Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3131372e31302e302f32342d3234203d3e203536303436.roa
File:                     34352e3131372e31302e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          CnllA+jknX0TmqSb8noH+hwqBj8KilOLSGHwYbtVVPo=
Subject key identifier:   F8:66:D4:47:9D:25:06:0B:72:6D:2F:05:97:A3:91:20:34:A4:CD:7A
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       3648A56FA9A0977EFA3D93DC913FD8B6A26771E6
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3131372e31302e302f32342d3234203d3e203536303436.roa
Signing time:             Tue 12 May 2026 05:13:36 +0000
ROA not before:           Tue 12 May 2026 05:08:36 +0000
ROA not after:            Tue 11 May 2027 05:13:36 +0000
asID:                     56046
IP address blocks:        45.117.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:48:a5:6f:a9:a0:97:7e:fa:3d:93:dc:91:3f:d8:b6:a2:67:71:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: May 12 05:08:36 2026 GMT
            Not After : May 11 05:13:36 2027 GMT
        Subject: CN=F866D4479D25060B726D2F0597A3912034A4CD7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5d:da:a6:d3:c9:50:51:66:57:12:1a:78:6d:
                    83:e6:16:81:2d:99:10:ef:fa:e4:73:62:18:30:24:
                    94:ad:32:d4:9b:9f:cd:c8:af:01:34:25:3e:d8:2f:
                    bb:68:02:60:d1:f0:a3:a1:08:98:30:8b:eb:f2:6a:
                    23:08:43:24:32:c5:35:68:6e:66:44:96:cd:5e:1b:
                    4a:a0:28:bd:70:01:61:0a:9d:9b:58:de:f0:5b:aa:
                    2e:5c:15:d6:b4:46:1c:5e:ed:4a:a8:f3:ea:a9:63:
                    6d:44:b2:15:4e:58:6c:fa:82:99:42:3d:41:af:86:
                    8b:96:81:e0:b4:49:ae:83:65:d4:f0:c5:7e:d2:73:
                    85:7f:e0:82:ea:a2:41:f7:82:14:bd:46:c4:82:6a:
                    01:de:41:c0:9e:55:53:51:ab:6e:ea:5a:43:a5:b5:
                    fc:ca:2e:75:b0:34:01:13:ea:a8:c3:77:c4:77:88:
                    2a:f0:c8:ab:17:cb:c7:33:6e:8a:4b:e9:04:de:2f:
                    46:eb:65:f5:3a:4f:59:29:f3:f4:65:12:df:76:fb:
                    b6:d2:06:b4:01:20:b4:37:03:fc:5c:10:b9:dd:91:
                    24:c3:79:fa:ee:72:e7:a0:13:b6:67:5d:5b:6e:eb:
                    21:79:1d:73:fc:3f:bb:aa:c8:79:74:17:e9:b8:55:
                    fe:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:66:D4:47:9D:25:06:0B:72:6D:2F:05:97:A3:91:20:34:A4:CD:7A
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3131372e31302e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.117.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:0e:64:aa:a5:0d:c1:d7:14:01:52:1a:b2:29:11:08:e9:a2:
         2f:ad:5a:2e:ad:70:bb:f2:3e:2f:8e:5d:a0:ae:69:1a:88:ca:
         ce:c6:19:5c:2c:50:42:01:75:f0:d7:fb:a4:38:54:f7:94:e1:
         56:9e:56:24:7c:85:7a:64:5f:6c:7c:19:db:07:49:a1:c7:c2:
         8a:eb:33:0b:61:c5:32:9f:8a:ca:15:94:24:0a:e9:e8:f5:6f:
         7e:e3:57:a7:42:13:4c:a1:6b:7e:af:c6:38:6f:12:91:bb:58:
         5d:65:4a:33:d5:62:b5:dd:57:72:2c:67:31:6a:e4:94:e2:65:
         f8:65:7d:38:33:4f:44:1e:77:aa:c9:04:d1:18:7f:c9:46:9f:
         3c:3a:62:55:9c:ce:65:34:1e:20:34:26:87:6e:3b:5e:15:95:
         d7:4c:a0:17:7a:57:c6:35:7e:98:1d:67:03:60:21:64:d0:96:
         69:3c:46:6e:e2:b7:26:aa:de:8b:de:1b:8b:0e:43:3c:bb:8f:
         3b:65:45:29:21:4c:eb:99:ca:92:9d:83:ab:81:cf:8a:f6:5d:
         a8:bd:d6:8b:39:89:61:e8:62:48:ee:c9:a5:10:f6:cb:4f:84:
         56:ac:74:b3:02:f3:cb:59:b1:aa:22:f5:07:c4:0e:03:df:7c:
         ef:31:77:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:51:05 2026 by rpki-client