Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS56046.roa
File:                     AS56046.roa (raw, json)
Hash identifier:          Qt2+tlSMyr6rMw1vDQ3wCv0Ip+woUkfN5TgzuZpL8aU=
Subject key identifier:   D0:7E:BB:CE:7B:86:56:3F:73:6A:AF:5F:14:9F:23:69:99:F6:69:D1
Certificate issuer:       /CN=A915370F0000/serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9
Certificate serial:       752DA3A0933502677210DD49B409139D1D40B330
Authority key identifier: 01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS56046.roa
Signing time:             Thu 11 Jun 2026 08:19:36 +0000
ROA not before:           Thu 11 Jun 2026 08:14:36 +0000
ROA not after:            Thu 10 Jun 2027 08:19:36 +0000
asID:                     56046
IP address blocks:        118.191.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:12:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:2d:a3:a0:93:35:02:67:72:10:dd:49:b4:09:13:9d:1d:40:b3:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F0000, serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9
        Validity
            Not Before: Jun 11 08:14:36 2026 GMT
            Not After : Jun 10 08:19:36 2027 GMT
        Subject: CN=D07EBBCE7B86563F736AAF5F149F236999F669D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7e:66:d3:f0:2b:44:f5:64:8e:98:75:ed:d6:
                    e2:c3:63:08:c1:3d:5b:36:a3:5b:e9:c1:c9:4c:c0:
                    bd:11:74:5f:5b:cb:4c:22:88:9f:bf:97:c5:c9:bf:
                    76:9d:75:f6:28:b8:07:21:e7:4d:96:4e:9c:47:ff:
                    00:87:42:15:b8:c0:a5:e1:6a:79:94:45:20:06:f3:
                    e9:12:d4:a0:09:1a:df:ac:20:88:01:95:96:d9:4a:
                    7a:c6:5e:f1:80:0f:ab:ba:3a:fe:7d:62:cd:31:cd:
                    b1:34:e7:77:ce:c5:93:be:de:c9:f0:ef:29:e4:b3:
                    b3:54:55:94:88:9f:c2:96:30:a4:3a:eb:80:9f:a4:
                    92:a9:48:25:c2:af:f8:61:91:9d:99:1c:ae:dd:69:
                    38:a2:48:cc:e6:e0:8d:a3:f4:bb:4d:6c:8a:8f:1f:
                    67:77:6c:d2:dc:aa:5b:e0:ff:aa:42:ef:1e:bc:87:
                    05:8e:18:81:39:e4:71:9b:35:25:c3:53:bf:29:09:
                    86:32:19:04:0c:ae:55:d9:80:01:2b:be:aa:bd:47:
                    3c:2a:cd:7d:00:3f:24:cc:22:30:5d:66:6d:43:94:
                    8f:e3:21:98:2e:f1:9e:ba:b0:0b:50:c6:75:8d:2b:
                    a2:1f:e7:ed:cb:94:c5:73:15:ad:3a:88:da:5b:0f:
                    06:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7E:BB:CE:7B:86:56:3F:73:6A:AF:5F:14:9F:23:69:99:F6:69:D1
            X509v3 Authority Key Identifier:
                keyid:01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS56046.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.191.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:fb:b4:54:fd:53:af:fe:f5:09:87:a5:de:e4:2a:3e:99:52:
         62:48:e6:bf:a9:21:c4:91:5d:cb:e5:08:90:3c:6b:ea:1d:14:
         ab:16:8c:1f:56:d1:2b:6a:e9:04:d9:35:b7:32:0a:92:cd:2e:
         0b:47:a0:74:e8:4a:c5:80:50:31:6e:11:d6:39:09:1f:98:2a:
         bb:3a:2c:98:2e:55:22:e9:16:93:a8:e1:2b:d8:39:4f:ae:3d:
         2a:af:30:58:84:17:71:43:72:f2:b0:9f:b9:69:06:61:a3:78:
         33:56:0b:1e:90:32:a7:ae:ad:9b:96:24:bc:6e:14:dc:8f:bf:
         c5:df:3c:ea:ae:fe:2d:2e:08:24:c5:3d:61:08:62:9b:cc:a4:
         3b:6e:bc:41:e1:51:0e:74:34:be:cc:bc:c5:a0:66:d1:99:29:
         91:fa:65:85:b9:ca:4d:57:5a:55:32:e2:21:e2:58:79:75:3b:
         5f:0d:ea:78:82:79:f7:27:24:94:33:c5:f2:9a:66:61:04:29:
         1a:91:0f:40:81:74:c1:bf:b3:2e:ca:34:99:9e:f0:9c:0d:d1:
         c8:37:10:ad:a0:1a:6d:2f:5a:42:9e:2f:a0:8c:cb:b9:bb:88:
         74:b9:f0:34:65:70:4c:f8:d0:54:70:95:e5:c6:75:fd:ff:33:
         ed:61:22:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:39 2026 by rpki-client