Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099364928323584001/0/AS56046.roa
File:                     AS56046.roa (raw, json)
Hash identifier:          wQaqBuQrNgi2Ezg6k6Tc0z3rRSK0zo5E90jO2sXzVVE=
Subject key identifier:   CA:10:3B:7A:12:C2:79:59:50:1F:99:10:EC:51:B7:EA:70:4F:80:E1
Certificate issuer:       /CN=14F2AE289734C6F9223A15F482EED7503BB5C42B
Certificate serial:       07ED8C1648282C8393DAF95A1B785DA5C403DC1C
Authority key identifier: 14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/AS56046.roa
Signing time:             Mon 25 May 2026 05:58:28 +0000
ROA not before:           Mon 25 May 2026 05:53:28 +0000
ROA not after:            Mon 24 May 2027 05:58:28 +0000
asID:                     56046
IP address blocks:        117.48.144.0/22 maxlen: 22
                          117.48.148.0/22 maxlen: 22
                          117.48.152.0/22 maxlen: 22
                          117.48.156.0/22 maxlen: 23
                          120.132.0.0/19 maxlen: 19
                          120.132.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Jun 2026 23:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ed:8c:16:48:28:2c:83:93:da:f9:5a:1b:78:5d:a5:c4:03:dc:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14F2AE289734C6F9223A15F482EED7503BB5C42B
        Validity
            Not Before: May 25 05:53:28 2026 GMT
            Not After : May 24 05:58:28 2027 GMT
        Subject: CN=CA103B7A12C27959501F9910EC51B7EA704F80E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b6:d7:8d:a5:91:0b:72:34:f0:3e:9e:13:ce:
                    6d:04:1d:3b:5e:b2:38:83:01:4f:91:45:19:7e:c6:
                    10:48:64:cd:d1:f4:67:57:e1:f5:88:00:03:25:fa:
                    a9:c9:bc:46:46:00:0f:41:f6:2c:9f:d7:b8:d9:cb:
                    99:ba:63:76:af:24:97:67:33:ce:51:1c:47:1e:87:
                    cb:f4:e5:08:b7:2c:86:60:c3:38:10:11:16:65:26:
                    b7:21:02:4e:89:99:ff:00:51:40:f8:77:75:20:59:
                    c4:7d:2a:dc:86:10:6c:3d:c8:1b:64:d2:16:17:8f:
                    5d:f5:19:47:70:b6:f5:f1:92:d6:11:09:70:d7:0b:
                    05:b3:26:d7:04:ea:5c:91:de:46:3f:cc:61:7b:60:
                    b2:0c:e3:b2:a1:a2:76:f5:94:58:1f:55:a5:ea:4a:
                    b9:47:ab:c8:fe:97:8e:3e:04:8c:7a:a9:39:0a:2d:
                    88:7c:88:4d:ff:67:ce:6d:f9:92:3d:7b:91:28:56:
                    e6:89:3d:c9:14:a5:cd:c4:fa:87:49:b6:0c:d0:7b:
                    a7:65:4a:f5:36:ab:43:a0:e7:e4:98:79:0a:5e:df:
                    2a:f1:ef:9d:7e:0d:4b:0f:b4:a9:9f:45:64:b9:8d:
                    9a:bd:fb:e1:f4:64:a6:30:2e:3b:3f:65:5f:2c:32:
                    4d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:10:3B:7A:12:C2:79:59:50:1F:99:10:EC:51:B7:EA:70:4F:80:E1
            X509v3 Authority Key Identifier:
                keyid:14:F2:AE:28:97:34:C6:F9:22:3A:15:F4:82:EE:D7:50:3B:B5:C4:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/14F2AE289734C6F9223A15F482EED7503BB5C42B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/14F2AE289734C6F9223A15F482EED7503BB5C42B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099364928323584001/0/AS56046.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.48.144.0/20
                  120.132.0.0/19
                  120.132.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5a:4e:9d:94:e2:4f:99:60:40:ef:38:41:b6:61:76:5e:f6:37:
         d9:ce:f9:b7:ee:71:2a:73:e4:cf:d0:d6:32:a0:3b:2f:7e:62:
         da:17:1d:e0:7a:d9:3f:14:b0:9c:2b:19:9e:f1:3e:82:6f:e0:
         f6:5c:8b:94:d0:a8:34:4a:0f:bf:2a:a2:dd:2d:0d:0c:66:0a:
         9a:a7:5e:e0:f1:2e:f9:be:37:7b:e8:e2:00:f9:c9:a3:11:08:
         0e:42:f5:a2:65:83:01:8d:d9:f8:11:88:8c:38:1c:72:39:3c:
         f9:86:b7:0f:8b:31:c7:81:1a:e9:f6:3e:9d:9a:e3:c0:81:4b:
         93:07:8a:25:60:12:6c:df:96:41:de:fd:70:f5:eb:2f:e3:9f:
         9c:d9:d0:6f:2a:a4:c8:79:3f:d4:04:4a:9b:60:c0:ae:8c:5a:
         ef:12:1d:0c:4b:25:a8:19:c4:03:a2:e9:fe:e1:49:a1:83:cb:
         bb:48:65:df:3d:a0:45:de:f1:b2:ae:80:c9:26:ea:dc:17:b3:
         9b:ab:f0:a8:e1:59:b5:78:24:dd:b7:a7:07:36:b5:28:80:05:
         b4:23:eb:fe:9d:f2:d0:2f:5c:9b:b5:85:ef:cb:9c:60:32:b1:
         9c:5c:a3:74:d5:2b:56:58:93:66:18:c3:ee:cd:e3:6e:f8:5d:
         45:15:a5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 16:46:05 2026 by rpki-client