Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131302e35362e302e302f31362d3136203d3e2039333934.roa
File:                     3131302e35362e302e302f31362d3136203d3e2039333934.roa (raw, json)
Hash identifier:          g1QciWGAV5eLL1QeM/rMO4jhCeVky3NAU5tuRBmgjOE=
Subject key identifier:   5A:34:B5:71:E4:A7:38:3D:C2:33:C1:E9:49:55:30:73:F6:1C:7E:3F
Certificate issuer:       /CN=A9185BF00000/serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Certificate serial:       28A7A6EC86A0F4BCEE43A138ECF21E35E0BD0629
Authority key identifier: 5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131302e35362e302e302f31362d3136203d3e2039333934.roa
Signing time:             Thu 21 May 2026 08:39:13 +0000
ROA not before:           Thu 21 May 2026 08:34:13 +0000
ROA not after:            Thu 20 May 2027 08:39:13 +0000
asID:                     9394
IP address blocks:        110.56.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 May 2026 22:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a7:a6:ec:86:a0:f4:bc:ee:43:a1:38:ec:f2:1e:35:e0:bd:06:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185BF00000, serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
        Validity
            Not Before: May 21 08:34:13 2026 GMT
            Not After : May 20 08:39:13 2027 GMT
        Subject: CN=5A34B571E4A7383DC233C1E949553073F61C7E3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:ca:86:9c:07:ec:1f:7e:13:99:4a:2e:dd:83:
                    df:1a:d1:96:7a:39:ed:33:39:1c:d8:0e:59:10:f5:
                    14:fa:44:01:ad:c5:ba:03:d8:01:bc:83:bd:d7:06:
                    ed:a1:cd:23:74:c2:87:2d:de:3c:13:d9:44:88:7b:
                    35:a8:ef:3c:0e:fe:b0:ad:f7:e8:ca:13:10:71:e1:
                    0b:07:00:b5:b5:a0:73:05:aa:cb:8b:03:12:97:9c:
                    90:91:10:2a:06:3b:ce:02:f3:fc:e5:06:1f:b7:fb:
                    e5:86:a1:d8:29:98:32:26:03:6d:0d:bb:c9:1a:ff:
                    03:d3:0d:39:7e:de:91:5b:29:a4:c6:16:7a:9d:87:
                    6b:6a:1b:c1:f2:59:ba:f1:52:c6:57:55:8d:98:44:
                    85:67:c3:c6:85:f1:66:52:f1:8a:9e:aa:db:f0:cb:
                    7c:4b:d4:76:07:c5:04:c2:1e:94:20:95:64:ad:7c:
                    20:41:cb:69:2d:b9:f7:c5:b5:aa:98:1a:23:c1:7e:
                    1a:3b:c8:91:c8:65:fb:98:bf:e5:f8:1f:a9:8c:cc:
                    24:16:67:37:47:05:94:50:88:63:45:30:8f:99:e0:
                    40:62:ab:36:2d:80:45:81:66:22:d0:3c:78:5d:d7:
                    31:cb:87:7e:6a:a4:8d:5e:84:32:e1:5c:84:2e:91:
                    f1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:34:B5:71:E4:A7:38:3D:C2:33:C1:E9:49:55:30:73:F6:1C:7E:3F
            X509v3 Authority Key Identifier:
                keyid:5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/3131302e35362e302e302f31362d3136203d3e2039333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.56.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         10:f4:96:28:4f:75:6e:1a:ce:45:fd:d2:9a:15:f5:aa:59:4f:
         52:21:81:ad:8e:b1:21:b6:8d:94:e4:d9:46:a0:7b:9f:96:e4:
         69:bf:eb:79:70:20:69:0b:98:4e:75:9f:18:1c:ba:55:16:59:
         0d:30:30:fb:fb:17:55:4a:00:a5:a6:08:89:67:51:dd:ed:cc:
         32:d1:c9:55:24:41:18:d9:4c:a2:3a:d7:ad:59:f3:37:4e:1c:
         eb:f7:b7:ad:93:f4:fd:f4:67:21:24:15:3c:27:34:d5:43:77:
         95:46:48:a6:61:4a:8a:f8:43:b5:b3:52:82:93:02:16:dd:2c:
         25:92:8d:f6:b5:08:a8:40:79:bd:3b:d0:f0:05:44:db:6b:d3:
         e8:bc:02:70:2f:b8:fe:38:f3:58:80:40:3d:58:bc:41:2f:cc:
         e1:fd:d9:81:7c:8d:f5:4d:6e:59:e5:e7:4f:63:fa:31:da:2c:
         51:89:6e:26:2c:05:32:0f:98:9c:e7:e6:ca:4d:4a:1b:87:71:
         1f:a4:56:70:5d:29:3f:30:39:75:a2:c5:93:78:ba:1b:8c:fe:
         7f:bd:9b:88:25:35:a5:54:4c:a2:f6:6a:5a:06:15:a0:ca:a4:
         89:b6:5f:15:12:2d:b9:fd:e8:27:bd:af:2c:e4:2b:65:65:72:
         ef:1d:3f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 07:55:18 2026 by rpki-client