Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3130382e302f32322d3232203d3e203435303833.roa
File:                     312e34352e3130382e302f32322d3232203d3e203435303833.roa (raw, json)
Hash identifier:          mdrY5Kfpj2Xl5a8kjYXdx58hxX7OyPyxTcSW9Ob2t7E=
Subject key identifier:   7C:E4:37:71:69:89:CD:48:89:67:CC:11:2D:CC:44:BB:E3:D5:A9:30
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       3F43F465A21572C0DDA2BF451D36D0A806A777A5
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3130382e302f32322d3232203d3e203435303833.roa
Signing time:             Tue 16 Jun 2026 03:06:16 +0000
ROA not before:           Tue 16 Jun 2026 03:01:16 +0000
ROA not after:            Tue 15 Jun 2027 03:06:16 +0000
asID:                     45083
IP address blocks:        1.45.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 07:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:43:f4:65:a2:15:72:c0:dd:a2:bf:45:1d:36:d0:a8:06:a7:77:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun 16 03:01:16 2026 GMT
            Not After : Jun 15 03:06:16 2027 GMT
        Subject: CN=7CE437716989CD488967CC112DCC44BBE3D5A930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8a:d8:93:b2:21:d9:97:eb:b5:14:d7:9e:d5:
                    f8:35:24:b0:78:b8:31:44:7b:cf:dc:b5:fe:75:8b:
                    21:38:d4:2f:c2:84:45:c6:7c:de:67:10:4a:bc:97:
                    9c:cb:fa:7d:c8:cf:c8:df:ab:3c:6a:df:6b:84:6f:
                    a4:14:e7:17:6a:0e:ee:72:34:6b:ff:c6:35:a2:e7:
                    f5:af:b8:ef:f1:81:79:e6:bb:ad:fe:fd:92:05:bc:
                    a3:c7:d9:7d:11:20:c5:b4:71:a6:d9:9e:22:44:bd:
                    6e:58:51:c3:70:df:e8:8d:0d:5c:f8:4c:9b:dd:43:
                    4f:0f:cf:cf:ef:f7:41:96:98:8e:ab:0c:da:e4:6a:
                    17:cf:4e:1a:9e:17:87:55:ea:61:9a:b6:f8:c6:36:
                    41:96:14:cd:61:e6:f4:74:d0:9d:54:23:66:53:9d:
                    e0:e4:4a:b1:2a:92:91:5f:80:83:ab:fb:be:10:90:
                    cb:45:57:6e:ed:a0:cb:f9:a7:f8:78:22:d6:36:db:
                    5d:3b:cb:3c:9c:29:c5:1c:d2:75:ea:c8:8f:87:ee:
                    00:a1:66:51:ae:18:ee:9e:83:34:19:af:b9:f6:36:
                    71:97:78:76:d7:cc:94:4a:dc:bb:36:06:1b:e6:3b:
                    e1:bc:2f:7f:8f:16:6a:69:2a:9a:39:bc:93:50:62:
                    fd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E4:37:71:69:89:CD:48:89:67:CC:11:2D:CC:44:BB:E3:D5:A9:30
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3130382e302f32322d3232203d3e203435303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.45.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:71:8d:b1:e6:4a:e4:81:3a:af:75:c4:e9:f6:24:bf:82:31:
         92:5e:fa:69:3b:67:64:32:38:9c:1b:78:c9:59:20:31:76:73:
         43:c6:a5:50:14:e0:79:f6:86:67:2e:a5:a8:4e:2e:46:0b:2c:
         1a:53:ff:ea:cd:8a:c6:66:30:c5:1f:5e:93:25:58:16:1e:7d:
         c2:40:10:57:07:4b:27:d0:87:33:96:52:ad:e2:43:f2:8e:aa:
         16:40:c6:25:d0:3f:5a:89:3c:d2:1d:af:4a:40:bf:61:17:63:
         21:34:ee:d9:db:74:b3:01:45:52:44:de:28:80:55:7b:57:20:
         e1:ac:5b:7c:d3:d6:7d:ff:d2:ec:be:0b:d9:76:7e:46:58:12:
         70:76:35:5b:b7:9f:0f:15:65:25:51:46:20:35:de:b9:ce:59:
         ac:50:02:6e:47:f8:36:2e:53:00:3e:83:93:b4:5e:ea:0d:95:
         e6:55:57:8d:05:5d:11:f7:a9:b0:80:ea:30:ae:58:cb:16:6d:
         51:4c:3f:6e:99:5f:7b:22:04:35:83:b4:6a:af:d2:10:b0:ef:
         88:ff:ae:2e:ba:db:e9:d7:b6:b3:7c:99:36:d9:41:c2:34:49:
         cd:15:0c:f7:9d:49:ab:95:22:2a:cb:29:34:e4:f3:96:c6:0c:
         46:a6:89:8c
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUP0P0ZaIVcsDdor9FHTbQqAand6UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5
RjkzRjZGODAeFw0yNjA2MTYwMzAxMTZaFw0yNzA2MTUwMzA2MTZaMDMxMTAvBgNV
BAMTKDdDRTQzNzcxNjk4OUNENDg4OTY3Q0MxMTJEQ0M0NEJCRTNENUE5MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYitiTsiHZl+u1FNee1fg1JLB4
uDFEe8/ctf51iyE41C/ChEXGfN5nEEq8l5zL+n3Iz8jfqzxq32uEb6QU5xdqDu5y
NGv/xjWi5/WvuO/xgXnmu63+/ZIFvKPH2X0RIMW0cabZniJEvW5YUcNw3+iNDVz4
TJvdQ08Pz8/v90GWmI6rDNrkahfPThqeF4dV6mGatvjGNkGWFM1h5vR00J1UI2ZT
neDkSrEqkpFfgIOr+74QkMtFV27toMv5p/h4ItY22107yzycKcUc0nXqyI+H7gCh
ZlGuGO6egzQZr7n2NnGXeHbXzJRK3Ls2BhvmO+G8L3+PFmppKpo5vJNQYv1lAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUfOQ3cWmJzUiJZ8wRLcxEu+PVqTAwHwYDVR0j
BBgwFoAUpgmQqcpYkWQFBDK9BUc9z5+T9vgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NzU3NTQzNzUzMTI4MzQ3Ny8wL0E2MDk5MEE5Q0E1ODkxNjQwNTA0MzJCRDA1NDcz
RENGOUY5M0Y2RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5RjkzRjZGOC5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA3NTc1NDM3NTMxMjgzNDc3LzAvMzEyZTM0MzUyZTMx
MzAzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM0MzUzMDM4MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAIBLWwwDQYJKoZIhvcNAQELBQADggEBAAtxjbHmSuSBOq91xOn2JL+CMZJe+mk7
Z2QyOJwbeMlZIDF2c0PGpVAU4Hn2hmcupahOLkYLLBpT/+rNisZmMMUfXpMlWBYe
fcJAEFcHSyfQhzOWUq3iQ/KOqhZAxiXQP1qJPNIdr0pAv2EXYyE07tnbdLMBRVJE
3iiAVXtXIOGsW3zT1n3/0uy+C9l2fkZYEnB2NVu3nw8VZSVRRiA13rnOWaxQAm5H
+DYuUwA+g5O0XuoNleZVV40FXRH3qbCA6jCuWMsWbVFMP26ZX3siBDWDtGqv0hCw
74j/ri662+nXtrN8mTbZQcI0Sc0VDPedSauVIirLKTTk85bGDEamiYw=
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:57:55 2026 by rpki-client