Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094872834095775747/0/AS56040.roa
File:                     AS56040.roa (raw, json)
Hash identifier:          g78yZoAVMKQMZ7cIWYjzvt4vjbasDrsEY1aaxhBQX8U=
Subject key identifier:   58:EB:68:BD:10:25:4C:6B:0C:EF:8A:5D:42:56:4D:8E:B3:F1:7C:09
Certificate issuer:       /CN=A91D5F3D0000/serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
Certificate serial:       78C77E5371D503DA1DD1886F5646ACCCFE500243
Authority key identifier: DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/AS56040.roa
Signing time:             Tue 12 May 2026 08:03:19 +0000
ROA not before:           Tue 12 May 2026 07:58:19 +0000
ROA not after:            Tue 11 May 2027 08:03:19 +0000
asID:                     56040
IP address blocks:        2409:8054::/32 maxlen: 32
                          2409:8054:3001::/48 maxlen: 48
                          2409:8054:3009::/48 maxlen: 48
                          2409:8054:3011::/48 maxlen: 48
                          2409:8054:3019::/48 maxlen: 48
                          2409:8054:302a::/48 maxlen: 48
                          2409:8054:3034::/48 maxlen: 48
                          2409:8054:3044::/48 maxlen: 48
                          2409:8054:3048::/48 maxlen: 48
                          2409:8054:304c::/48 maxlen: 48
                          2409:8054:3073::/48 maxlen: 48
                          2409:8055::/32 maxlen: 32
                          2409:8055:3001::/48 maxlen: 48
                          2409:8055:3009::/48 maxlen: 48
                          2409:8055:3011::/48 maxlen: 48
                          2409:8055:3019::/48 maxlen: 48
                          2409:8055:302a::/48 maxlen: 48
                          2409:8055:3034::/48 maxlen: 48
                          2409:8055:3044::/48 maxlen: 48
                          2409:8055:3048::/48 maxlen: 48
                          2409:8055:304c::/48 maxlen: 48
                          2409:8055:3070::/48 maxlen: 48
                          2409:8055:3073::/48 maxlen: 48
                          2409:8055:3810::/48 maxlen: 48
                          2409:8056::/32 maxlen: 32
                          2409:8057::/32 maxlen: 32
                          2409:8057:2070::/48 maxlen: 48
                          2409:8057:3009::/48 maxlen: 48
                          2409:8057:3034::/48 maxlen: 48
                          2409:8057:3048::/48 maxlen: 48
                          2409:8057:304c::/48 maxlen: 48
                          2409:8057:3073::/48 maxlen: 48
                          2409:8058::/32 maxlen: 32
                          2409:8059::/32 maxlen: 32
                          2409:805a::/32 maxlen: 32
                          2409:805b::/32 maxlen: 32
                          2409:8754::/32 maxlen: 32
                          2409:8754:612::/48 maxlen: 48
                          2409:8754:613::/48 maxlen: 48
                          2409:8754:3e0f::/48 maxlen: 48
                          2409:8754:3ef0::/44 maxlen: 44
                          2409:8754:fe00::/41 maxlen: 41
                          2409:8754:fe80::/41 maxlen: 41
                          2409:8755::/32 maxlen: 32
                          2409:8756::/32 maxlen: 32
                          2409:8757::/32 maxlen: 32
                          2409:8758::/32 maxlen: 32
                          2409:8759::/32 maxlen: 32
                          2409:875a::/32 maxlen: 32
                          2409:875b::/32 maxlen: 32
                          2409:8854::/40 maxlen: 40
                          2409:8954::/32 maxlen: 32
                          2409:8955::/32 maxlen: 32
                          2409:8956::/32 maxlen: 32
                          2409:8957::/32 maxlen: 32
                          2409:8958::/32 maxlen: 32
                          2409:8959::/32 maxlen: 32
                          2409:895a::/32 maxlen: 32
                          2409:895a:bf9::/48 maxlen: 48
                          2409:895a:bfa::/48 maxlen: 48
                          2409:895a:75f8::/46 maxlen: 46
                          2409:895a:75fc::/46 maxlen: 46
                          2409:895a:d18e::/48 maxlen: 48
                          2409:895a:d18f::/48 maxlen: 48
                          2409:895b::/32 maxlen: 32
                          2409:8a54::/32 maxlen: 32
                          2409:8a55::/32 maxlen: 32
                          2409:8a56::/32 maxlen: 32
                          2409:8a56:230e::/47 maxlen: 47
                          2409:8a56:23e0::/43 maxlen: 43
                          2409:8a57::/32 maxlen: 32
                          2409:8a58::/32 maxlen: 32
                          2409:8a59::/32 maxlen: 32
                          2409:8a5a::/32 maxlen: 32
                          2409:8a5b::/32 maxlen: 32
                          2409:8b54::/32 maxlen: 32
                          2409:8b55::/32 maxlen: 32
                          2409:8b56::/32 maxlen: 32
                          2409:8b57::/32 maxlen: 32
                          2409:8b58::/32 maxlen: 32
                          2409:8b59::/32 maxlen: 32
                          2409:8b5a::/32 maxlen: 32
                          2409:8b5b::/32 maxlen: 32
                          2409:8c54::/32 maxlen: 32
                          2409:8c54:900::/40 maxlen: 40
                          2409:8c54:3000::/40 maxlen: 40
                          2409:8c54:3810::/44 maxlen: 44
                          2409:8c54:4010::/44 maxlen: 44
                          2409:8c54:4020::/44 maxlen: 44
                          2409:8c54:4800::/40 maxlen: 40
                          2409:8c54:5810::/44 maxlen: 44
                          2409:8c54:6000::/40 maxlen: 40
                          2409:8c54:7010::/44 maxlen: 44
                          2409:8c54:8010::/44 maxlen: 44
                          2409:8c54:8810::/44 maxlen: 44
                          2409:8c54:9010::/44 maxlen: 44
                          2409:8c54:9820::/44 maxlen: 44
                          2409:8c54:a010::/44 maxlen: 44
                          2409:8c54:a810::/44 maxlen: 44
                          2409:8c54:a820::/44 maxlen: 44
                          2409:8c55::/32 maxlen: 32
                          2409:8c56::/32 maxlen: 32
                          2409:8c57::/32 maxlen: 32
                          2409:8c58::/32 maxlen: 32
                          2409:8c59::/32 maxlen: 32
                          2409:8c5a::/32 maxlen: 32
                          2409:8c5b::/32 maxlen: 32
                          2409:8d54::/30 maxlen: 30
                          2409:8d58::/30 maxlen: 30
                          2409:8d5a::/32 maxlen: 32
                          2409:8e54::/30 maxlen: 30
                          2409:8e58::/30 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:37:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c7:7e:53:71:d5:03:da:1d:d1:88:6f:56:46:ac:cc:fe:50:02:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5F3D0000, serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
        Validity
            Not Before: May 12 07:58:19 2026 GMT
            Not After : May 11 08:03:19 2027 GMT
        Subject: CN=58EB68BD10254C6B0CEF8A5D42564D8EB3F17C09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:da:e0:d8:b8:8e:c9:2b:2b:03:03:df:40:08:
                    c3:c2:25:9e:ca:fd:cf:24:36:c7:0f:9f:06:5b:51:
                    c9:8e:c7:84:ab:d2:25:9f:e1:22:19:22:56:e3:0f:
                    c9:79:bf:84:46:a5:02:d7:06:2b:82:e2:43:e2:68:
                    5a:38:24:72:af:41:bc:1f:4a:24:83:7c:ec:62:0d:
                    9b:1a:3c:53:e6:3d:69:4b:da:a0:94:1f:2f:08:d7:
                    5b:be:1b:c2:c2:33:55:ed:e1:2f:1d:19:69:4b:b3:
                    52:f7:80:9d:f3:b1:14:44:04:b5:f8:fa:c4:7a:b3:
                    6b:d4:b2:f5:65:d1:59:68:d8:e6:cf:ae:86:f6:e8:
                    86:0f:84:c2:a0:53:9c:21:29:89:0a:15:3b:0b:18:
                    36:b6:a2:81:8a:75:66:74:80:56:cb:fc:62:9a:b2:
                    b7:72:e5:2d:31:f2:6c:8f:fe:62:fd:b4:49:51:e8:
                    60:61:13:dd:80:0f:48:d5:2d:3c:6b:00:88:9c:c4:
                    4a:30:a0:ab:dc:c3:36:98:c4:8d:a2:bd:f5:c6:d8:
                    86:f2:6e:b3:d6:9b:42:ac:25:c1:96:ad:2d:c2:d7:
                    36:d7:6a:1d:62:88:f3:5b:dd:a3:df:38:e3:9c:f7:
                    50:d9:69:b7:d2:f0:77:55:67:ec:07:93:16:3c:fb:
                    43:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EB:68:BD:10:25:4C:6B:0C:EF:8A:5D:42:56:4D:8E:B3:F1:7C:09
            X509v3 Authority Key Identifier:
                keyid:DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/AS56040.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2409:8054::-2409:805b:ffff:ffff:ffff:ffff:ffff:ffff
                  2409:8754::-2409:875b:ffff:ffff:ffff:ffff:ffff:ffff
                  2409:8854::/40
                  2409:8954::-2409:895b:ffff:ffff:ffff:ffff:ffff:ffff
                  2409:8a54::-2409:8a5b:ffff:ffff:ffff:ffff:ffff:ffff
                  2409:8b54::-2409:8b5b:ffff:ffff:ffff:ffff:ffff:ffff
                  2409:8c54::-2409:8c5b:ffff:ffff:ffff:ffff:ffff:ffff
                  2409:8d54::-2409:8d5b:ffff:ffff:ffff:ffff:ffff:ffff
                  2409:8e54::-2409:8e5b:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         69:26:06:45:b5:dc:d3:88:4b:bc:74:96:4a:a2:63:9a:d4:76:
         3e:92:81:ca:7c:de:9c:2d:0f:61:54:3e:af:30:67:94:47:e4:
         82:7b:ef:ab:3a:61:ba:87:af:3c:ca:5b:57:34:ef:69:3d:b8:
         ef:0f:a2:25:29:1a:a0:ea:a3:a3:8d:20:b9:a8:b4:4a:df:fc:
         1f:a4:49:58:18:ac:4d:00:7b:a6:9b:ea:7f:d0:dc:6f:ed:48:
         13:cf:d3:cc:b9:52:c4:1a:a2:6c:84:e9:f9:7a:85:71:31:8b:
         de:cf:18:ec:db:23:d5:aa:3d:26:27:d9:fd:80:1b:a3:b4:53:
         c7:d8:fe:d2:b1:f1:3f:77:d3:7b:94:3b:45:64:a2:ae:82:d7:
         fc:5e:af:aa:ab:be:15:5c:4f:41:ae:42:3a:25:1c:76:bb:ae:
         34:dc:69:d7:9e:3b:ac:50:cf:81:c5:36:c6:65:88:4f:0c:4e:
         53:86:24:97:f0:1e:1d:90:23:f8:91:d1:bd:39:70:1a:cc:18:
         03:73:c0:b6:35:d6:1c:aa:31:70:f9:59:ab:73:a0:6d:74:c1:
         fd:ef:c9:b2:42:f1:02:02:0b:c4:1e:72:be:25:14:17:19:62:
         0c:83:78:6c:69:cb:48:e4:bb:5c:aa:33:10:4c:7d:15:f7:a8:
         c0:e0:19:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:45 2026 by rpki-client