Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3131372e382e302f32332d3233203d3e203536303436.roa
File:                     34352e3131372e382e302f32332d3233203d3e203536303436.roa (raw, json)
Hash identifier:          MmcWqh70SF+C/LgWWbEOJoGormUQAq2zfc0Dc/UxdBE=
Subject key identifier:   31:F0:9E:14:4A:39:33:67:8D:99:07:BB:2E:E0:8A:10:90:46:A7:FE
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       50DA78243021E35EF0C79802CE039BDBD4F8BFB8
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3131372e382e302f32332d3233203d3e203536303436.roa
Signing time:             Wed 23 Sep 2026 07:59:04 +0000
ROA not before:           Wed 23 Sep 2026 07:54:04 +0000
ROA not after:            Wed 22 Sep 2027 07:59:04 +0000
asID:                     56046
IP address blocks:        45.117.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 00:41:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:da:78:24:30:21:e3:5e:f0:c7:98:02:ce:03:9b:db:d4:f8:bf:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: Sep 23 07:54:04 2026 GMT
            Not After : Sep 22 07:59:04 2027 GMT
        Subject: CN=31F09E144A3933678D9907BB2EE08A109046A7FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b8:a5:ee:2c:55:12:f2:95:4e:37:a1:e1:66:
                    61:7a:d7:84:f6:ed:c3:a2:60:a9:b1:59:17:38:91:
                    5d:6d:43:d5:0a:e4:2f:23:5c:6d:97:4c:99:4e:67:
                    04:11:7c:e8:a4:c5:c0:20:ab:38:06:d0:87:a4:3f:
                    eb:10:fc:24:b4:ff:d3:5f:20:a7:93:ad:1d:2c:47:
                    63:76:eb:5f:e5:ca:0c:94:88:81:95:60:21:49:53:
                    46:a5:ef:fa:40:00:36:07:ab:f7:f1:91:c1:d9:9c:
                    7a:aa:5b:8d:af:8a:5f:9c:b5:8e:56:60:c6:9d:7f:
                    91:25:01:b4:99:c6:4d:0e:9a:5c:4b:da:05:fe:f5:
                    75:1f:bb:4e:2f:3f:9f:68:4b:9c:82:0c:14:90:aa:
                    1e:31:aa:81:fa:07:a8:c0:8a:46:de:99:45:4c:20:
                    0c:d2:e8:17:a4:ca:ae:3f:13:74:d6:c0:7a:3b:e6:
                    f4:ea:d6:86:d0:ce:f9:c3:19:ec:fc:f3:40:3e:8f:
                    d6:15:e7:79:2c:fe:68:49:10:a6:37:0c:ed:4c:f9:
                    50:e1:1a:86:ea:f9:1d:a0:14:99:17:35:7d:23:d8:
                    59:9a:fe:d6:95:fe:8c:0e:aa:d1:e8:0f:f9:c4:c0:
                    ec:99:c6:f8:01:22:94:b4:d7:48:1b:7e:6d:a6:15:
                    a1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F0:9E:14:4A:39:33:67:8D:99:07:BB:2E:E0:8A:10:90:46:A7:FE
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3131372e382e302f32332d3233203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.117.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:01:d8:26:6d:9e:05:14:c3:fd:b7:e7:cc:fb:1f:25:65:25:
         d2:5a:94:38:ec:4a:53:54:fb:9d:b4:2e:d2:28:49:a7:c6:7e:
         00:35:f5:85:36:fc:28:3d:25:00:1f:62:25:99:0d:1e:07:a3:
         62:d7:1d:e2:e0:78:2a:c7:c6:a8:33:42:47:fc:ba:9f:ee:14:
         5e:9a:06:e1:f9:01:e8:d6:f5:ea:c5:07:98:f1:c8:33:9d:57:
         28:3e:35:0e:02:d1:75:f0:0c:5f:0f:3b:ad:a1:4e:fa:b2:0b:
         0d:4f:fc:15:2a:ed:2a:b1:63:4d:e5:c3:85:33:d5:1c:63:67:
         01:55:18:70:b2:d7:a1:a1:8b:4f:a0:a4:6e:16:b8:d0:00:55:
         0a:f8:59:0c:50:49:d0:04:c7:bb:6f:f7:3c:63:85:d5:b0:5e:
         86:1f:e3:c2:a5:35:21:b2:91:d1:92:92:e3:c5:dd:21:88:a8:
         bf:ef:d2:bb:a8:7f:1c:f2:0b:9d:e0:9f:0b:d7:bb:bd:ca:a0:
         8e:cf:15:67:a0:0a:59:51:08:fb:75:02:7d:a1:bd:25:58:69:
         5e:c0:f1:fe:01:07:4c:5e:41:bb:a0:ec:00:2b:1d:ca:e5:a8:
         79:55:45:ab:5c:9b:ec:bc:87:cb:b2:7c:ff:10:9b:8d:73:b4:
         58:3f:7d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:39:46 2026 by rpki-client