Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS56045.roa
File:                     AS56045.roa (raw, json)
Hash identifier:          JhWIRgXmD/AAVpMY2itiLtwWBujQgPFnNfmralXfMzA=
Subject key identifier:   5B:98:B6:FC:64:55:AC:06:15:78:EE:F8:6B:73:8B:48:83:DF:08:BC
Certificate issuer:       /CN=845BB307E2A1100E89FA0C939A9389686796F0F6
Certificate serial:       6C027DE453F589CF510579E5374C0410C9430AAB
Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS56045.roa
Signing time:             Thu 16 Apr 2026 07:48:03 +0000
ROA not before:           Thu 16 Apr 2026 07:43:03 +0000
ROA not after:            Thu 15 Apr 2027 07:48:03 +0000
asID:                     56045
IP address blocks:        240a:40c2:2000::/44 maxlen: 48
                          240a:40c2:2010::/44 maxlen: 48
                          240a:42b4::/31 maxlen: 31
                          240a:42b6::/31 maxlen: 31
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:02:7d:e4:53:f5:89:cf:51:05:79:e5:37:4c:04:10:c9:43:0a:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6
        Validity
            Not Before: Apr 16 07:43:03 2026 GMT
            Not After : Apr 15 07:48:03 2027 GMT
        Subject: CN=5B98B6FC6455AC061578EEF86B738B4883DF08BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dd:91:48:7b:e6:b2:a0:43:dc:be:0f:6d:df:
                    e4:5c:3a:18:3a:e1:6c:5b:69:bd:a6:5a:3e:0d:d9:
                    20:f0:e1:51:b6:ed:47:54:9c:5d:7c:d9:c6:65:80:
                    88:f2:fc:15:4e:f5:50:28:5f:1f:f8:8d:3d:c8:89:
                    20:d4:51:2b:f3:a2:96:05:d0:24:2d:1f:86:f4:35:
                    90:0d:ac:21:8d:6b:83:a9:4b:fe:a5:4c:1d:e7:97:
                    fc:b1:3f:5e:a2:76:39:1f:9a:9f:9a:87:b4:c1:a1:
                    83:1a:04:9e:d2:1a:56:aa:14:42:3a:b0:8e:30:55:
                    63:35:01:ee:8b:03:38:56:ee:1f:f8:6b:8a:fe:46:
                    f2:a7:fe:93:08:8f:bf:82:0b:bf:cd:90:29:87:0d:
                    57:75:87:fe:9c:04:77:73:f8:fc:09:19:d5:ce:9c:
                    ab:bf:90:90:2d:99:2a:2d:1e:6f:7c:a8:f1:7a:d5:
                    f5:ee:53:cf:7e:c4:9c:8c:1c:e7:f8:f6:71:52:f7:
                    c3:b6:1e:f6:c3:1a:d1:27:f1:b0:23:b7:cf:86:39:
                    8c:97:cc:b4:54:1f:4d:65:99:92:af:dc:9b:41:ab:
                    15:f1:92:3e:b3:bd:f6:ca:b2:01:5e:f3:78:73:23:
                    69:7c:43:de:35:a2:53:ed:a3:5e:fa:7d:0c:1a:29:
                    4f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:98:B6:FC:64:55:AC:06:15:78:EE:F8:6B:73:8B:48:83:DF:08:BC
            X509v3 Authority Key Identifier:
                keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS56045.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:40c2:2000::/43
                  240a:42b4::/30

    Signature Algorithm: sha256WithRSAEncryption
         bb:4b:90:a2:c3:10:a7:50:ca:38:06:e5:b7:96:ad:f6:79:e6:
         3c:9c:fe:38:94:f9:3f:ac:86:f7:94:81:cb:ef:0c:a9:d9:bd:
         3e:72:c3:84:71:cc:87:3a:5c:cd:db:16:dd:80:3b:39:da:93:
         e7:da:ca:52:04:03:bd:10:8f:5e:40:3a:0a:2e:db:43:55:dc:
         be:8c:cb:d1:a4:41:1a:c4:16:5b:fa:b7:e1:3b:b0:27:5c:5f:
         3a:51:88:25:2f:df:24:a2:67:df:84:b3:bd:99:b4:68:46:50:
         ed:11:be:e5:a4:8a:b6:92:cf:15:7f:31:52:09:f3:64:a2:b1:
         7d:c9:29:87:ba:6e:3b:da:f0:0d:74:d2:af:80:d7:f2:21:31:
         36:e3:e2:8d:44:bd:d4:d4:f7:e7:2d:e2:6e:f7:6b:b5:6f:fa:
         03:8d:4c:8f:7d:2f:f0:5f:d6:0b:89:ee:e2:91:b2:f7:6b:97:
         df:f0:a0:b3:9d:ae:af:41:f5:a5:90:54:50:0c:f8:7d:58:bf:
         38:7a:92:b8:34:ab:45:31:d1:ef:d5:27:0c:27:86:10:b9:c0:
         1b:c6:37:04:c2:97:4f:f8:a9:d0:ae:43:21:5b:16:35:a8:0f:
         02:52:31:39:76:2c:4b:65:8c:04:91:03:43:cf:33:c2:30:64:
         a3:f1:84:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:18:15 2026 by rpki-client