Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3132382e302f31372d3137203d3e203435303833.roa
File:                     312e34352e3132382e302f31372d3137203d3e203435303833.roa (raw, json)
Hash identifier:          d+EkuGPOkhJmwGWVL9ZRh5bUHMlxmSJeuDqkGvpQf9I=
Subject key identifier:   0E:BA:33:B4:71:B4:C0:C7:E9:0B:64:97:62:F7:1C:EF:97:77:AD:5C
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       396305487F3CF1F6B3F92B0A1BCB1F36E8E437B8
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3132382e302f31372d3137203d3e203435303833.roa
Signing time:             Tue 16 Jun 2026 03:14:57 +0000
ROA not before:           Tue 16 Jun 2026 03:09:57 +0000
ROA not after:            Tue 15 Jun 2027 03:14:57 +0000
asID:                     45083
IP address blocks:        1.45.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 07:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:63:05:48:7f:3c:f1:f6:b3:f9:2b:0a:1b:cb:1f:36:e8:e4:37:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun 16 03:09:57 2026 GMT
            Not After : Jun 15 03:14:57 2027 GMT
        Subject: CN=0EBA33B471B4C0C7E90B649762F71CEF9777AD5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cd:81:62:0c:59:76:d5:d7:90:a2:55:0a:20:
                    5f:8c:b7:72:1a:28:a7:d4:3b:7d:f5:1a:7f:12:72:
                    c8:b6:11:8a:57:83:0d:68:71:8d:13:fc:13:cd:0e:
                    1a:62:c1:39:0f:f5:50:41:b2:4e:ed:4a:74:85:0c:
                    49:ac:cf:c1:c5:92:8c:7f:91:39:76:cc:c7:03:3b:
                    4f:5b:58:00:62:94:8c:9c:0d:30:8a:40:a1:05:21:
                    78:4c:d5:24:87:c5:e3:ba:7c:03:ba:ef:54:9a:b0:
                    8f:ed:f9:23:8d:54:0e:ba:0d:db:f7:70:be:c3:bf:
                    b5:69:09:aa:59:37:fc:e2:83:17:71:f3:a6:9d:ba:
                    0b:fb:da:5d:42:23:c2:f9:bf:ca:cf:14:c4:0d:1d:
                    84:a0:0c:6d:4d:2c:ad:9d:9d:31:54:3a:fa:41:d1:
                    e4:f4:cf:3e:03:c9:38:2f:95:fb:bc:7f:a7:1f:84:
                    44:7c:c5:3a:ad:d6:c3:20:6e:05:67:83:11:3d:bf:
                    86:dc:43:4b:a9:8d:d1:d9:9f:19:f0:eb:f7:89:eb:
                    9c:45:96:45:e1:cc:f3:e2:70:28:8a:1c:8f:58:8d:
                    8e:92:1b:6c:e5:e5:ef:2d:21:a6:bf:4f:20:bb:e7:
                    ae:a3:2e:35:3d:b5:fc:41:24:af:9d:5c:e1:96:0c:
                    b8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:BA:33:B4:71:B4:C0:C7:E9:0B:64:97:62:F7:1C:EF:97:77:AD:5C
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3132382e302f31372d3137203d3e203435303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.45.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         97:53:29:5b:f3:d7:36:3b:9a:27:20:aa:24:81:ed:be:a3:5a:
         08:14:69:36:57:7a:80:52:c8:71:70:4a:36:90:fc:79:3f:dc:
         5c:80:69:2f:35:81:2d:ce:98:c1:5e:82:71:91:d3:ac:8d:09:
         32:5c:77:94:d8:00:4e:cc:e4:16:2c:bd:71:95:64:7a:60:53:
         8e:3a:62:0d:1a:4a:ac:59:ca:5a:8b:06:cc:84:d7:9c:ce:92:
         61:c9:74:44:08:76:f7:30:92:a9:a9:22:30:0e:a6:16:24:fe:
         bc:61:27:09:b1:17:c4:c6:5c:ee:36:ce:03:f6:0a:48:36:97:
         bf:38:cb:1d:51:37:c9:6f:cc:aa:e8:a3:12:49:be:5b:95:d6:
         7b:86:7a:c9:d4:84:02:07:bf:9e:0b:d9:1e:5c:c8:2d:b3:74:
         78:44:79:a0:b5:82:0e:8b:5b:29:20:84:75:29:0c:21:40:b9:
         97:88:8c:24:1f:fa:72:f9:53:06:33:51:ce:d0:d4:b3:b3:03:
         80:fc:d1:1b:27:4c:cb:58:de:64:78:bb:48:bb:f9:20:af:65:
         84:d4:1a:87:46:52:69:68:7b:63:e2:20:45:71:92:74:e1:cd:
         67:02:55:4d:99:2f:c6:c1:73:94:00:b7:97:3b:61:10:31:47:
         aa:89:6a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:57:54 2026 by rpki-client