Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3132382e302f32322d3232203d3e203435303833.roa
File:                     312e34352e3132382e302f32322d3232203d3e203435303833.roa (raw, json)
Hash identifier:          OXLEcWT2kbKDMMmROmZ1hKUXtArIRa4+q2XdrBMS4wM=
Subject key identifier:   E0:02:87:ED:59:4F:6D:2B:D0:74:2D:59:7A:4F:EB:0F:B0:BE:DC:B6
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       4B73F8ED85352F5074BCE863EC674345F0199DF3
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3132382e302f32322d3232203d3e203435303833.roa
Signing time:             Tue 16 Jun 2026 03:03:12 +0000
ROA not before:           Tue 16 Jun 2026 02:58:12 +0000
ROA not after:            Tue 15 Jun 2027 03:03:12 +0000
asID:                     45083
IP address blocks:        1.45.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 07:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:73:f8:ed:85:35:2f:50:74:bc:e8:63:ec:67:43:45:f0:19:9d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun 16 02:58:12 2026 GMT
            Not After : Jun 15 03:03:12 2027 GMT
        Subject: CN=E00287ED594F6D2BD0742D597A4FEB0FB0BEDCB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5e:16:44:bc:6f:b5:e6:12:89:5d:c6:91:65:
                    53:99:81:8d:eb:bd:d4:4b:6a:ff:28:5b:61:a5:f1:
                    20:42:56:a3:96:3c:f2:4b:45:96:dd:07:3f:f7:69:
                    08:be:a4:5c:40:92:07:fb:13:64:c0:34:d0:91:90:
                    67:77:d0:e5:0b:cd:1d:4c:d7:ff:88:cf:4d:f9:3b:
                    2a:ec:9a:e8:24:46:a9:81:0a:d0:e6:e0:c0:d0:e0:
                    d5:5b:d2:8e:d6:90:22:e9:ee:ff:b1:65:2d:ea:30:
                    5a:3d:f1:2c:30:37:a7:11:7f:97:16:40:65:3a:72:
                    ed:de:16:0f:e8:75:b9:e3:5d:c4:96:37:3a:9a:c3:
                    27:ff:2f:fe:7c:51:a7:d0:83:f5:c6:5f:20:db:30:
                    7f:32:b5:00:78:21:f1:48:3e:fb:5f:0d:29:c4:11:
                    98:8e:51:e3:6d:11:c8:3f:f3:bf:7d:83:38:f9:ee:
                    64:c5:8b:d3:38:7a:3b:9a:2b:a2:7b:77:87:b9:e8:
                    18:aa:e9:d4:92:5f:d7:5b:f4:d1:ba:0a:f2:f0:99:
                    10:8b:a7:ca:5a:a8:55:a0:b8:40:bf:c3:d1:55:90:
                    7b:6a:23:8c:99:7f:f0:02:8c:50:b1:62:bb:04:dd:
                    74:76:fe:1e:6b:6b:ee:2c:3f:9e:de:61:5e:fb:2d:
                    70:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:02:87:ED:59:4F:6D:2B:D0:74:2D:59:7A:4F:EB:0F:B0:BE:DC:B6
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3132382e302f32322d3232203d3e203435303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.45.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:f2:f9:3b:7a:ee:24:ce:a6:69:40:4f:c0:47:67:58:08:22:
         f4:2e:6c:eb:27:c8:76:28:b8:0b:50:e8:5d:85:12:b2:10:5f:
         3b:81:cf:f7:d2:59:84:21:0f:77:05:35:2e:9e:e9:ab:04:c6:
         f5:63:20:b8:94:ee:6d:7e:7d:fa:f7:44:39:17:86:db:f1:53:
         fe:fe:b0:23:4d:70:5d:39:c2:44:e5:f1:d9:cb:8d:9d:02:c5:
         84:99:9b:2d:39:6b:7a:fd:e5:8c:77:b8:3f:2e:11:36:30:0b:
         cf:fb:84:b8:d0:98:0a:e1:6e:12:7b:8c:9a:f6:be:32:0b:df:
         0e:88:78:1a:a9:c5:15:85:1f:b1:cb:ba:49:b8:94:52:aa:a9:
         8d:32:ac:8c:a6:ce:6d:56:05:dd:b4:96:21:52:70:b5:7e:9e:
         6a:f8:64:c9:de:93:f7:94:31:fa:cc:f2:ee:39:de:85:39:b4:
         06:8c:0b:22:a5:f2:a4:08:4f:38:31:a2:ad:c2:0a:8e:67:ec:
         a0:10:f1:42:f2:6f:59:06:d2:cf:17:c4:92:1c:ac:e3:e7:c9:
         dd:d8:3d:f0:c1:f2:fc:3a:69:44:75:b4:d2:03:d9:f9:30:4e:
         ad:2c:7c:28:12:90:72:52:9f:4d:ba:66:73:69:f5:a8:98:ad:
         80:37:5b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:57:58 2026 by rpki-client