Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372310530/0/AS45090.roa
File:                     AS45090.roa (raw, json)
Hash identifier:          1Ha+E5HIHKnmHOpfk5jjAavBMyg4OSVHwrEqdr5BKrU=
Subject key identifier:   2C:21:C0:B4:C2:5E:88:C5:D7:10:B1:6A:F1:B6:C9:72:1C:AB:75:C1
Certificate issuer:       /CN=A92B819A2CD5CB1359B70776B58E2CFDEE46AF64
Certificate serial:       724AAE8883BCE453A9169F90BA5757D7DC7C4ACF
Authority key identifier: A9:2B:81:9A:2C:D5:CB:13:59:B7:07:76:B5:8E:2C:FD:EE:46:AF:64
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/AS45090.roa
Signing time:             Fri 05 Jun 2026 08:24:26 +0000
ROA not before:           Fri 05 Jun 2026 08:19:26 +0000
ROA not after:            Fri 04 Jun 2027 08:24:26 +0000
asID:                     45090
IP address blocks:        43.247.196.0/22 maxlen: 22
                          103.238.16.0/22 maxlen: 22
                          121.51.0.0/16 maxlen: 16
                          121.51.0.0/23 maxlen: 23
                          121.51.2.0/23 maxlen: 23
                          121.51.4.0/23 maxlen: 23
                          121.51.6.0/23 maxlen: 23
                          121.51.8.0/23 maxlen: 23
                          121.51.10.0/23 maxlen: 23
                          121.51.12.0/23 maxlen: 23
                          121.51.14.0/23 maxlen: 23
                          121.51.16.0/23 maxlen: 23
                          121.51.18.0/23 maxlen: 23
                          121.51.20.0/23 maxlen: 23
                          121.51.32.0/23 maxlen: 23
                          121.51.34.0/23 maxlen: 23
                          121.51.36.0/23 maxlen: 23
                          121.51.38.0/23 maxlen: 23
                          121.51.40.0/22 maxlen: 22
                          121.51.44.0/22 maxlen: 22
                          121.51.48.0/23 maxlen: 23
                          121.51.50.0/23 maxlen: 23
                          121.51.50.0/24 maxlen: 24
                          121.51.51.0/24 maxlen: 24
                          121.51.52.0/23 maxlen: 23
                          121.51.54.0/23 maxlen: 23
                          121.51.56.0/23 maxlen: 23
                          121.51.58.0/24 maxlen: 24
                          121.51.60.0/23 maxlen: 23
                          121.51.62.0/23 maxlen: 23
                          121.51.64.0/23 maxlen: 23
                          121.51.66.0/23 maxlen: 23
                          121.51.68.0/23 maxlen: 23
                          121.51.70.0/23 maxlen: 23
                          121.51.72.0/23 maxlen: 23
                          121.51.74.0/23 maxlen: 23
                          121.51.76.0/23 maxlen: 23
                          121.51.78.0/23 maxlen: 23
                          121.51.80.0/22 maxlen: 22
                          121.51.84.0/22 maxlen: 22
                          121.51.84.0/23 maxlen: 23
                          121.51.86.0/23 maxlen: 23
                          121.51.88.0/23 maxlen: 23
                          121.51.90.0/23 maxlen: 23
                          121.51.92.0/23 maxlen: 23
                          121.51.94.0/23 maxlen: 23
                          121.51.112.0/22 maxlen: 22
                          121.51.116.0/23 maxlen: 23
                          121.51.118.0/23 maxlen: 23
                          121.51.120.0/22 maxlen: 22
                          121.51.124.0/22 maxlen: 22
                          121.51.128.0/23 maxlen: 23
                          121.51.130.0/23 maxlen: 23
                          121.51.132.0/22 maxlen: 22
                          121.51.136.0/23 maxlen: 23
                          121.51.138.0/23 maxlen: 23
                          121.51.148.0/23 maxlen: 23
                          121.51.156.0/23 maxlen: 23
                          121.51.158.0/23 maxlen: 23
                          121.51.160.0/23 maxlen: 23
                          121.51.162.0/23 maxlen: 23
                          121.51.164.0/23 maxlen: 23
                          121.51.166.0/23 maxlen: 23
                          121.51.168.0/23 maxlen: 23
                          121.51.170.0/23 maxlen: 23
                          121.51.172.0/23 maxlen: 23
                          121.51.174.0/23 maxlen: 23
                          121.51.176.0/23 maxlen: 23
                          121.51.178.0/23 maxlen: 23
                          121.51.180.0/24 maxlen: 24
                          121.51.181.0/24 maxlen: 24
                          121.51.182.0/24 maxlen: 24
                          121.51.183.0/24 maxlen: 24
                          121.51.184.0/23 maxlen: 23
                          121.51.192.0/23 maxlen: 23
                          121.51.194.0/24 maxlen: 24
                          121.51.200.0/23 maxlen: 23
                          121.51.208.0/23 maxlen: 23
                          121.51.210.0/23 maxlen: 23
                          121.51.212.0/23 maxlen: 23
                          121.51.214.0/23 maxlen: 23
                          121.51.216.0/23 maxlen: 23
                          121.51.218.0/23 maxlen: 23
                          121.51.220.0/23 maxlen: 23
                          121.51.222.0/23 maxlen: 23
                          121.51.224.0/23 maxlen: 23
                          121.51.226.0/23 maxlen: 23
                          121.51.228.0/23 maxlen: 23
                          121.51.230.0/23 maxlen: 23
                          121.51.232.0/23 maxlen: 23
                          121.51.240.0/23 maxlen: 23
                          121.51.242.0/23 maxlen: 23
                          121.51.244.0/22 maxlen: 22
                          121.51.248.0/23 maxlen: 23
                          121.51.250.0/23 maxlen: 23
                          121.51.252.0/22 maxlen: 22
                          182.254.0.0/23 maxlen: 23
                          182.254.6.0/23 maxlen: 23
                          182.254.8.0/23 maxlen: 23
                          182.254.10.0/23 maxlen: 23
                          182.254.12.0/23 maxlen: 23
                          182.254.16.0/23 maxlen: 23
                          182.254.18.0/23 maxlen: 23
                          182.254.20.0/23 maxlen: 23
                          182.254.22.0/23 maxlen: 23
                          182.254.24.0/23 maxlen: 23
                          182.254.32.0/22 maxlen: 22
                          182.254.36.0/23 maxlen: 23
                          182.254.38.0/23 maxlen: 23
                          182.254.40.0/22 maxlen: 22
                          182.254.44.0/23 maxlen: 23
                          182.254.46.0/23 maxlen: 23
                          182.254.48.0/23 maxlen: 23
                          182.254.50.0/23 maxlen: 23
                          182.254.52.0/23 maxlen: 23
                          182.254.54.0/23 maxlen: 23
                          182.254.56.0/23 maxlen: 23
                          182.254.58.0/23 maxlen: 23
                          182.254.60.0/23 maxlen: 23
                          182.254.62.0/23 maxlen: 23
                          182.254.72.0/23 maxlen: 23
                          182.254.74.0/23 maxlen: 23
                          182.254.76.0/23 maxlen: 23
                          182.254.78.0/23 maxlen: 23
                          182.254.80.0/23 maxlen: 23
                          182.254.82.0/23 maxlen: 23
                          182.254.84.0/23 maxlen: 23
                          182.254.86.0/23 maxlen: 23
                          182.254.88.0/23 maxlen: 23
                          182.254.90.0/23 maxlen: 23
                          182.254.92.0/22 maxlen: 22
                          182.254.96.0/23 maxlen: 23
                          182.254.100.0/23 maxlen: 23
                          182.254.102.0/23 maxlen: 23
                          182.254.104.0/23 maxlen: 23
                          182.254.110.0/23 maxlen: 23
                          182.254.112.0/23 maxlen: 23
                          182.254.114.0/23 maxlen: 23
                          182.254.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Jun 2026 05:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:4a:ae:88:83:bc:e4:53:a9:16:9f:90:ba:57:57:d7:dc:7c:4a:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A92B819A2CD5CB1359B70776B58E2CFDEE46AF64
        Validity
            Not Before: Jun  5 08:19:26 2026 GMT
            Not After : Jun  4 08:24:26 2027 GMT
        Subject: CN=2C21C0B4C25E88C5D710B16AF1B6C9721CAB75C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8a:a9:29:8b:4e:02:40:3b:ac:d4:cd:f2:3d:
                    d5:76:a8:50:b2:6d:81:25:4b:2e:da:0e:05:87:66:
                    3c:87:78:29:c4:47:9f:ab:5e:11:0f:cd:d1:da:23:
                    44:46:59:6a:6b:f8:a4:dd:69:9c:28:27:ed:21:83:
                    a0:d5:87:f6:ac:c4:fb:e5:94:e3:10:37:5c:8d:66:
                    48:5f:18:4c:b9:48:5d:de:08:c6:23:1c:09:86:de:
                    7c:74:fe:83:82:0c:24:8a:f4:c1:18:7d:9d:20:45:
                    24:93:1b:17:fa:ef:b4:aa:0e:89:41:d2:c0:f4:9d:
                    06:53:d6:31:c0:50:66:13:9e:b3:27:ad:b8:a9:66:
                    cc:1c:06:ca:89:61:ee:ac:b2:ca:2e:80:cb:e6:5b:
                    4d:70:a5:45:8b:6a:ce:59:b4:98:44:27:39:7c:91:
                    f4:a3:5d:ca:43:2d:51:d9:e6:1f:0c:c4:a5:c5:9c:
                    2c:8e:f3:5f:f4:51:c5:0a:75:e3:75:51:57:31:5c:
                    32:bd:a2:c8:47:ab:39:fc:2e:f2:6a:a5:57:ed:6b:
                    b8:8e:64:2c:00:e2:f0:73:b3:51:e3:93:14:94:ae:
                    e6:42:10:ad:4d:e3:ca:de:f0:36:bc:1b:3f:7c:3d:
                    ef:45:15:d0:32:37:0f:96:d0:f2:a1:98:ca:a8:75:
                    02:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:21:C0:B4:C2:5E:88:C5:D7:10:B1:6A:F1:B6:C9:72:1C:AB:75:C1
            X509v3 Authority Key Identifier:
                keyid:A9:2B:81:9A:2C:D5:CB:13:59:B7:07:76:B5:8E:2C:FD:EE:46:AF:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/AS45090.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.247.196.0/22
                  103.238.16.0/22
                  121.51.0.0/16
                  182.254.0.0/23
                  182.254.6.0-182.254.13.255
                  182.254.16.0-182.254.25.255
                  182.254.32.0/19
                  182.254.72.0-182.254.97.255
                  182.254.100.0-182.254.105.255
                  182.254.110.0-182.254.116.255

    Signature Algorithm: sha256WithRSAEncryption
         73:5b:a1:3f:36:2c:4d:66:96:51:78:cd:b9:4f:e4:f3:c1:11:
         80:fe:05:ca:a3:56:78:6f:46:2a:4b:cc:b0:96:55:48:87:71:
         5a:bf:26:85:7d:50:2f:4b:f9:06:60:60:0d:fd:2b:49:60:81:
         4a:62:dc:84:9e:4d:4d:3b:61:a3:57:e7:7f:4c:76:b5:4c:e3:
         c9:8b:56:d0:20:b5:5f:2c:5d:42:50:16:c5:05:49:09:1b:d8:
         b0:9b:5d:37:75:4b:77:e9:8f:d3:e5:7a:ce:41:ca:b0:58:a3:
         8c:14:d6:e3:0a:cc:e9:0a:60:6a:0b:af:ea:11:89:b7:de:ca:
         db:86:63:15:b4:4e:f4:e8:98:da:7b:b1:5b:de:d8:2a:17:d0:
         fd:21:eb:fa:06:96:9f:a4:2c:c9:9c:8d:85:c1:3e:1b:e2:d8:
         3c:e3:25:5f:8d:ab:53:f6:d2:63:6a:7f:a3:2c:61:b7:20:8a:
         7a:cd:7b:98:be:a9:a7:c6:3f:43:ca:93:f0:1b:48:db:f2:7b:
         39:73:e3:e7:33:0c:d8:ec:c3:ba:fa:8b:4a:89:64:3b:6a:13:
         0e:1a:9d:c5:9a:03:99:3e:75:7f:96:6d:f0:db:7f:ad:08:d9:
         c0:96:a7:22:2c:2e:aa:b7:b2:80:c1:e3:7e:a1:3b:05:cc:0a:
         e6:13:2b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 20:39:13 2026 by rpki-client