Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106220441690701841/0/AS56046.roa
File:                     AS56046.roa (raw, json)
Hash identifier:          VoU1Yy8W9X5nBLouynhmB8TLBSuAgEwO4Sk7DuHC2Ak=
Subject key identifier:   12:57:8B:4B:A5:61:B0:9B:8B:AF:A9:7C:FA:3D:CC:54:1E:ED:EC:C8
Certificate issuer:       /CN=7F335EE4A33D07C42C38C45EC648A6F91CE4E95D
Certificate serial:       7472AF6F444509A1AB899052DDD3247081FFF850
Authority key identifier: 7F:33:5E:E4:A3:3D:07:C4:2C:38:C4:5E:C6:48:A6:F9:1C:E4:E9:5D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/AS56046.roa
Signing time:             Thu 14 May 2026 02:03:24 +0000
ROA not before:           Thu 14 May 2026 01:58:24 +0000
ROA not after:            Thu 13 May 2027 02:03:24 +0000
asID:                     56046
IP address blocks:        110.115.128.0/17 maxlen: 17
                          115.180.0.0/17 maxlen: 17
                          118.204.0.0/17 maxlen: 17
                          121.70.0.0/17 maxlen: 17
                          124.201.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 May 2026 20:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:72:af:6f:44:45:09:a1:ab:89:90:52:dd:d3:24:70:81:ff:f8:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F335EE4A33D07C42C38C45EC648A6F91CE4E95D
        Validity
            Not Before: May 14 01:58:24 2026 GMT
            Not After : May 13 02:03:24 2027 GMT
        Subject: CN=12578B4BA561B09B8BAFA97CFA3DCC541EEDECC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ae:c6:cb:33:2d:86:7b:6a:c2:85:02:ee:8b:
                    da:be:32:8d:47:b2:4c:d4:a1:d7:ac:a3:3f:13:8e:
                    0f:2c:11:db:18:44:65:14:d5:93:2c:74:fa:d3:e1:
                    37:e7:f5:3b:98:b5:d0:73:69:ac:09:77:03:34:f9:
                    3a:87:ce:aa:42:4a:3f:1c:23:e4:c0:9d:1c:35:47:
                    cc:a5:1a:a5:14:0a:1f:42:b7:a0:7a:48:82:57:0e:
                    57:71:e2:10:8a:5e:35:16:7e:31:e1:8d:d3:ff:6f:
                    32:d3:94:44:d5:32:8d:b9:6a:0f:31:da:3d:9e:9e:
                    ec:f6:ac:e7:ae:a6:c1:f7:13:45:e6:9f:97:cf:38:
                    75:98:5f:be:10:97:54:3b:34:e1:d5:d2:f9:ec:85:
                    05:b7:c5:7c:82:90:03:19:e4:99:6f:5f:3c:c6:32:
                    c6:bf:20:66:d4:eb:ef:98:62:89:da:0b:fe:86:9e:
                    67:40:89:82:96:85:5a:76:0d:05:f4:0f:3b:e6:8a:
                    09:91:1a:93:97:ad:10:56:e9:88:84:ac:37:c0:93:
                    87:31:29:b2:8f:3f:84:6c:e4:e3:48:e6:59:cb:88:
                    d8:04:86:f0:78:00:57:d6:09:78:61:b4:fe:9e:14:
                    38:17:0d:a7:3c:8a:67:97:6d:3b:9a:e6:f2:46:6e:
                    86:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:57:8B:4B:A5:61:B0:9B:8B:AF:A9:7C:FA:3D:CC:54:1E:ED:EC:C8
            X509v3 Authority Key Identifier:
                keyid:7F:33:5E:E4:A3:3D:07:C4:2C:38:C4:5E:C6:48:A6:F9:1C:E4:E9:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/AS56046.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.115.128.0/17
                  115.180.0.0/17
                  118.204.0.0/17
                  121.70.0.0/17
                  124.201.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6a:cc:bf:ad:d1:6b:cd:80:13:0b:eb:46:31:7e:df:6b:b9:a2:
         3c:f2:c4:ff:e4:eb:d1:35:68:90:f3:35:1d:9e:c5:19:55:1f:
         da:18:85:f1:fc:9a:b5:e9:b4:1b:de:7b:5b:71:f0:8b:7b:e3:
         6f:4a:7f:68:3c:a0:9b:35:4c:ca:a7:7c:07:4c:90:7d:b6:e5:
         4e:d8:71:59:1d:91:66:f0:8a:d2:c0:ff:6d:45:49:61:a9:58:
         20:0c:07:52:09:5e:cc:21:b8:ae:a3:37:95:e7:e0:4e:de:8e:
         cf:2b:f6:ba:bc:1b:57:f4:82:82:a5:38:42:84:86:f6:96:7e:
         8f:71:72:a4:d3:96:8e:fe:2e:da:0b:32:7f:88:65:02:6a:9f:
         ff:5d:e8:0e:fc:b0:ee:2a:1b:19:39:38:e5:6a:93:a6:31:70:
         0b:0f:42:cf:74:aa:55:2e:25:d5:42:4a:c2:c2:4c:bd:7b:0d:
         77:90:f7:f5:92:84:ca:41:17:fd:e6:d2:58:ff:86:9d:91:91:
         13:ec:79:59:9b:b5:a5:7e:41:ba:d2:e0:ba:d1:11:96:e7:31:
         7d:4f:d8:44:d2:6a:a4:71:b7:a4:d6:b4:ec:df:c9:7a:d0:a0:
         dd:01:34:51:78:21:5b:0f:bd:5e:2d:0e:3a:66:4a:e2:30:b8:
         5b:2c:96:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 07:08:19 2026 by rpki-client