Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS56020.roa
File:                     AS56020.roa (raw, json)
Hash identifier:          0sLTu+DPLeyeHTFssSu3l6BgQB8sTAdWzngp4fBzNf4=
Subject key identifier:   F3:05:53:14:8E:D8:83:9E:46:56:54:28:E4:4F:34:17:42:A1:F5:6A
Certificate issuer:       /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
Certificate serial:       029314A8A0A95CC85A604794480FF3043E731024
Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS56020.roa
Signing time:             Mon 18 May 2026 03:31:34 +0000
ROA not before:           Mon 18 May 2026 03:26:34 +0000
ROA not after:            Mon 17 May 2027 03:31:34 +0000
asID:                     56020
IP address blocks:        2403:a200:a3ff::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:59:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:93:14:a8:a0:a9:5c:c8:5a:60:47:94:48:0f:f3:04:3e:73:10:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
        Validity
            Not Before: May 18 03:26:34 2026 GMT
            Not After : May 17 03:31:34 2027 GMT
        Subject: CN=F30553148ED8839E46565428E44F341742A1F56A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:73:62:28:3d:a9:d7:c9:05:c0:e2:90:6e:5f:
                    9b:f4:cd:9d:02:fc:86:be:a9:64:c6:2f:a7:be:6c:
                    bc:92:99:f9:93:81:88:ad:1d:a4:25:f3:4f:fb:c8:
                    c3:50:de:be:48:aa:c7:eb:f8:77:b8:7c:a3:e7:95:
                    1c:67:1d:69:5f:ba:51:23:17:39:7b:06:e1:72:fc:
                    b6:f2:e5:65:bb:7e:a1:cf:af:b2:ff:6f:57:a5:12:
                    e4:56:70:6a:dc:4d:b4:2f:b1:9a:3a:57:b1:fa:65:
                    ad:00:d3:a9:c3:bf:9b:89:0e:8f:a0:4a:45:d7:8e:
                    bc:80:30:da:06:1f:75:01:4b:2a:9e:2a:bb:f8:c7:
                    12:6b:66:f9:aa:7b:c4:7f:20:e0:8c:85:b1:ce:b9:
                    75:f4:5c:b6:a4:e4:ed:71:fd:e4:4d:8f:bb:92:ed:
                    92:dc:50:48:ee:a5:d6:6e:71:9f:00:8e:42:ee:99:
                    8b:a2:6f:c7:87:86:63:aa:00:20:3f:fc:2f:64:f5:
                    ad:52:79:6c:be:bb:97:79:5d:d3:f0:07:58:9c:8b:
                    a0:fd:43:9c:62:7f:8a:9b:5b:54:61:15:11:61:1f:
                    f9:a7:2e:3b:2e:79:bd:70:63:c2:44:b4:42:8b:4f:
                    76:5d:d0:da:01:27:78:6e:0c:8e:29:d5:9a:7a:9d:
                    c9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:05:53:14:8E:D8:83:9E:46:56:54:28:E4:4F:34:17:42:A1:F5:6A
            X509v3 Authority Key Identifier:
                keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/AS56020.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:a200:a3ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:bc:5e:46:f0:eb:4f:bb:3c:7d:1c:6f:90:57:4b:76:22:44:
         70:14:ff:01:2e:f9:fc:35:9a:00:56:ec:79:64:58:9c:4c:0d:
         60:33:50:7e:64:c8:fb:82:0b:bd:eb:2a:b2:ae:e7:92:ad:9e:
         de:b4:e9:d1:5a:12:4b:78:7a:47:cc:e8:70:9f:e5:6d:37:1e:
         7a:f3:1f:72:c5:c8:f1:77:9b:45:be:6b:e1:78:81:ea:a7:bf:
         e6:54:df:41:06:56:49:4b:10:10:2c:cb:5c:53:0c:b6:15:5e:
         a8:6f:85:8a:04:96:46:e5:5a:65:45:a3:a5:94:83:d2:f3:14:
         d1:36:ef:be:90:7d:3b:48:d2:c3:97:bf:a1:8e:ed:31:c3:3d:
         73:20:d7:e2:16:e8:c3:b0:b0:46:86:df:ac:43:31:4b:e5:ec:
         4e:97:78:7f:13:28:b3:ce:45:72:06:23:ad:1e:95:50:6f:8b:
         60:ee:98:e8:5d:d2:33:fb:71:c5:c7:eb:0a:3b:37:73:28:b3:
         fb:b3:13:88:cd:cd:b6:fd:a7:4e:05:75:82:a9:8e:bc:27:8f:
         bf:6a:cb:1b:0c:7c:d2:cb:37:cc:38:6d:05:ca:39:06:18:a7:
         ef:c0:bf:e7:0f:b5:28:68:6d:7b:a5:34:40:f3:ce:6b:9d:f9:
         6e:37:4e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:40 2026 by rpki-client