Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e31302e302f32342d3234203d3e203536303436.roa
File:                     34352e3234382e31302e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          LHJVlOYN3ddrC/1zCIA/aXSlV9Anb9JwKbJahWyjL4I=
Subject key identifier:   C6:B8:8E:37:92:EC:20:91:1B:94:C1:A7:30:15:70:8D:27:4E:97:CE
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       6DA2212EAEE94CF6BC6CBA069F2A772D78D94443
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e31302e302f32342d3234203d3e203536303436.roa
Signing time:             Thu 14 May 2026 07:35:35 +0000
ROA not before:           Thu 14 May 2026 07:30:35 +0000
ROA not after:            Thu 13 May 2027 07:35:35 +0000
asID:                     56046
IP address blocks:        45.248.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Jun 2026 23:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a2:21:2e:ae:e9:4c:f6:bc:6c:ba:06:9f:2a:77:2d:78:d9:44:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: May 14 07:30:35 2026 GMT
            Not After : May 13 07:35:35 2027 GMT
        Subject: CN=C6B88E3792EC20911B94C1A73015708D274E97CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c0:4f:5f:59:0a:f1:7c:41:83:85:ca:cb:29:
                    ac:64:9c:35:ea:02:4d:5c:20:81:b7:83:35:11:64:
                    0b:8d:25:5d:2f:c0:eb:e7:bb:a5:2d:83:02:66:0f:
                    33:e0:a6:f8:fd:c6:83:ee:8e:f4:5f:0a:86:bb:d7:
                    5f:b8:26:ac:90:78:31:cc:9c:c7:2a:1c:0d:cf:f1:
                    2e:93:07:12:89:3b:ad:b2:60:32:0b:b3:eb:5d:ab:
                    39:d3:ac:ea:9a:69:64:45:8d:9e:35:ae:1a:26:a9:
                    36:fa:54:e4:af:38:20:51:60:0e:86:2d:e6:d5:76:
                    fd:b9:3f:8c:2e:35:31:01:5d:3d:24:fe:53:ad:00:
                    e7:00:1d:62:5f:62:a3:a5:b6:1c:24:1f:00:f6:22:
                    f3:1b:71:97:bf:d3:af:5c:25:0a:51:4e:43:e0:e2:
                    69:08:62:8c:86:e0:52:92:83:b3:70:98:a9:eb:f8:
                    66:a4:e4:f9:bc:22:f8:78:30:5d:b3:c8:61:e4:9c:
                    31:b8:3f:78:7f:06:42:56:97:98:dc:75:ae:c0:de:
                    60:91:14:18:3f:8d:40:9d:97:04:33:bd:da:af:7c:
                    bc:09:c6:36:39:6d:1a:cf:6f:20:a4:66:01:f3:a1:
                    21:23:26:37:28:93:b9:67:17:14:c0:95:12:28:2d:
                    57:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B8:8E:37:92:EC:20:91:1B:94:C1:A7:30:15:70:8D:27:4E:97:CE
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e31302e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.248.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:82:7d:44:48:e2:3d:07:48:67:e4:45:57:be:61:5a:d5:41:
         34:f1:7f:ce:38:3e:4d:12:de:92:ec:c5:3e:c8:8f:3d:c5:b9:
         d4:0b:18:14:f8:7b:a7:b2:b7:c9:a4:d4:cd:de:ff:d3:2e:84:
         db:56:d7:4e:fb:ec:b2:0f:de:da:34:73:0a:b1:cc:15:e3:e7:
         c3:83:aa:13:4b:22:4b:69:4c:00:a2:3c:e1:02:c2:96:aa:dc:
         7a:9f:1a:7e:b9:2c:fa:14:6f:84:22:c7:ac:e9:23:d3:4a:90:
         e6:b7:d8:ff:29:bd:9d:13:44:40:93:3d:62:7c:f0:12:a6:0d:
         86:01:a2:1a:2f:90:02:bd:98:4f:7c:8d:a5:ec:68:5b:18:9c:
         77:41:68:7e:97:1b:51:ed:97:c1:bc:b9:17:0f:b7:42:3c:d9:
         94:f8:9f:6a:0c:91:72:f7:fb:fd:9c:11:33:ec:06:6b:71:b0:
         44:f0:8b:cf:f5:1d:cd:0c:52:5d:43:b5:97:3e:ef:16:6a:29:
         4b:e2:1b:19:4e:af:35:9e:e6:e1:a2:9a:42:28:da:eb:ab:8d:
         fd:c5:1d:8f:fd:4e:a5:a0:49:18:da:ef:74:58:d7:73:91:aa:
         f5:f6:2e:5b:44:f4:60:4e:0d:8b:9d:86:cf:23:ec:f1:9e:75:
         cd:22:b6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:39:45 2026 by rpki-client