAfmR9GhdDxaV4FwefPjwNCpsGyhQ
ox3xQu/5fWIGGVVD7K6PsiyC+Gq+SGE4ckwR/q65aOUG3cYl9ZQfIT94nS1VW/xU
vmqW4VL6+7Jll7AHBZvkP/jiBFQIkwmQBzGDbDLLZm1m5ny8W7zZ58LLbBzzIcS6
uD9ariY6afvy3fg6cuW3MXBmFJ8V/unn08nYyHVG/7ZF44SAcwQTgnLFrqk9AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU1JYgGGdjUbIMc5GCZva+mkchL60wHwYDVR0j
BBgwFoAUsflVBncgFFTrIGzP0Fl4P83bRPAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDgxNTQ4OS8wL0IxRjk1NTA2NzcyMDE0NTRFQjIwNkNDRkQwNTk3
ODNGQ0REQjQ0RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZDRERCNDRGMC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3OTc5NjcxNDgxNTQ4OS8wLzM0MzUyZTMxMzEz
MzJlMzIzMDMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAC1xyjANBgkqhkiG9w0BAQsFAAOCAQEAZoNW1okt2PeJ8eBo1v6Vbvm6
szmILq5K+ERrOpukdvCLy9zWrTPbGCAs7jvw1KFBfBq45kXeKfGfcLo4tGeHd9sJ
Af6dyjIxHd9xmlHrESDAopGmGvGAFp7e6qGDJNKAmrRPogQ84GnJCBaiAVd9G1Fj
tvhv5ezEQHMyGm1yHf8LDl7R/gjOc7Wyi8KXTtZIXfAkGDIqMkOwdqm4fWaEML6x
Tz4k4kSdVYNp8zQbn3NQ4l7Z4N1SEkY7e8yZ0AsJ4bbuDlGL+FRjNr13U7hyg2+w
hx3JtbnsRv2tSIPvXhseiIUldfy/kWsh5Qz7CEmpRw5s18B4UsRaRtZSaPsjVQ==
-----END CERTIFICATE-----
Generated at Wed May 13 14:33:55 2026 by rpki-client