Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e392e302f32342d3234203d3e203536303436.roa
File:                     34352e3234382e392e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          3221hO5WU7CQ2c6LVVGLKGPYv4ISmyuIKOfhu7urHbY=
Subject key identifier:   12:93:AA:23:17:05:73:01:04:E8:17:46:7B:12:61:08:E3:01:2D:92
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       5D127C78AB3D52148561CF112113F28974A8043A
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e392e302f32342d3234203d3e203536303436.roa
Signing time:             Thu 14 May 2026 07:35:35 +0000
ROA not before:           Thu 14 May 2026 07:30:35 +0000
ROA not after:            Thu 13 May 2027 07:35:35 +0000
asID:                     56046
IP address blocks:        45.248.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Jun 2026 23:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:12:7c:78:ab:3d:52:14:85:61:cf:11:21:13:f2:89:74:a8:04:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: May 14 07:30:35 2026 GMT
            Not After : May 13 07:35:35 2027 GMT
        Subject: CN=1293AA231705730104E817467B126108E3012D92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:72:f7:4d:f2:43:94:1a:5e:6e:12:4e:e2:29:
                    e8:fb:f7:e9:f0:76:12:4d:a5:bb:44:b3:75:96:2c:
                    e6:d0:9e:72:97:cf:2b:be:b6:30:32:9e:68:ea:05:
                    76:21:ba:c1:b4:90:c1:52:86:52:6d:b6:86:fa:3c:
                    f5:8e:51:67:ba:f6:37:af:04:6b:09:ca:c3:88:5b:
                    73:d9:54:a1:14:cd:43:01:72:90:9a:23:36:ac:68:
                    e1:93:ba:56:1d:45:23:59:7e:37:13:b4:5d:d7:8c:
                    89:ec:e0:43:6b:28:de:da:25:ef:80:32:71:ca:dd:
                    38:e2:ef:b4:b7:ae:d1:b2:01:b4:f1:e5:f7:03:78:
                    80:80:a0:85:32:2d:86:e7:8e:16:f7:55:a3:60:37:
                    a3:8e:98:1a:1e:62:b7:38:a4:ed:e2:52:17:9f:df:
                    77:65:4b:6b:d0:31:32:4d:b5:42:84:88:3f:f2:26:
                    87:18:8d:7b:6c:d7:75:63:11:51:01:f9:59:5b:e3:
                    bb:34:5f:bc:d1:7b:24:1a:44:f1:75:27:fc:0b:a2:
                    d2:25:d6:2a:72:3c:13:d8:39:53:fb:5a:32:59:62:
                    a2:d4:a4:ca:fd:69:f0:d1:38:27:d2:61:bb:b8:fc:
                    f5:81:52:87:5b:ea:bf:68:32:1c:a8:7f:76:6f:d7:
                    5f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:93:AA:23:17:05:73:01:04:E8:17:46:7B:12:61:08:E3:01:2D:92
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e392e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.248.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:bc:fe:d4:5d:28:c9:42:da:90:21:9e:5f:c8:df:f1:f0:b1:
         db:da:3a:12:b5:87:ec:30:da:85:5b:4b:3b:26:ea:d3:02:19:
         ae:92:8b:f7:65:31:20:cc:a4:11:09:00:04:a3:83:c6:16:d2:
         49:c7:26:71:e3:d0:bb:12:4a:ae:66:a6:09:6b:8d:e9:9d:58:
         d2:d6:4b:34:b3:a2:9f:7e:b7:c3:2c:27:4f:ad:ae:40:cc:ac:
         35:24:3e:b9:c9:f8:fc:84:a8:8d:13:26:24:87:d2:cf:f0:06:
         bd:92:86:93:dd:bd:cb:86:04:05:78:b1:16:ae:a4:68:fe:35:
         ee:39:cf:7b:22:01:48:3c:f5:c9:e5:45:50:ed:c5:26:fa:bb:
         44:b8:26:81:b6:e8:a5:4a:84:f8:ec:f8:ec:36:f6:d1:06:ad:
         21:03:6b:33:63:a2:ed:ed:a6:ce:0b:7f:c1:64:1e:fa:ce:e1:
         ff:76:2f:db:a1:ad:c4:ef:0a:fc:a4:f7:00:25:67:1b:ca:6b:
         42:f9:67:9b:8d:5e:d3:5d:8d:2c:f6:9d:16:55:42:08:83:34:
         5c:8b:97:1b:aa:2b:ef:db:ec:fc:b2:50:e3:30:9c:70:ee:6d:
         70:53:9c:e1:19:12:3a:1e:a4:78:50:21:be:a8:bc:f9:97:bf:
         7f:3d:9d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:39:46 2026 by rpki-client