Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS56082.roa
File:                     AS56082.roa (raw, json)
Hash identifier:          ELj4LTfk2frR/MmsBHV73YUkzQzkJnuceVIoKTm0Bvk=
Subject key identifier:   A1:7C:F6:89:1B:8F:91:50:09:0F:E5:73:76:15:C0:7D:C2:71:EA:7B
Certificate issuer:       /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial:       12C5DFAC69429691F1A755E319BAC011F52FC8FA
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS56082.roa
Signing time:             Tue 09 Jun 2026 09:22:12 +0000
ROA not before:           Tue 09 Jun 2026 09:17:12 +0000
ROA not after:            Tue 08 Jun 2027 09:22:12 +0000
asID:                     56082
IP address blocks:        114.112.224.0/24 maxlen: 24
                          122.112.122.0/24 maxlen: 24
                          122.115.66.0/24 maxlen: 24
                          122.115.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 04:35:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c5:df:ac:69:42:96:91:f1:a7:55:e3:19:ba:c0:11:f5:2f:c8:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
        Validity
            Not Before: Jun  9 09:17:12 2026 GMT
            Not After : Jun  8 09:22:12 2027 GMT
        Subject: CN=A17CF6891B8F9150090FE5737615C07DC271EA7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cb:35:3d:fd:4e:ec:42:cf:95:02:88:01:bf:
                    fc:49:1e:48:50:d7:16:d6:38:77:0b:01:95:8a:45:
                    e2:67:05:83:7a:b7:07:2f:ec:b9:7e:a1:e7:20:6a:
                    41:76:b2:95:89:06:f7:94:92:46:51:fc:e7:ce:1f:
                    1f:24:96:49:66:76:9e:7a:97:32:2e:52:44:51:00:
                    28:35:1d:22:e5:32:5e:08:1c:3c:e4:f8:89:01:79:
                    5e:ef:cd:5a:e7:85:0c:05:ed:f2:13:06:dd:ef:ab:
                    bf:d4:9d:23:4a:12:52:80:51:06:08:7a:62:9e:f8:
                    c3:7a:3e:bb:be:f4:29:6a:b7:5f:4f:e1:34:22:fc:
                    b5:6d:e0:43:0c:db:24:6d:f1:7c:78:05:86:45:ae:
                    48:27:13:59:ac:4f:b3:07:75:7c:62:9c:07:27:4d:
                    ef:30:65:11:cc:fa:d8:3b:01:77:b1:c9:33:68:77:
                    c3:42:54:5f:82:de:f0:f5:2d:81:6d:b8:32:03:6a:
                    de:09:63:9d:be:00:e3:9f:1b:8e:53:2c:97:ea:00:
                    db:49:a9:53:b1:29:40:da:f4:5f:b2:65:c0:dc:c9:
                    3c:41:9e:72:56:68:b2:c9:36:da:11:b2:e5:d5:65:
                    d8:0c:c9:10:74:ea:c4:9e:2b:95:5e:d7:2a:59:5a:
                    3a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7C:F6:89:1B:8F:91:50:09:0F:E5:73:76:15:C0:7D:C2:71:EA:7B
            X509v3 Authority Key Identifier:
                keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/AS56082.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.112.224.0/24
                  122.112.122.0/24
                  122.115.66.0/24
                  122.115.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:0e:a4:a0:95:8c:6a:b5:64:dc:d1:79:a3:3e:5d:d3:4a:7b:
         89:73:93:92:7a:ce:a3:8e:72:ed:29:86:47:da:ec:5b:c6:41:
         e3:c4:f1:7f:a3:be:c2:7b:8a:1c:ad:29:e7:21:d4:95:e3:69:
         99:56:78:5a:c9:14:91:8f:21:cb:b4:32:4a:6e:75:b0:ba:ff:
         68:88:1f:e2:52:5a:99:43:0b:8f:4b:d1:7b:54:d2:6e:11:c2:
         21:d7:f9:d7:fe:44:22:27:e0:c1:f8:c9:ea:46:33:10:b4:ac:
         ca:6c:9e:35:27:a8:f8:89:6c:0b:cc:23:50:12:7c:ff:59:98:
         e0:34:78:2f:9b:ef:33:e5:8a:37:b5:99:f6:e2:20:28:5e:6c:
         ab:76:04:68:1b:3d:ba:6e:c1:b2:96:b7:9c:01:fb:ce:58:18:
         b3:ad:25:f8:05:14:5e:f7:c5:b6:6f:70:ef:e4:36:66:a3:73:
         ec:cc:63:cf:f0:14:71:8b:c7:f4:dc:b2:ab:ce:22:ca:ae:28:
         9e:4d:a6:ec:de:6c:01:b5:4a:21:18:82:1f:c1:0b:8b:dc:fb:
         cb:29:49:5a:9b:e2:41:a3:c7:4b:1c:e6:16:02:e3:9e:5b:48:
         b5:d0:18:2f:3a:35:dd:80:20:97:ef:f9:2a:5d:ec:f2:d5:fd:
         89:da:97:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:42:23 2026 by rpki-client