Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e302e302f31362d3136203d3e203435303833.roa
File:                     312e34352e302e302f31362d3136203d3e203435303833.roa (raw, json)
Hash identifier:          S799eigIvbk3Ymc9ckPWOrTDkEky88E1QuEBeGfIWOo=
Subject key identifier:   B1:30:A9:D0:3B:FA:DC:1F:BE:FB:63:52:3A:36:2C:A8:28:72:8C:AC
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       7AFBB74453609DD74320AF433348BE0237492264
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e302e302f31362d3136203d3e203435303833.roa
Signing time:             Tue 16 Jun 2026 03:15:23 +0000
ROA not before:           Tue 16 Jun 2026 03:10:23 +0000
ROA not after:            Tue 15 Jun 2027 03:15:23 +0000
asID:                     45083
IP address blocks:        1.45.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 07:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:fb:b7:44:53:60:9d:d7:43:20:af:43:33:48:be:02:37:49:22:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun 16 03:10:23 2026 GMT
            Not After : Jun 15 03:15:23 2027 GMT
        Subject: CN=B130A9D03BFADC1FBEFB63523A362CA828728CAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:38:8e:8f:9d:d3:a4:58:07:7f:48:e9:1f:28:
                    0f:56:f0:e5:95:12:60:2f:ee:d2:75:68:7e:6d:f8:
                    b5:94:6f:94:1b:51:67:af:9f:c4:6c:6b:b2:99:a5:
                    26:27:eb:8a:4f:a3:31:94:d4:fe:52:44:9a:fd:3a:
                    05:3b:ba:f9:80:39:6f:fd:bd:dc:bd:72:83:cf:62:
                    77:3b:ef:0b:42:09:71:9c:a8:f1:c0:eb:77:2d:2b:
                    d7:54:00:83:f6:08:68:31:00:7f:8f:5a:64:ff:d5:
                    11:a9:66:22:13:1b:7a:01:aa:3f:3d:22:19:56:5a:
                    6e:38:3e:36:a4:d3:67:1c:cc:ae:ba:c2:cb:ad:51:
                    36:08:24:13:b1:ee:87:22:1e:bb:8c:c4:2e:75:82:
                    5b:9c:d7:1c:35:8f:e9:48:10:0a:0d:10:f0:ab:17:
                    c6:61:0c:8a:c1:37:4b:26:75:49:b0:99:6a:27:ad:
                    0a:ee:95:b6:36:65:0d:70:7c:fd:bc:c3:76:e1:65:
                    6d:ac:fe:9a:1e:c6:3a:ad:f5:f5:24:07:21:40:b0:
                    14:04:f4:d9:4b:a2:d4:07:e2:1d:56:fc:de:4e:5c:
                    37:3e:c2:db:84:81:c0:c1:4e:0a:01:91:58:5d:78:
                    25:1f:37:3b:18:25:b6:f8:38:14:6b:65:70:ef:49:
                    0f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:30:A9:D0:3B:FA:DC:1F:BE:FB:63:52:3A:36:2C:A8:28:72:8C:AC
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e302e302f31362d3136203d3e203435303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.45.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2e:96:21:50:b6:ad:67:cb:3b:cf:46:a8:53:d3:2c:24:2b:92:
         1a:f8:c2:97:45:33:0a:f9:13:4c:f5:27:ab:45:30:4f:d3:67:
         58:b5:5f:ca:4c:5b:47:30:dd:aa:5d:aa:f1:47:dc:8e:96:fe:
         b6:2c:c7:17:91:2d:62:0d:70:25:c6:c8:15:4e:40:71:28:6c:
         8e:91:20:db:74:d8:11:fd:04:7d:7f:39:c8:ea:31:f6:5e:bc:
         89:93:8e:a5:f1:e2:c3:3a:76:60:16:aa:cf:cb:d3:51:27:fd:
         79:b3:37:cb:91:12:81:df:ff:44:f5:16:ed:44:f6:b5:b5:a3:
         10:85:49:19:2a:03:3c:8c:4a:52:2d:b3:6b:3b:fb:14:e6:6b:
         55:ef:43:96:48:98:c8:60:e2:44:6a:f8:6b:a5:14:6f:8e:d7:
         09:19:06:40:c2:46:00:86:71:9b:ad:7e:f9:67:cb:9a:b3:4e:
         71:2e:29:d5:ed:bd:0f:28:58:60:42:18:13:83:67:95:52:51:
         f6:aa:1c:95:f6:96:89:a1:6b:01:43:1f:0c:ca:a8:df:87:50:
         9e:77:9d:03:f3:27:48:e9:8e:05:e0:43:45:51:bb:f4:bb:16:
         41:89:aa:cf:59:90:99:32:16:32:47:d8:49:4a:03:21:09:f6:
         09:7f:4e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:54:30 2026 by rpki-client