Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3132302e302f32322d3232203d3e203435303833.roa
File:                     312e34352e3132302e302f32322d3232203d3e203435303833.roa (raw, json)
Hash identifier:          Hmd2MjUHi4Mtfb+MUtr4raMDkFE/bk6OVR+ch9KCAwE=
Subject key identifier:   5D:F6:3F:D0:A6:C9:74:B5:38:41:DB:E8:6C:FF:B9:B4:A7:4A:D4:5A
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       18B727206B0A19156C061EED95C5E04B9C3CD64D
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3132302e302f32322d3232203d3e203435303833.roa
Signing time:             Tue 16 Jun 2026 03:04:03 +0000
ROA not before:           Tue 16 Jun 2026 02:59:03 +0000
ROA not after:            Tue 15 Jun 2027 03:04:03 +0000
asID:                     45083
IP address blocks:        1.45.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 07:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b7:27:20:6b:0a:19:15:6c:06:1e:ed:95:c5:e0:4b:9c:3c:d6:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun 16 02:59:03 2026 GMT
            Not After : Jun 15 03:04:03 2027 GMT
        Subject: CN=5DF63FD0A6C974B53841DBE86CFFB9B4A74AD45A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ff:a7:a5:9f:26:33:44:27:74:ef:8e:75:dd:
                    da:fa:aa:83:d3:93:75:f1:e2:17:d3:26:14:4f:2b:
                    57:1f:03:94:19:19:2d:43:b7:91:df:21:26:8b:06:
                    0c:fa:5a:79:9c:57:a3:37:bb:f6:98:df:71:70:38:
                    59:52:3a:29:5a:ca:23:48:c3:2c:f8:6f:77:60:41:
                    51:5b:86:30:8d:1a:ba:30:c7:0e:f9:53:01:64:d8:
                    65:64:ec:2c:82:89:71:a8:77:66:4c:7a:23:4b:c8:
                    e8:fc:5f:75:4d:cb:34:e7:0e:0c:ee:d0:30:6b:83:
                    cd:5e:03:aa:97:ac:3a:fe:95:25:dd:47:b5:63:b4:
                    97:72:34:d0:64:22:ad:a8:58:1a:5d:9d:16:37:53:
                    93:19:d9:be:cf:39:9c:43:7d:11:d2:c9:34:b8:99:
                    a9:b9:cc:c2:ba:e9:03:7c:38:33:24:9b:51:f2:2e:
                    f2:20:9f:61:f5:4e:75:eb:a2:ec:9c:fb:97:8a:9d:
                    29:19:62:30:16:2a:2d:b1:72:67:0d:a1:5d:8d:36:
                    d5:2c:1c:58:df:53:a8:25:f2:4c:d3:a2:79:97:40:
                    4d:d0:7f:9c:76:82:29:6f:ad:07:e4:29:03:d2:cf:
                    66:ed:b0:fc:c9:96:be:ba:43:13:28:eb:ba:2d:43:
                    1f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F6:3F:D0:A6:C9:74:B5:38:41:DB:E8:6C:FF:B9:B4:A7:4A:D4:5A
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3132302e302f32322d3232203d3e203435303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.45.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:79:b8:76:b2:1b:e7:d1:48:43:7a:10:09:fc:dc:74:fd:c7:
         85:bf:9d:fe:f5:31:0b:97:d7:6c:0a:5e:67:30:a0:dc:ae:bd:
         eb:47:4f:4c:0f:ad:5d:60:e0:46:41:6b:b3:47:2c:54:f3:dc:
         0a:d9:51:b7:2d:35:c0:5f:1d:5c:fe:72:28:28:4d:69:07:52:
         44:b4:b5:8f:d4:04:95:12:30:9b:d0:e0:22:f7:00:3a:4b:14:
         1c:05:09:93:9b:01:d7:f0:bb:60:71:1d:eb:16:75:16:f0:b9:
         46:d8:3a:cf:62:32:c7:8c:b0:c8:5e:a9:7a:cb:46:8f:f9:9d:
         d3:26:55:64:02:d5:66:bb:27:7c:ba:3e:3a:5f:bb:cc:95:21:
         29:4c:99:1b:70:2b:f4:1e:5c:23:00:7b:96:12:32:69:de:89:
         e9:b5:93:e6:b4:aa:0d:8e:87:fa:d2:11:fd:d7:9b:d5:cd:b9:
         86:53:25:6e:39:d9:4d:22:c4:2c:94:6b:c3:25:20:65:86:c2:
         66:70:65:e6:41:23:0c:a2:01:21:ea:8b:7a:e2:a8:c5:d8:33:
         0f:da:7a:2e:fd:d5:e2:8e:6f:47:3a:f8:f0:ef:ff:3b:bd:e4:
         0a:c2:39:cf:7d:8d:23:4d:4f:54:a8:c8:2c:75:90:80:a6:e1:
         e9:07:24:cf
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUGLcnIGsKGRVsBh7tlcXgS5w81k0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5
RjkzRjZGODAeFw0yNjA2MTYwMjU5MDNaFw0yNzA2MTUwMzA0MDNaMDMxMTAvBgNV
BAMTKDVERjYzRkQwQTZDOTc0QjUzODQxREJFODZDRkZCOUI0QTc0QUQ0NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2/6elnyYzRCd074513dr6qoPT
k3Xx4hfTJhRPK1cfA5QZGS1Dt5HfISaLBgz6WnmcV6M3u/aY33FwOFlSOilayiNI
wyz4b3dgQVFbhjCNGrowxw75UwFk2GVk7CyCiXGod2ZMeiNLyOj8X3VNyzTnDgzu
0DBrg81eA6qXrDr+lSXdR7VjtJdyNNBkIq2oWBpdnRY3U5MZ2b7POZxDfRHSyTS4
mam5zMK66QN8ODMkm1HyLvIgn2H1TnXrouyc+5eKnSkZYjAWKi2xcmcNoV2NNtUs
HFjfU6gl8kzTonmXQE3Qf5x2gilvrQfkKQPSz2btsPzJlr66QxMo67otQx/ZAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUXfY/0KbJdLU4QdvobP+5tKdK1FowHwYDVR0j
BBgwFoAUpgmQqcpYkWQFBDK9BUc9z5+T9vgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NzU3NTQzNzUzMTI4MzQ3Ny8wL0E2MDk5MEE5Q0E1ODkxNjQwNTA0MzJCRDA1NDcz
RENGOUY5M0Y2RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5RjkzRjZGOC5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA3NTc1NDM3NTMxMjgzNDc3LzAvMzEyZTM0MzUyZTMx
MzIzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM0MzUzMDM4MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAIBLXgwDQYJKoZIhvcNAQELBQADggEBAJ55uHayG+fRSEN6EAn83HT9x4W/nf71
MQuX12wKXmcwoNyuvetHT0wPrV1g4EZBa7NHLFTz3ArZUbctNcBfHVz+cigoTWkH
UkS0tY/UBJUSMJvQ4CL3ADpLFBwFCZObAdfwu2BxHesWdRbwuUbYOs9iMseMsMhe
qXrLRo/5ndMmVWQC1Wa7J3y6Pjpfu8yVISlMmRtwK/QeXCMAe5YSMmneiem1k+a0
qg2Oh/rSEf3Xm9XNuYZTJW452U0ixCyUa8MlIGWGwmZwZeZBIwyiASHqi3riqMXY
Mw/aei791eKOb0c6+PDv/zu95ArCOc99jSNNT1SoyCx1kICm4ekHJM8=
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:04 2026 by rpki-client