Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106832787505152019/0/AS56045.roa
File:                     AS56045.roa (raw, json)
Hash identifier:          Gg5VNX7IQBrsBCbg2ckO3knrdXyT0v0Z8wt9+eZYHcs=
Subject key identifier:   FB:F4:D2:0D:8B:28:5E:C6:C2:24:3B:B8:32:97:2B:EA:00:5C:D4:19
Certificate issuer:       /CN=3AB44778399E57EC4D9B2DF6AC8042C6637E0F66
Certificate serial:       5F32B957FFC7C8D439894C18B9E73EFAF0BE6CDB
Authority key identifier: 3A:B4:47:78:39:9E:57:EC:4D:9B:2D:F6:AC:80:42:C6:63:7E:0F:66
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/AS56045.roa
Signing time:             Thu 14 May 2026 00:38:47 +0000
ROA not before:           Thu 14 May 2026 00:33:47 +0000
ROA not after:            Thu 13 May 2027 00:38:47 +0000
asID:                     56045
IP address blocks:        36.213.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 May 2026 03:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:32:b9:57:ff:c7:c8:d4:39:89:4c:18:b9:e7:3e:fa:f0:be:6c:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AB44778399E57EC4D9B2DF6AC8042C6637E0F66
        Validity
            Not Before: May 14 00:33:47 2026 GMT
            Not After : May 13 00:38:47 2027 GMT
        Subject: CN=FBF4D20D8B285EC6C2243BB832972BEA005CD419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e1:ba:40:28:b9:47:ba:9c:fb:28:41:9a:e6:
                    a6:e5:f3:6e:e9:3e:8a:32:d7:29:3c:b4:41:b1:cd:
                    98:2f:ae:39:38:cf:a6:86:b5:0c:b2:5d:28:bd:33:
                    6a:7f:37:f4:d2:92:fd:b1:d0:a2:36:42:d4:9e:89:
                    64:52:3d:5c:ab:28:a4:bc:f0:b3:b4:0b:6d:99:ae:
                    0f:bd:9e:d3:85:fa:fd:e2:4e:97:2e:fd:b4:ff:0a:
                    6a:e2:4a:bf:9b:59:09:a2:23:bf:b9:48:c1:3e:73:
                    85:f7:49:19:60:fd:02:34:76:82:d3:ec:a8:b6:aa:
                    6a:89:23:a3:e3:b1:14:07:90:f5:07:5d:d5:bf:58:
                    6e:92:55:30:28:22:30:80:6a:a4:ed:65:6d:d6:f5:
                    8d:ea:b5:7e:3a:8e:b4:c8:c3:9c:d4:c8:09:3e:7b:
                    40:67:24:e0:49:fa:96:46:62:6d:16:4c:2e:10:52:
                    3d:d1:1d:e4:89:36:73:27:19:f8:00:3a:5e:64:cd:
                    11:61:ae:e6:22:8d:d1:3a:69:11:c7:e5:ca:7d:c8:
                    cf:3e:7d:40:e9:84:46:4c:05:1e:be:1c:6f:95:97:
                    9a:f8:cb:ca:66:cd:ba:11:69:53:b0:f9:77:2e:3b:
                    0e:ce:8d:da:bb:a5:df:f2:51:4c:15:2d:39:ad:97:
                    a7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F4:D2:0D:8B:28:5E:C6:C2:24:3B:B8:32:97:2B:EA:00:5C:D4:19
            X509v3 Authority Key Identifier:
                keyid:3A:B4:47:78:39:9E:57:EC:4D:9B:2D:F6:AC:80:42:C6:63:7E:0F:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/AS56045.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.213.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         db:f1:e5:00:1a:73:ce:0b:42:7c:85:f4:39:43:db:4b:53:2a:
         aa:53:21:b0:92:2a:7b:42:d3:4a:83:ae:e9:b3:23:ca:e7:b4:
         8d:41:ba:80:d5:3d:40:d9:a7:a6:e0:a4:5e:43:9d:4b:4b:88:
         84:4c:8c:6f:c3:d7:fe:c8:a2:48:36:38:b3:9b:40:d4:4a:a0:
         5b:12:f9:fe:3e:a6:8b:1b:c1:c8:f4:f9:18:44:a8:75:dc:55:
         8a:5a:fa:5a:79:cc:7c:18:90:2a:40:86:d4:fc:6a:d6:85:e0:
         8a:f4:84:8e:64:75:bb:61:bd:a3:da:ac:50:a4:e1:fb:6e:08:
         25:14:32:a0:83:be:26:2b:79:bd:31:41:be:43:b8:bd:dd:1a:
         1a:9c:c6:77:18:cc:e1:25:b3:ce:b2:73:33:32:40:41:e4:1f:
         ea:51:1b:97:16:2e:1b:80:d8:21:75:ad:f5:a7:78:87:f2:75:
         75:f4:09:4d:20:d3:9c:f5:17:44:72:80:02:7f:a4:f4:23:59:
         2b:14:ce:ad:5e:95:54:87:73:bf:f2:a9:5e:49:04:fe:9c:f0:
         94:54:b4:b3:a8:3d:c2:5b:21:aa:79:f7:5b:ee:5d:aa:b9:08:
         95:e4:33:47:dd:ad:b2:c4:5d:4b:01:2b:36:4e:dc:5c:a1:c6:
         d4:e0:19:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:32:45 2026 by rpki-client