Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e31312e302f32342d3234203d3e203536303436.roa
File:                     34352e3234382e31312e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          VOq+6wLjierFMdJG4RCZ9TC/X2TOepLN8uPA1iLT+4o=
Subject key identifier:   B1:A9:0B:13:B0:EE:EF:E8:FC:AB:46:33:FE:5E:CE:49:8D:9B:83:31
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       1527B248FE2AB714BFAE6458C98B53D51306821D
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e31312e302f32342d3234203d3e203536303436.roa
Signing time:             Thu 14 May 2026 07:35:35 +0000
ROA not before:           Thu 14 May 2026 07:30:35 +0000
ROA not after:            Thu 13 May 2027 07:35:35 +0000
asID:                     56046
IP address blocks:        45.248.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Jun 2026 23:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:27:b2:48:fe:2a:b7:14:bf:ae:64:58:c9:8b:53:d5:13:06:82:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: May 14 07:30:35 2026 GMT
            Not After : May 13 07:35:35 2027 GMT
        Subject: CN=B1A90B13B0EEEFE8FCAB4633FE5ECE498D9B8331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d3:29:68:07:05:df:01:9e:78:29:83:e3:b4:
                    8f:46:39:19:e1:29:ea:7c:a8:87:ea:1d:e2:8e:65:
                    26:81:6b:36:bd:36:28:d1:90:03:80:18:b7:33:26:
                    dd:c8:04:00:f3:c3:ef:52:bf:69:6d:87:3e:d5:fe:
                    6a:c4:5c:ae:17:63:3b:4f:06:f8:67:a8:95:90:17:
                    07:a3:24:c9:3c:e2:bf:2b:6b:a9:15:07:99:f5:b5:
                    65:2a:d4:34:3c:1c:84:de:f3:31:ea:fe:41:6b:ba:
                    f7:00:2d:4a:d0:10:f1:bd:cc:66:1d:f6:01:c6:2f:
                    21:a3:b3:0a:ea:54:5e:0d:62:88:36:0f:69:92:a1:
                    82:d3:81:4b:15:86:02:98:c4:b5:1a:da:f6:bc:54:
                    b7:50:44:4f:3f:3e:8c:3f:d5:b6:f1:63:f4:28:cb:
                    4c:24:49:c8:e1:1e:99:9c:bd:7c:fe:42:a4:eb:64:
                    45:63:94:31:72:87:0f:f8:b9:a5:23:3b:44:2e:c6:
                    66:47:a8:ef:f2:e5:43:7d:0f:cb:42:70:a6:39:41:
                    c5:8e:3b:c0:2a:89:73:7a:af:3b:19:13:d3:00:9a:
                    af:c7:2e:1f:09:ee:50:0d:74:e0:85:66:df:9c:58:
                    bd:bf:aa:e9:02:2f:40:fe:fe:d3:e3:29:7e:32:98:
                    9f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A9:0B:13:B0:EE:EF:E8:FC:AB:46:33:FE:5E:CE:49:8D:9B:83:31
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e31312e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.248.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:29:8c:45:15:43:72:cc:ce:98:1e:8d:c1:be:a0:b8:70:2b:
         e7:80:79:ed:b0:76:ff:36:81:48:c6:5d:f0:49:e1:42:91:03:
         d0:9f:a8:7b:8b:3b:c5:5b:0b:2c:50:42:eb:4a:bd:fb:43:5a:
         5f:23:a6:ec:9a:08:c3:a4:a0:c6:14:bb:c4:b6:e2:db:80:6d:
         54:1d:75:11:4e:c5:d1:ad:aa:62:b6:d3:36:d6:a1:c5:c6:26:
         ac:64:62:e1:76:41:b7:cc:19:d4:85:e0:e1:3b:d6:6b:4b:01:
         ae:b3:27:29:27:5e:ec:30:9e:8e:1e:d3:91:d0:1a:8c:8a:a5:
         fb:a3:27:4f:cb:15:18:8e:b7:3d:09:0e:87:9a:7a:75:76:f9:
         5b:8e:a7:e1:51:30:9b:d0:87:85:91:73:20:2d:ea:c5:0a:29:
         96:a3:a6:b5:5d:73:53:31:44:3d:8f:47:ed:6a:09:08:bf:2f:
         f7:55:11:b4:a1:68:46:c5:6b:30:f0:3a:34:46:c6:06:9f:3a:
         a7:05:db:d2:8c:46:2c:78:68:55:aa:30:f5:1f:1a:06:0f:5b:
         f8:e9:5e:5a:91:67:d3:d1:82:a9:eb:21:9f:35:5e:19:63:04:
         e3:14:de:70:22:c2:3c:7e:cc:de:d0:32:80:c2:c9:11:bc:6c:
         23:42:f2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:39:45 2026 by rpki-client