Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3130302e302f32322d3232203d3e203435303833.roa
File:                     312e34352e3130302e302f32322d3232203d3e203435303833.roa (raw, json)
Hash identifier:          wBgPgua8Xxohh2Vor4Fje+5Qt8CWYCp6Yw4J3Vazw0Y=
Subject key identifier:   E0:45:9B:A2:5B:AB:4D:24:70:64:35:99:7C:AD:1A:4B:3E:99:92:79
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       5C0FA851CA38E9F4E7E6FDEF6F746F143EA77FDC
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3130302e302f32322d3232203d3e203435303833.roa
Signing time:             Tue 16 Jun 2026 03:01:57 +0000
ROA not before:           Tue 16 Jun 2026 02:56:57 +0000
ROA not after:            Tue 15 Jun 2027 03:01:57 +0000
asID:                     45083
IP address blocks:        1.45.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 07:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:0f:a8:51:ca:38:e9:f4:e7:e6:fd:ef:6f:74:6f:14:3e:a7:7f:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun 16 02:56:57 2026 GMT
            Not After : Jun 15 03:01:57 2027 GMT
        Subject: CN=E0459BA25BAB4D24706435997CAD1A4B3E999279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:97:30:65:35:34:6e:f3:da:04:2e:5e:c7:e8:
                    55:1a:4f:83:3a:92:01:fe:ab:8e:98:66:5e:6e:a8:
                    49:e0:40:68:ce:e5:0f:30:39:1a:b5:47:be:66:3f:
                    6e:7c:1d:b7:c8:d4:3f:2c:66:56:72:95:0a:cb:c2:
                    9c:06:1c:ed:35:cd:73:ce:a0:49:13:bb:28:46:a8:
                    34:83:ff:20:7a:24:f6:26:a8:13:76:4b:84:eb:d7:
                    c9:89:39:da:d5:36:9e:00:a7:e4:1d:d8:5f:d1:f6:
                    13:a7:5a:f5:c5:88:20:0c:01:45:1e:36:21:c8:d3:
                    b3:60:e5:b0:61:bf:1c:50:94:0a:4a:c8:17:b5:9c:
                    7f:cf:5a:04:94:b9:09:cf:05:79:c6:38:0c:8d:0a:
                    1b:b6:cb:97:c1:fe:ad:e9:98:fa:48:0a:58:18:aa:
                    a6:d3:2d:c9:81:39:00:92:24:50:44:c6:41:15:36:
                    26:1b:da:30:e3:31:2d:4b:36:25:7b:e1:05:c7:8c:
                    1a:21:94:4f:34:8e:0f:e2:8b:79:2c:8f:54:d4:16:
                    e2:af:7f:5d:79:8d:50:f5:26:aa:8b:ac:d7:6f:99:
                    0f:a2:58:72:eb:9c:55:d9:b3:6a:a1:71:9c:81:33:
                    29:5a:e6:f4:bc:a2:e9:44:f2:e2:1e:9c:af:8a:1c:
                    7b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:45:9B:A2:5B:AB:4D:24:70:64:35:99:7C:AD:1A:4B:3E:99:92:79
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3130302e302f32322d3232203d3e203435303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.45.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:c0:68:34:f2:00:22:10:ac:ba:99:50:a1:f5:c8:67:bd:38:
         61:0a:df:6f:24:a8:09:2a:38:fb:88:98:77:97:46:35:cf:ae:
         88:68:99:0f:dc:8e:8d:2e:0d:e6:12:b2:09:76:bb:c2:96:b4:
         85:60:a9:dc:8a:21:7a:34:8a:01:1a:d5:14:2d:ba:a9:37:a7:
         63:fa:b8:05:65:51:90:98:47:77:9e:dc:b3:a3:44:c9:50:e4:
         35:a2:0f:cc:b3:2b:08:4e:b2:a6:58:f7:b0:85:18:29:34:d6:
         24:a5:e5:a2:a6:c1:89:9c:30:42:2e:61:9d:f8:44:c5:50:16:
         ef:33:f5:53:f6:d0:e2:90:92:87:36:6c:a3:da:cc:05:92:5a:
         c9:22:1e:8b:bb:55:89:b6:85:8c:e6:e0:da:98:ee:e2:9a:2e:
         f1:cb:ab:c5:d0:58:df:2f:ed:72:8c:c0:9f:69:37:85:f0:fd:
         c4:31:9e:5f:44:7a:68:38:5b:f4:d1:5e:54:74:96:30:e0:53:
         dc:1e:f9:8c:77:10:5b:17:99:46:c9:d0:c9:8b:26:12:90:b4:
         e2:76:28:b2:48:97:12:b7:11:f5:a5:cc:35:25:d4:25:fa:04:
         41:7f:27:6f:55:35:76:dd:92:be:fb:e5:9d:fe:82:4b:0f:69:
         c1:e8:2b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:03 2026 by rpki-client