Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106832787505152019/0/AS56046.roa
File: AS56046.roa (raw, json)
Hash identifier: gGXiluqmxluxPzb4gLlKASim9X/C6SeCXXwOSP8/BV8=
Subject key identifier: C2:3D:34:62:0A:54:1E:FC:D8:6B:3B:34:C2:DA:AC:AF:03:47:6F:B6
Certificate issuer: /CN=3AB44778399E57EC4D9B2DF6AC8042C6637E0F66
Certificate serial: 0D0703DCA2F77BF58488EF1F23E9EB225A4DAF4C
Authority key identifier: 3A:B4:47:78:39:9E:57:EC:4D:9B:2D:F6:AC:80:42:C6:63:7E:0F:66
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/AS56046.roa
Signing time: Wed 13 May 2026 08:47:18 +0000
ROA not before: Wed 13 May 2026 08:42:18 +0000
ROA not after: Wed 12 May 2027 08:47:18 +0000
asID: 56046
IP address blocks: 36.206.32.0/20 maxlen: 20
36.206.56.0/21 maxlen: 21
36.206.64.0/20 maxlen: 20
36.206.128.0/20 maxlen: 20
36.206.144.0/20 maxlen: 20
36.206.160.0/20 maxlen: 20
36.206.176.0/24 maxlen: 24
36.206.177.0/24 maxlen: 24
36.206.178.0/23 maxlen: 23
36.206.180.0/22 maxlen: 22
36.206.192.0/20 maxlen: 20
36.206.240.0/20 maxlen: 20
36.213.104.0/24 maxlen: 24
36.213.107.0/24 maxlen: 24
36.213.110.0/24 maxlen: 24
36.213.115.0/24 maxlen: 24
36.213.128.0/24 maxlen: 24
36.213.129.0/24 maxlen: 24
36.221.0.0/19 maxlen: 19
110.100.0.0/23 maxlen: 23
110.100.2.0/23 maxlen: 23
110.100.4.0/23 maxlen: 23
110.100.6.0/23 maxlen: 23
110.100.8.0/21 maxlen: 21
110.100.16.0/21 maxlen: 21
110.100.32.0/20 maxlen: 20
110.100.56.0/21 maxlen: 21
110.100.64.0/20 maxlen: 20
110.100.96.0/20 maxlen: 20
110.100.128.0/20 maxlen: 20
110.100.144.0/20 maxlen: 20
110.100.200.0/21 maxlen: 21
110.100.208.0/20 maxlen: 20
110.100.224.0/20 maxlen: 20
110.116.0.0/20 maxlen: 20
110.116.16.0/20 maxlen: 20
110.116.48.0/20 maxlen: 20
110.116.64.0/21 maxlen: 21
110.116.80.0/21 maxlen: 21
110.116.112.0/20 maxlen: 20
110.116.128.0/20 maxlen: 20
110.116.144.0/20 maxlen: 20
110.116.176.0/21 maxlen: 21
110.116.192.0/20 maxlen: 20
110.199.0.0/20 maxlen: 20
110.199.16.0/20 maxlen: 20
110.199.48.0/20 maxlen: 20
110.199.64.0/20 maxlen: 20
110.199.96.0/20 maxlen: 20
110.199.128.0/20 maxlen: 20
110.199.176.0/21 maxlen: 21
110.199.184.0/21 maxlen: 21
110.199.192.0/20 maxlen: 20
110.199.224.0/20 maxlen: 20
110.218.0.0/20 maxlen: 20
110.218.16.0/20 maxlen: 20
110.218.32.0/20 maxlen: 20
110.218.112.0/20 maxlen: 20
110.218.136.0/21 maxlen: 21
110.218.176.0/24 maxlen: 24
110.218.177.0/24 maxlen: 24
110.218.178.0/23 maxlen: 23
110.218.180.0/22 maxlen: 22
110.218.192.0/20 maxlen: 20
110.218.192.0/22 maxlen: 22
110.218.196.0/22 maxlen: 22
110.218.224.0/20 maxlen: 20
110.218.240.0/20 maxlen: 20
110.219.0.0/19 maxlen: 19
110.219.64.0/23 maxlen: 23
110.219.66.0/24 maxlen: 24
110.219.67.0/24 maxlen: 24
110.219.68.0/24 maxlen: 24
110.219.128.0/19 maxlen: 19
122.94.0.0/20 maxlen: 20
122.94.16.0/20 maxlen: 20
122.94.64.0/20 maxlen: 20
122.94.128.0/21 maxlen: 21
122.94.136.0/21 maxlen: 21
122.94.144.0/20 maxlen: 20
122.94.176.0/21 maxlen: 21
122.94.184.0/21 maxlen: 21
122.94.192.0/20 maxlen: 20
122.94.224.0/20 maxlen: 20
123.77.0.0/20 maxlen: 20
123.77.16.0/20 maxlen: 20
123.77.48.0/21 maxlen: 21
123.77.56.0/21 maxlen: 21
123.77.64.0/20 maxlen: 20
123.77.96.0/20 maxlen: 20
123.77.128.0/20 maxlen: 20
123.77.192.0/22 maxlen: 22
123.77.196.0/22 maxlen: 22
123.77.200.0/21 maxlen: 21
123.77.208.0/20 maxlen: 20
123.77.224.0/20 maxlen: 20
123.77.240.0/20 maxlen: 20
222.45.0.0/21 maxlen: 21
222.45.8.0/21 maxlen: 21
222.45.16.0/20 maxlen: 20
222.45.32.0/19 maxlen: 19
222.45.64.0/20 maxlen: 20
222.45.96.0/20 maxlen: 20
222.45.128.0/21 maxlen: 21
222.45.144.0/21 maxlen: 21
222.45.160.0/20 maxlen: 20
222.45.192.0/20 maxlen: 20
222.45.240.0/20 maxlen: 20
222.49.128.0/21 maxlen: 21
222.49.136.0/22 maxlen: 22
222.49.140.0/22 maxlen: 22
222.49.144.0/21 maxlen: 21
222.49.152.0/21 maxlen: 21
222.49.160.0/20 maxlen: 20
222.49.176.0/20 maxlen: 20
222.49.192.0/19 maxlen: 19
222.59.128.0/21 maxlen: 21
222.59.136.0/21 maxlen: 21
222.59.144.0/20 maxlen: 20
222.59.160.0/19 maxlen: 19
222.59.192.0/20 maxlen: 20
222.59.208.0/20 maxlen: 20
222.59.224.0/20 maxlen: 20
222.59.240.0/21 maxlen: 21
222.59.248.0/22 maxlen: 22
222.59.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl
rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:40:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:07:03:dc:a2:f7:7b:f5:84:88:ef:1f:23:e9:eb:22:5a:4d:af:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3AB44778399E57EC4D9B2DF6AC8042C6637E0F66
Validity
Not Before: May 13 08:42:18 2026 GMT
Not After : May 12 08:47:18 2027 GMT
Subject: CN=C23D34620A541EFCD86B3B34C2DAACAF03476FB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:02:56:62:7c:03:19:1c:3a:19:5d:a5:98:5b:
91:4c:01:e0:85:41:5a:bb:6d:d2:4e:c8:f2:73:8a:
32:ae:ec:68:74:12:62:3c:d1:49:b0:79:6a:99:7b:
fb:69:4c:67:83:80:c5:83:f5:8c:ed:77:76:ef:18:
0b:3e:91:67:eb:73:95:98:7a:98:04:10:ec:14:72:
38:1d:3f:fb:24:d4:46:88:87:12:2a:5b:fd:e9:2c:
5d:f5:d1:25:d6:fd:54:1d:ce:6c:1a:da:28:7e:9d:
08:d3:6e:69:0b:d8:59:e8:94:85:59:7f:94:05:83:
ba:7b:e5:9c:34:b0:ca:1e:10:01:e9:77:43:b5:a2:
a0:59:cf:99:f4:99:9c:84:9c:b6:68:06:5d:f9:5e:
57:49:f5:6e:b3:6e:e7:bb:a8:e2:b6:b0:71:b7:51:
9e:e9:c3:02:1c:3d:e8:6f:1c:bb:80:09:7e:70:28:
63:c5:63:2a:3d:05:fa:3e:67:38:82:de:7d:ba:f7:
44:87:11:af:a3:3b:92:b4:df:9c:93:47:74:ac:aa:
64:b5:ce:e9:4e:d8:a2:0d:e3:e2:9f:5b:fd:74:67:
7b:22:37:75:17:52:bd:73:5c:d0:4f:c7:9e:65:ee:
f3:cc:58:9c:5c:b5:ca:d2:69:98:61:8f:fa:e2:1d:
32:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3D:34:62:0A:54:1E:FC:D8:6B:3B:34:C2:DA:AC:AF:03:47:6F:B6
X509v3 Authority Key Identifier:
keyid:3A:B4:47:78:39:9E:57:EC:4D:9B:2D:F6:AC:80:42:C6:63:7E:0F:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/AS56046.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.206.32.0/20
36.206.56.0-36.206.79.255
36.206.128.0-36.206.183.255
36.206.192.0/20
36.206.240.0/20
36.213.104.0/24
36.213.107.0/24
36.213.110.0/24
36.213.115.0/24
36.213.128.0/23
36.221.0.0/19
110.100.0.0-110.100.23.255
110.100.32.0/20
110.100.56.0-110.100.79.255
110.100.96.0/20
110.100.128.0/19
110.100.200.0-110.100.239.255
110.116.0.0/19
110.116.48.0-110.116.71.255
110.116.80.0/21
110.116.112.0-110.116.159.255
110.116.176.0/21
110.116.192.0/20
110.199.0.0/19
110.199.48.0-110.199.79.255
110.199.96.0/20
110.199.128.0/20
110.199.176.0-110.199.207.255
110.199.224.0/20
110.218.0.0-110.218.47.255
110.218.112.0/20
110.218.136.0/21
110.218.176.0/21
110.218.192.0/20
110.218.224.0-110.219.31.255
110.219.64.0-110.219.68.255
110.219.128.0/19
122.94.0.0/19
122.94.64.0/20
122.94.128.0/19
122.94.176.0-122.94.207.255
122.94.224.0/20
123.77.0.0/19
123.77.48.0-123.77.79.255
123.77.96.0/20
123.77.128.0/20
123.77.192.0/18
222.45.0.0-222.45.79.255
222.45.96.0/20
222.45.128.0/21
222.45.144.0/21
222.45.160.0/20
222.45.192.0/20
222.45.240.0/20
222.49.128.0-222.49.223.255
222.59.128.0/17
Signature Algorithm: sha256WithRSAEncryption
65:6f:88:82:b3:31:fb:e3:d7:f0:53:13:ed:07:d2:b9:84:9d:
f7:d8:6e:65:b5:7b:79:3b:7d:14:70:dd:52:d5:44:50:29:fd:
a8:0d:07:6c:e3:40:4a:67:c3:83:6f:dc:e8:a8:fc:8c:ed:7d:
a6:31:f2:8a:3a:a5:8f:e7:47:84:84:79:4c:27:0a:58:a0:39:
fb:c7:83:e4:b8:3b:a4:e9:23:08:b7:6e:56:a7:ed:81:38:4c:
24:cc:fd:7d:e0:4b:74:6a:eb:b5:3f:8e:ed:90:b1:e4:da:80:
1b:0c:08:e2:25:01:53:46:1c:04:c7:bb:c0:a1:de:e6:02:d8:
dc:7a:47:4f:c2:15:82:20:b1:c0:3d:3a:61:63:2d:52:58:1e:
a7:5c:4e:f2:29:2b:fe:21:c1:f4:58:8a:05:b4:f2:db:c8:73:
a1:0c:2f:c5:b1:a9:be:ee:d7:70:85:5c:53:c4:2e:6b:29:d7:
aa:7e:e7:34:ff:0c:9c:b6:bc:51:c2:05:83:2b:a5:33:3f:67:
2d:4b:a8:21:3b:24:57:e0:b2:8b:3a:77:a1:d7:11:6a:bd:4f:
b5:f1:19:61:e0:c5:1f:ae:ce:dc:98:40:4f:a6:03:ae:57:ed:
fb:0c:fa:8f:1d:2f:43:ba:60:e3:5d:7e:fc:37:c3:64:3b:c2:
f4:04:9b:63
-----BEGIN CERTIFICATE-----
MIIGqjCCBZKgAwIBAgIUDQcD3KL3e/WEiO8fI+nrIlpNr0wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0FCNDQ3NzgzOTlFNTdFQzREOUIyREY2QUM4MDQyQzY2
MzdFMEY2NjAeFw0yNjA1MTMwODQyMThaFw0yNzA1MTIwODQ3MThaMDMxMTAvBgNV
BAMTKEMyM0QzNDYyMEE1NDFFRkNEODZCM0IzNEMyREFBQ0FGMDM0NzZGQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHAlZifAMZHDoZXaWYW5FMAeCF
QVq7bdJOyPJzijKu7Gh0EmI80UmweWqZe/tpTGeDgMWD9Yztd3bvGAs+kWfrc5WY
epgEEOwUcjgdP/sk1EaIhxIqW/3pLF310SXW/VQdzmwa2ih+nQjTbmkL2FnolIVZ
f5QFg7p75Zw0sMoeEAHpd0O1oqBZz5n0mZyEnLZoBl35XldJ9W6zbue7qOK2sHG3
UZ7pwwIcPehvHLuACX5wKGPFYyo9Bfo+ZziC3n2690SHEa+jO5K035yTR3SsqmS1
zulO2KIN4+KfW/10Z3siN3UXUr1zXNBPx55l7vPMWJxctcrSaZhhj/riHTKfAgMB
AAGjggO0MIIDsDAdBgNVHQ4EFgQUwj00YgpUHvzYazs0wtqsrwNHb7YwHwYDVR0j
BBgwFoAUOrRHeDmeV+xNmy32rIBCxmN+D2YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NjgzMjc4NzUwNTE1MjAxOS8wLzNBQjQ0Nzc4Mzk5RTU3RUM0RDlCMkRGNkFDODA0
MkM2NjM3RTBGNjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvM0FCNDQ3NzgzOTlFNTdFQzREOUIyREY2QUM4MDQyQzY2MzdFMEY2Ni5jZXIw
XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDY4MzI3ODc1MDUxNTIwMTkvMC9BUzU2MDQ2LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIB7gYIKwYBBQUHAQcBAf8EggHdMIIB
2TCCAdUEAgABMIIBzQMEBCTOIDAMAwQDJM44AwQEJM5AMAwDBAckzoADBAMkzrAD
BAQkzsADBAQkzvADBAAk1WgDBAAk1WsDBAAk1W4DBAAk1XMDBAEk1YADBAUk3QAw
CwMDAm5kAwQDbmQQAwQEbmQgMAwDBANuZDgDBARuZEADBARuZGADBAVuZIAwDAME
A25kyAMEBG5k4AMEBW50ADAMAwQEbnQwAwQDbnRAAwQDbnRQMAwDBARudHADBAVu
dIADBANudLADBARudMADBAVuxwAwDAMEBG7HMAMEBG7HQAMEBG7HYAMEBG7HgDAM
AwQEbsewAwQEbsfAAwQEbsfgMAsDAwFu2gMEBG7aIAMEBG7acAMEA27aiAMEA27a
sAMEBG7awDAMAwQFbtrgAwQFbtsAMAwDBAZu20ADBABu20QDBAVu24ADBAV6XgAD
BAR6XkADBAV6XoAwDAMEBHpesAMEBHpewAMEBHpe4AMEBXtNADAMAwQEe00wAwQE
e01AAwQEe01gAwQEe02AAwQGe03AMAsDAwDeLQMEBN4tQAMEBN4tYAMEA94tgAME
A94tkAMEBN4toAMEBN4twAMEBN4t8DAMAwQH3jGAAwQF3jHAAwQH3juAMA0GCSqG
SIb3DQEBCwUAA4IBAQBlb4iCszH749fwUxPtB9K5hJ332G5ltXt5O30UcN1S1URQ
Kf2oDQds40BKZ8ODb9zoqPyM7X2mMfKKOqWP50eEhHlMJwpYoDn7x4PkuDuk6SMI
t25Wp+2BOEwkzP194Et0auu1P47tkLHk2oAbDAjiJQFTRhwEx7vAod7mAtjcekdP
whWCILHAPTphYy1SWB6nXE7yKSv+IcH0WIoFtPLbyHOhDC/Fsam+7tdwhVxTxC5r
Kdeqfuc0/wyctrxRwgWDK6UzP2ctS6ghOyRX4LKLOneh1xFqvU+18Rlh4MUfrs7c
mEBPpgOuV+37DPqPHS9DumDjXX78N8NkO8L0BJtj
-----END CERTIFICATE-----
Generated at Wed May 13 14:18:02 2026 by rpki-client