Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/AS56040.roa
File:                     AS56040.roa (raw, json)
Hash identifier:          W81Ik1UbVtj0SRWqtC3P7xyEWt3IgDbB4QjgkvOz+tY=
Subject key identifier:   8C:E6:6F:1E:74:1C:AD:44:D6:A7:0F:B8:CE:CC:78:3B:15:3F:AB:29
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       5ABBAF23A6454A0019A94BD6F4F19887E9DCED6F
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/AS56040.roa
Signing time:             Sun 17 May 2026 10:00:01 +0000
ROA not before:           Sun 17 May 2026 09:55:01 +0000
ROA not after:            Sun 16 May 2027 10:00:01 +0000
asID:                     56040
IP address blocks:        106.13.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:10:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:bb:af:23:a6:45:4a:00:19:a9:4b:d6:f4:f1:98:87:e9:dc:ed:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: May 17 09:55:01 2026 GMT
            Not After : May 16 10:00:01 2027 GMT
        Subject: CN=8CE66F1E741CAD44D6A70FB8CECC783B153FAB29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2d:a4:4f:b3:1b:89:8d:a1:24:7e:81:61:1b:
                    23:64:f2:b3:a7:54:4d:03:ab:a8:5e:e9:6c:4b:96:
                    4b:11:a8:ca:d6:7c:54:18:9e:ba:46:e2:e8:f0:b6:
                    39:af:c6:25:0f:68:24:22:9f:a0:8b:4d:56:18:7f:
                    54:f8:27:fc:3b:d9:1a:1b:32:89:2e:33:54:f9:49:
                    df:90:7a:14:30:05:c5:c3:5e:1c:67:0f:c6:e8:e9:
                    94:2f:20:56:99:10:04:23:79:4f:d3:f0:ad:8a:59:
                    8d:07:1d:f5:d9:b0:ac:3f:56:3b:d0:16:c1:50:b3:
                    10:8b:bb:d5:df:f1:20:79:38:22:a1:5b:40:63:cf:
                    1b:ef:5c:3f:c6:a0:3d:63:54:d5:26:0b:26:fe:ba:
                    2a:f8:6e:2d:e0:76:ba:69:09:1f:4c:e4:8d:e0:7b:
                    ec:82:eb:f3:ee:bd:46:55:2a:1d:14:d2:9a:33:f9:
                    d1:2b:4c:9a:56:78:70:b5:b6:f2:e8:a3:32:56:76:
                    fe:44:d9:b7:32:b2:4a:10:f3:b4:94:1c:f6:75:5e:
                    4f:72:94:ed:15:5a:b1:4a:94:99:1c:59:17:8c:be:
                    02:5f:5d:9d:0a:33:f5:5d:2c:7e:60:cb:81:77:b7:
                    f8:94:2d:c1:cc:1b:07:05:50:1c:a7:fd:f8:be:35:
                    95:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E6:6F:1E:74:1C:AD:44:D6:A7:0F:B8:CE:CC:78:3B:15:3F:AB:29
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/AS56040.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.13.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:29:e0:6c:28:cf:91:43:83:d2:de:09:34:92:71:b6:97:e4:
         43:ac:cf:ec:92:a8:ac:8e:4f:d1:20:a6:50:7e:5d:5b:f3:c9:
         00:f2:d5:2e:e5:49:6f:f1:08:ff:e9:98:4d:24:1a:bc:fc:00:
         24:14:15:89:14:db:e8:71:0c:29:32:1f:18:bb:27:b0:a7:f5:
         6d:38:37:af:12:40:b8:c3:b3:9d:0e:e5:67:81:04:01:a9:af:
         b7:46:fb:67:87:e6:fd:8d:cc:4b:5e:98:1e:ba:c9:9b:70:63:
         95:78:a0:c8:75:18:40:f1:15:af:a4:3c:0a:c1:8a:0a:99:12:
         1b:6d:e6:fe:b1:fa:ba:84:4e:3e:d4:ea:e0:55:85:14:2f:38:
         db:47:d9:7d:4f:4f:a2:9f:b3:c1:3a:35:8b:2b:7e:80:ab:85:
         fa:6f:7d:3a:bb:31:61:4a:0e:4b:db:13:0e:1d:cb:90:99:63:
         62:04:7b:59:5a:12:9c:c2:04:cf:23:41:76:a5:77:79:13:dc:
         1f:43:d3:65:da:85:21:fe:e2:5f:80:07:34:65:b6:18:35:47:
         ea:4f:6c:f3:c8:e9:47:51:63:83:ac:b5:9d:bf:f7:73:99:d9:
         5b:a9:8c:24:4d:c5:07:2a:a5:59:d9:da:fc:7d:9b:1f:e4:9c:
         4d:ef:94:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:49:10 2026 by rpki-client