Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e382e302f32322d3232203d3e20313337363937.roa
File:                     34352e3234382e382e302f32322d3232203d3e20313337363937.roa (raw, json)
Hash identifier:          XhIf6JZZ1jir9cUBkNhc+f7r9LCej/1ychzqmgbrga0=
Subject key identifier:   56:EC:39:79:13:68:DF:44:B8:A0:63:68:6A:1D:DF:02:BB:2C:C4:2B
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       6C1E00A94F706C439AAA235A5C369F6BFB725F66
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e382e302f32322d3232203d3e20313337363937.roa
Signing time:             Thu 14 May 2026 07:37:20 +0000
ROA not before:           Thu 14 May 2026 07:32:20 +0000
ROA not after:            Thu 13 May 2027 07:37:20 +0000
asID:                     137697
IP address blocks:        45.248.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:1e:00:a9:4f:70:6c:43:9a:aa:23:5a:5c:36:9f:6b:fb:72:5f:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: May 14 07:32:20 2026 GMT
            Not After : May 13 07:37:20 2027 GMT
        Subject: CN=56EC39791368DF44B8A063686A1DDF02BB2CC42B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4e:12:5c:10:df:ce:26:2d:0b:8c:7f:bc:73:
                    1d:7c:38:43:71:e3:f8:18:bf:71:2e:dd:98:84:45:
                    25:77:81:54:52:91:b9:5c:3b:86:3e:6c:56:a5:14:
                    47:67:b9:21:6e:c2:04:ae:de:db:dd:da:d5:6a:90:
                    d9:5e:a7:f7:6b:33:fb:ae:21:d1:f9:45:5c:f5:54:
                    b7:b7:53:4a:35:0d:6d:65:68:9a:a1:40:bb:98:0c:
                    c1:90:a5:ed:e4:64:ae:b3:90:4e:cf:2a:25:35:d7:
                    e8:37:37:1b:6e:63:8d:82:86:38:c3:fc:b4:41:e1:
                    78:f0:9d:41:48:95:be:8d:c2:86:48:07:85:34:67:
                    0f:09:2b:9a:77:e9:6e:d0:2e:7c:e3:5e:4c:47:b2:
                    06:e9:24:ba:de:e8:c0:10:55:f1:8f:db:14:c1:de:
                    f0:b5:22:18:7c:fb:14:28:e4:d0:ca:46:3e:97:01:
                    62:8f:f2:77:86:9d:b4:d9:59:1e:22:dc:50:75:5b:
                    95:b4:7f:1d:40:db:a0:86:99:b9:8c:a8:ec:dd:af:
                    c3:94:a1:f9:2f:2f:ad:78:80:1a:1f:f9:04:aa:c2:
                    9d:43:9d:6a:79:ee:e9:f3:6d:fc:6f:8c:80:38:63:
                    49:8a:4b:c3:59:ce:49:42:bf:57:d5:3d:5f:5b:30:
                    92:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:EC:39:79:13:68:DF:44:B8:A0:63:68:6A:1D:DF:02:BB:2C:C4:2B
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e382e302f32322d3232203d3e20313337363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.248.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:1d:59:c7:48:fe:f0:40:75:ad:5b:68:46:9b:82:3e:39:72:
         5f:3f:b0:c0:f3:59:85:74:50:6b:a4:8a:fd:3b:5b:ba:21:7b:
         bb:1e:8b:d9:e5:d9:ad:ed:2b:2b:37:82:d8:55:93:d4:fa:27:
         10:cc:37:50:3e:80:47:4a:0a:06:49:fd:f5:45:b5:8d:39:d7:
         07:45:35:5a:a8:92:dc:e0:b7:89:98:e0:ab:83:fc:57:cb:a6:
         1d:2f:03:aa:fe:f8:f1:7e:ac:66:7c:54:68:9e:69:f4:59:d6:
         3b:1e:64:6a:72:42:a9:14:24:17:06:52:55:87:02:81:ad:20:
         c3:52:02:74:9f:89:b5:74:b8:6a:96:42:e6:6d:c5:07:58:06:
         d7:76:84:42:a5:b0:c6:89:d9:c4:1a:44:da:1c:7d:9c:20:81:
         4a:d4:50:c1:47:82:3b:ef:53:19:b6:2f:22:c6:f6:fb:6a:12:
         60:fb:ac:1d:cd:4d:a2:6d:69:66:4d:39:ab:2e:50:e8:76:27:
         ab:e4:1e:a6:9f:31:23:ff:2d:11:fb:d1:66:01:e0:ba:59:79:
         f3:14:f7:39:f4:04:c5:bc:0d:de:13:2f:ba:74:0c:fe:41:ca:
         ad:b1:26:58:e5:b2:5a:17:c8:99:5b:e6:f0:70:e1:f9:19:c1:
         d6:85:7a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 00:58:08 2026 by rpki-client