Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3131332e3230332e302f32342d3234203d3e203536303436.roa
File:                     34352e3131332e3230332e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          Sf1KO3EBAyRPzG15NqXEynFsi98l609ssxbj5Z+7W2Q=
Subject key identifier:   38:DF:8B:68:2D:D3:63:AC:19:99:5E:7D:91:19:C6:AF:60:36:89:BC
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       208069E2EA189C034064BA754CCA210BFD68AC7B
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3131332e3230332e302f32342d3234203d3e203536303436.roa
Signing time:             Fri 18 Sep 2026 01:24:17 +0000
ROA not before:           Fri 18 Sep 2026 01:19:17 +0000
ROA not after:            Fri 17 Sep 2027 01:24:17 +0000
asID:                     56046
IP address blocks:        45.113.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 12:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:80:69:e2:ea:18:9c:03:40:64:ba:75:4c:ca:21:0b:fd:68:ac:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: Sep 18 01:19:17 2026 GMT
            Not After : Sep 17 01:24:17 2027 GMT
        Subject: CN=38DF8B682DD363AC19995E7D9119C6AF603689BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d6:d3:31:cb:54:e5:81:08:f6:94:3e:11:bf:
                    a6:82:e7:8c:70:b9:59:79:14:33:c7:64:2b:0b:7c:
                    09:4e:ce:8d:e0:ba:79:ff:bd:73:78:84:dd:84:2e:
                    27:4c:cf:fb:cf:9e:af:0d:ae:df:70:58:e5:7c:51:
                    6a:c3:b3:46:b3:9f:b4:73:17:b4:e2:d9:c0:a9:87:
                    61:c7:04:ab:e9:ca:12:d6:89:1e:21:73:66:17:b7:
                    32:3e:40:2b:63:0c:57:15:ea:41:f1:f0:b3:71:a6:
                    cf:a8:ac:98:79:03:04:4e:24:e3:1d:bd:e7:59:88:
                    14:e2:3e:69:56:53:f2:f3:d8:dc:ad:bf:cb:1c:7b:
                    4c:c0:3e:11:e5:7b:38:fc:6a:58:a4:90:e4:69:23:
                    72:2d:0b:66:8f:b7:88:82:03:dc:8d:a7:e6:32:54:
                    1d:09:61:4a:e2:45:9a:09:e5:d5:03:94:26:a8:ef:
                    12:9b:71:f7:30:31:85:0f:d9:ea:48:96:61:d3:68:
                    2b:56:19:ab:b8:fc:a7:89:d3:7c:d0:21:9d:3f:67:
                    26:f5:82:a3:08:3d:05:ce:bf:6d:2f:b8:7c:14:ec:
                    02:7e:68:f4:31:41:93:1b:c8:5a:64:7c:46:51:8b:
                    3c:5d:4c:9b:63:2c:62:53:d0:f8:a6:50:a2:ba:1f:
                    71:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DF:8B:68:2D:D3:63:AC:19:99:5E:7D:91:19:C6:AF:60:36:89:BC
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3131332e3230332e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.113.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:8d:65:cd:7f:af:a8:c7:92:c2:c2:60:3d:cc:70:eb:c3:51:
         c9:5a:87:ba:96:1e:2c:a1:28:c4:e6:40:19:9f:10:61:92:2e:
         19:ae:18:c0:04:d4:26:bd:56:75:eb:f6:57:5e:df:41:ba:79:
         14:d0:cc:e2:f9:2a:e5:bf:b0:08:51:f9:13:e7:09:2f:37:c1:
         79:76:96:12:61:a4:b6:b3:c5:95:cf:44:ac:1c:45:5b:1f:cf:
         f5:0e:d8:5d:a4:76:d6:76:36:91:d5:9c:14:fd:68:a9:3b:70:
         b8:7d:e6:c8:06:89:79:4c:1c:e7:46:97:44:44:db:e8:f9:24:
         ab:51:64:37:6a:51:b3:4c:e9:8c:63:ec:46:5c:b2:9e:1c:bc:
         c5:b5:65:43:9b:d7:29:9a:36:ca:c6:6f:fc:2c:6e:54:34:06:
         21:32:ab:9b:18:5d:3f:5c:2d:64:2a:8c:6a:d7:44:e0:10:91:
         dc:4e:6e:c3:57:ac:41:ba:96:61:f9:8e:07:34:ac:2d:12:de:
         34:44:16:2d:48:92:5f:4e:b3:06:1e:6b:75:da:68:2a:12:fa:
         35:45:bd:20:34:89:30:e9:07:1c:96:cb:f6:91:ba:19:ab:00:
         7d:d2:cf:63:2c:88:01:ac:e0:96:ad:17:ba:ac:7a:e5:89:31:
         96:21:c8:f0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Sep 26 11:47:07 2026 by rpki-client