Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3133322e302f32322d3232203d3e203435303833.roa
File:                     312e34352e3133322e302f32322d3232203d3e203435303833.roa (raw, json)
Hash identifier:          wsg3YLVJGEbV0rrUvqR0mh4WDW0+U5HYs7zV8hUUmPc=
Subject key identifier:   F4:7F:E9:9D:2D:4A:FF:F9:C9:DB:79:BF:9D:5B:A4:BB:75:B1:E8:AA
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       4547D31DF3FD7CDCB1E6C8577A7BF6EA75B36FAD
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3133322e302f32322d3232203d3e203435303833.roa
Signing time:             Tue 16 Jun 2026 03:13:24 +0000
ROA not before:           Tue 16 Jun 2026 03:08:24 +0000
ROA not after:            Tue 15 Jun 2027 03:13:24 +0000
asID:                     45083
IP address blocks:        1.45.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 07:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:47:d3:1d:f3:fd:7c:dc:b1:e6:c8:57:7a:7b:f6:ea:75:b3:6f:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun 16 03:08:24 2026 GMT
            Not After : Jun 15 03:13:24 2027 GMT
        Subject: CN=F47FE99D2D4AFFF9C9DB79BF9D5BA4BB75B1E8AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6d:90:d8:2c:c4:94:8f:ff:72:5b:dd:36:89:
                    33:15:9e:b3:ea:39:14:08:e0:9d:02:d0:f3:07:59:
                    dc:c2:44:c1:6e:3d:03:f9:19:0f:69:f2:b9:c1:de:
                    f6:09:dd:18:c8:20:84:13:0c:84:7f:61:96:b9:6e:
                    25:61:69:c6:10:5f:ff:7c:63:06:11:7b:92:c1:6d:
                    64:37:80:9c:8a:76:9d:e1:87:8c:fe:af:9f:73:52:
                    c3:fc:ec:11:50:a0:ba:3a:41:2c:d9:2a:e8:77:36:
                    d4:5c:91:9d:d6:73:15:98:0a:71:4b:5d:e5:1e:f5:
                    cb:bd:c0:71:9a:0f:2c:79:03:a5:b0:9b:fd:45:3d:
                    d5:df:d1:bf:ed:ad:a2:cd:9c:5e:7f:10:72:ed:95:
                    e8:81:de:f9:2e:41:3b:f7:8f:7d:41:23:13:76:2d:
                    d0:49:74:66:4d:fc:62:24:07:01:af:a3:66:7b:4e:
                    4a:d6:4c:0e:ae:0e:7b:b0:3f:a0:b0:ea:30:17:a5:
                    3c:a9:c1:1f:d0:93:52:01:f8:b4:fd:08:91:58:74:
                    bb:91:24:25:a9:5a:23:11:e8:34:60:c1:6b:66:25:
                    e8:91:09:a8:1e:ed:eb:d6:ad:28:3d:14:9c:94:a6:
                    21:12:80:ed:60:7e:85:33:3d:e1:39:90:c9:b9:86:
                    13:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7F:E9:9D:2D:4A:FF:F9:C9:DB:79:BF:9D:5B:A4:BB:75:B1:E8:AA
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3133322e302f32322d3232203d3e203435303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.45.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:3d:a2:9f:c0:11:2e:92:3e:05:b9:79:da:e7:b0:a9:a2:f6:
         61:3f:fa:e9:4e:e5:9d:03:97:f7:87:c0:b8:f0:b6:11:72:91:
         18:99:d8:92:7a:00:fd:81:7c:14:b8:a3:d8:1c:8d:ab:ba:c3:
         36:2e:4a:f5:e6:71:fa:28:8c:84:45:6e:fe:9a:56:55:14:a3:
         e8:3c:03:94:ce:53:c0:fe:e0:c1:67:07:40:81:a8:fd:a7:47:
         fe:70:03:6b:e1:68:a8:d6:ca:c6:4d:fc:b4:90:a7:1c:20:83:
         b5:c8:82:b3:d9:c9:b7:3c:8f:e5:4c:89:b1:47:08:39:01:c9:
         53:d7:7c:7d:d4:71:a8:2f:f3:dc:d8:04:b7:31:f3:72:ba:01:
         5f:b3:c8:7b:83:bc:47:26:21:7e:df:8e:b7:21:71:4a:dc:27:
         60:44:16:47:20:e6:f5:d4:1c:74:53:3c:f9:0d:05:01:98:ed:
         a5:49:96:d3:3f:82:0d:cc:9f:e4:b8:bb:a0:bf:d0:ff:c5:19:
         ac:f5:6b:22:0e:13:40:aa:9d:16:00:9a:cc:f4:1f:ab:83:80:
         45:28:55:d4:f4:ad:8b:6b:b0:18:d9:51:30:8c:79:99:83:c2:
         de:50:a8:93:53:45:9a:9e:e3:32:98:b0:24:89:9b:c3:19:d7:
         86:38:5f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:57:57 2026 by rpki-client