Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111469242210844693/0/AS56047.roa
File:                     AS56047.roa (raw, json)
Hash identifier:          sOB/0xCvANLFyAUMciUsWEdcJJQE+e/pwZ+FBWrYdhk=
Subject key identifier:   EF:CE:DD:9D:A6:55:97:DB:DD:8D:F6:9E:73:FC:F4:34:1A:93:0E:95
Certificate issuer:       /CN=F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D
Certificate serial:       0196F02DB54D932266334768A70AD34F8D7AE2C3
Authority key identifier: F0:71:BD:CF:D0:0F:17:B0:D2:CB:7A:04:E3:9F:7F:C3:C3:3A:0B:8D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/AS56047.roa
Signing time:             Fri 05 Jun 2026 06:40:00 +0000
ROA not before:           Fri 05 Jun 2026 06:35:00 +0000
ROA not after:            Fri 04 Jun 2027 06:40:00 +0000
asID:                     56047
IP address blocks:        119.44.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 23:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:f0:2d:b5:4d:93:22:66:33:47:68:a7:0a:d3:4f:8d:7a:e2:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D
        Validity
            Not Before: Jun  5 06:35:00 2026 GMT
            Not After : Jun  4 06:40:00 2027 GMT
        Subject: CN=EFCEDD9DA65597DBDD8DF69E73FCF4341A930E95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fb:13:fb:c0:aa:29:84:f8:3a:88:9f:ff:c9:
                    79:9e:3f:77:e6:ef:ad:c9:3f:c0:05:d2:ba:83:18:
                    e2:17:93:d0:6d:95:d5:86:02:43:49:dd:40:b7:65:
                    a8:c7:ed:24:0b:7c:49:1c:f2:27:91:dd:9b:aa:d2:
                    7a:d0:69:02:17:52:b0:dc:92:27:a8:3d:84:fd:85:
                    0c:6c:d2:b8:56:e2:77:68:cd:3d:b1:69:b8:47:44:
                    92:13:37:b3:d9:0f:04:bc:40:44:4e:44:5f:57:38:
                    6c:6c:77:86:48:12:07:36:9c:9a:fc:4c:1c:08:a0:
                    40:07:76:b9:7b:be:15:6a:10:83:9b:23:ff:26:fa:
                    41:be:f4:c0:eb:21:99:a3:31:c8:c4:c9:b8:5e:ab:
                    f2:08:a2:37:93:32:9a:10:e2:24:20:4a:b1:51:1c:
                    a1:71:58:29:36:f1:6a:86:38:42:9a:4f:d6:ec:d7:
                    7d:d3:9f:39:b6:f4:59:02:02:ff:9e:cd:ef:6c:9c:
                    b7:d3:b9:05:22:4b:52:fd:cc:be:81:84:47:d0:d6:
                    70:0a:5d:23:f2:c2:90:22:65:cd:ec:08:8c:80:ce:
                    a7:68:0a:81:9d:93:be:9b:39:3a:af:74:5b:86:31:
                    23:da:c2:21:7d:36:61:be:cc:58:22:31:c8:ca:62:
                    22:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CE:DD:9D:A6:55:97:DB:DD:8D:F6:9E:73:FC:F4:34:1A:93:0E:95
            X509v3 Authority Key Identifier:
                keyid:F0:71:BD:CF:D0:0F:17:B0:D2:CB:7A:04:E3:9F:7F:C3:C3:3A:0B:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/AS56047.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.44.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:28:55:d8:fe:63:38:f0:aa:5f:54:11:af:47:25:b3:70:da:
         17:6f:7e:f2:39:67:42:1f:53:f1:77:0f:b8:da:82:dc:dc:f3:
         32:9d:7b:ea:67:34:5a:84:f2:29:22:f9:f3:e0:a8:60:1f:48:
         4c:71:3d:e1:72:a8:ea:f9:ed:77:8a:d7:9f:e3:9e:68:b9:02:
         a4:5b:bf:da:6a:fa:e4:ce:8f:3e:6c:d2:cc:76:08:1d:10:13:
         b0:d4:3e:0a:8f:bb:df:0b:22:93:f6:a3:47:5b:f3:0e:27:89:
         53:3b:46:e9:6e:fb:ab:52:4d:15:8a:b3:32:cd:ae:1f:08:96:
         32:3b:bd:f8:6f:a2:09:fc:1a:69:84:4c:91:f8:db:f5:58:9d:
         4a:59:0c:e5:a4:c6:c7:78:74:8f:2f:78:8a:0e:4c:9f:5d:68:
         5e:1f:fb:50:cd:61:33:9f:6c:62:5f:b5:90:f6:3a:13:85:00:
         85:03:f8:c9:0f:b9:27:4c:9a:23:4e:7e:9a:83:f3:00:78:77:
         88:2a:38:15:ab:c7:07:86:9d:b2:fd:3d:fc:34:52:43:ed:61:
         49:91:60:90:52:d6:e9:82:77:89:33:93:61:e8:ef:54:02:a0:
         eb:e3:87:11:0b:d2:70:af:2f:25:6a:03:7f:e3:5a:51:e8:ff:
         d1:7e:95:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:09:45 2026 by rpki-client