Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3131372e31302e302f32332d3233203d3e203536303436.roa
File:                     34352e3131372e31302e302f32332d3233203d3e203536303436.roa (raw, json)
Hash identifier:          wqnesz7AUg2T9om9JeG8MPTImRCx0ioSQ+Vo10a4qWQ=
Subject key identifier:   F0:20:89:15:AF:5C:7A:18:33:3A:88:4E:6D:26:83:19:19:55:64:2A
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       67A2AA73AD6B00AA26D99853C94D50CC53D5E4FB
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3131372e31302e302f32332d3233203d3e203536303436.roa
Signing time:             Wed 23 Sep 2026 07:59:04 +0000
ROA not before:           Wed 23 Sep 2026 07:54:04 +0000
ROA not after:            Wed 22 Sep 2027 07:59:04 +0000
asID:                     56046
IP address blocks:        45.117.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 12:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a2:aa:73:ad:6b:00:aa:26:d9:98:53:c9:4d:50:cc:53:d5:e4:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: Sep 23 07:54:04 2026 GMT
            Not After : Sep 22 07:59:04 2027 GMT
        Subject: CN=F0208915AF5C7A18333A884E6D2683191955642A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:98:63:45:8b:24:bf:e6:83:23:5b:01:ae:12:
                    30:f1:4c:40:bf:8a:d4:32:93:47:58:76:9d:12:c7:
                    92:f2:b7:41:3d:45:6c:1b:c5:a4:0d:f4:0a:e8:0d:
                    20:1b:19:9e:1f:01:63:f0:8e:0e:cb:5a:db:e0:0d:
                    c9:f1:25:3d:40:0b:28:6f:a2:15:9a:c9:88:b4:eb:
                    17:23:b8:ff:ba:86:94:42:c2:27:ff:03:6a:93:82:
                    06:58:e7:62:23:aa:5f:01:a4:6b:8c:af:67:40:a7:
                    73:8b:58:d6:0d:52:92:1b:72:cd:6c:b7:3c:6c:0a:
                    07:61:b3:84:c6:fa:16:87:16:69:06:82:67:c5:85:
                    d7:74:52:7d:71:fe:f7:44:40:79:32:d3:27:6c:6d:
                    cd:01:9f:e0:13:b7:d9:f8:2a:72:eb:d1:9d:9a:04:
                    ce:3d:fc:07:36:ea:22:7f:d3:b0:c3:95:7b:9e:e2:
                    8e:b4:77:2f:24:a7:f1:64:9a:72:90:70:a3:72:4f:
                    27:14:8f:c9:fe:50:19:53:8e:ef:85:7d:59:f4:76:
                    16:4e:04:48:df:7d:11:43:a7:51:68:0d:dd:a9:8f:
                    85:d8:96:9b:47:05:01:cd:37:67:a8:82:9a:87:a4:
                    6c:86:b8:82:81:f3:03:4b:d0:d2:5f:39:39:ad:f2:
                    f0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:20:89:15:AF:5C:7A:18:33:3A:88:4E:6D:26:83:19:19:55:64:2A
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3131372e31302e302f32332d3233203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.117.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:df:22:91:dc:3a:27:0e:4f:89:58:3b:ef:4e:11:b8:a5:52:
         14:8a:2a:be:04:e3:de:6b:06:7d:a4:ed:e0:03:d5:3e:e1:e1:
         f8:8e:f6:54:25:c1:15:ca:17:dd:82:39:1e:e8:50:cc:5e:d0:
         23:1c:83:a2:5a:a5:92:d7:a2:1b:cb:07:44:3d:7e:4a:1b:c7:
         4e:ba:84:50:95:d3:bc:42:56:3c:68:77:03:d8:d5:11:1a:bf:
         ec:81:5b:fe:2a:37:3d:9c:d8:a0:25:f9:cf:4d:df:83:14:75:
         1a:e6:aa:b6:a3:0e:fd:70:31:da:71:e5:8d:ad:a0:d5:8a:22:
         ef:ed:e5:6b:06:71:91:5f:92:b2:a6:15:e0:75:6b:6d:6c:f6:
         8f:9c:6f:f2:fe:4d:18:0e:07:a2:e6:91:1c:71:76:5c:f2:18:
         19:6e:bf:08:fd:c1:16:c8:9b:11:24:b5:98:b1:6c:e4:ea:65:
         e6:75:bd:59:fd:6b:ba:75:96:0a:6a:74:fd:b4:09:8e:48:20:
         97:ed:ee:73:ce:3a:84:eb:7e:dc:16:d1:73:8c:44:05:53:73:
         62:a6:d5:21:9f:50:a9:af:2c:b5:e0:ab:b5:9f:a0:86:17:1c:
         29:1a:00:b2:34:04:97:e3:8f:4d:be:69:b0:2a:3a:3d:4e:c9:
         67:d7:20:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:45:08 2026 by rpki-client