Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3133362e302f32322d3232203d3e203435303833.roa
File:                     312e34352e3133362e302f32322d3232203d3e203435303833.roa (raw, json)
Hash identifier:          ygMT4LbhvNwg4/tAbxJ8YWNvboEdhQ2tEewDCSdW4N8=
Subject key identifier:   4E:C3:77:2B:0B:7C:DD:6F:81:B4:21:15:AF:AC:1C:88:85:B3:AE:3E
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       030407368DBE094E818A3D9522E31B597394594D
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3133362e302f32322d3232203d3e203435303833.roa
Signing time:             Tue 16 Jun 2026 03:01:09 +0000
ROA not before:           Tue 16 Jun 2026 02:56:09 +0000
ROA not after:            Tue 15 Jun 2027 03:01:09 +0000
asID:                     45083
IP address blocks:        1.45.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 07:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:04:07:36:8d:be:09:4e:81:8a:3d:95:22:e3:1b:59:73:94:59:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun 16 02:56:09 2026 GMT
            Not After : Jun 15 03:01:09 2027 GMT
        Subject: CN=4EC3772B0B7CDD6F81B42115AFAC1C8885B3AE3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f6:25:c8:7b:35:e3:93:75:e0:05:1a:bd:fc:
                    89:d1:a4:cc:74:ed:15:41:30:61:0b:1d:13:97:f8:
                    fc:f5:71:da:be:b9:e4:ee:56:ea:de:ae:ec:d0:a0:
                    fb:28:e8:0b:6d:36:0e:b6:f7:36:8d:02:75:fb:64:
                    f1:62:0d:12:56:82:a6:8f:a1:7d:15:66:01:2a:ac:
                    49:79:4f:f4:18:34:91:0b:28:b6:67:06:39:73:95:
                    81:34:bb:98:eb:a0:8a:90:c3:e5:a2:66:8a:83:a3:
                    f8:11:55:a8:d3:8a:e6:1a:16:fb:7f:ab:24:dd:0c:
                    06:45:d6:ca:a6:7d:86:5b:b2:b3:be:97:ca:79:b0:
                    3d:d1:32:61:5a:b5:ed:76:75:de:8b:fd:2e:fc:68:
                    db:e6:22:92:b6:c6:52:c4:00:b3:c2:f4:1a:7b:4f:
                    7d:85:d4:69:b0:cc:b5:12:87:39:11:be:0d:c2:c8:
                    53:91:b8:a8:27:a5:09:03:54:30:b2:d8:09:51:41:
                    38:33:c5:98:62:26:17:f1:54:00:e8:27:78:2b:fc:
                    88:55:75:ac:c7:b8:8c:dc:fb:1c:e6:94:f3:62:d3:
                    57:b2:28:9f:b8:d6:fa:27:ef:05:89:01:69:a7:7f:
                    8e:39:20:1f:43:86:13:ff:3f:dc:55:e5:04:bb:9e:
                    11:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C3:77:2B:0B:7C:DD:6F:81:B4:21:15:AF:AC:1C:88:85:B3:AE:3E
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3133362e302f32322d3232203d3e203435303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.45.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:cd:79:5a:f4:61:99:89:69:73:bd:c5:ef:9e:49:9e:d5:1f:
         03:f6:96:4e:d0:d8:9c:9c:64:a2:92:78:3b:1a:19:ed:93:5f:
         06:e4:4a:ca:77:a1:be:a0:49:79:d9:64:99:d8:3a:51:c1:b9:
         00:06:f2:f5:bd:2f:7e:91:38:69:ab:88:f8:c9:24:e8:85:6f:
         b9:f4:49:78:ec:3d:ce:a1:1d:d7:75:7d:ce:7d:e9:6f:11:5a:
         ff:0f:a5:3e:39:81:16:0b:8f:59:09:63:84:93:d5:bc:4a:93:
         6b:ea:79:fc:f7:9e:88:85:2e:db:40:06:48:ea:8a:8d:d7:48:
         d7:57:b1:de:c9:52:8f:ee:db:39:de:1f:51:e0:09:bc:21:67:
         1f:fa:14:da:e5:fa:38:d5:7b:7c:2f:17:9b:0e:78:20:fd:b6:
         b7:c9:1e:e4:db:ec:a1:1c:dd:67:79:aa:6c:7a:4b:df:29:88:
         22:56:fb:f7:f3:ae:59:56:79:d0:a1:a3:5c:21:62:c3:4d:c4:
         57:04:1d:f7:d8:71:d0:f6:93:3a:ab:13:c7:fc:fe:9c:08:f8:
         36:d2:f7:f9:63:96:0d:c2:d4:65:70:ac:be:e7:a0:40:16:fb:
         00:49:9c:1b:b5:80:0c:aa:2c:1b:9a:87:cf:7d:fc:05:13:3d:
         de:7f:75:8e
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUAwQHNo2+CU6Bij2VIuMbWXOUWU0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5
RjkzRjZGODAeFw0yNjA2MTYwMjU2MDlaFw0yNzA2MTUwMzAxMDlaMDMxMTAvBgNV
BAMTKDRFQzM3NzJCMEI3Q0RENkY4MUI0MjExNUFGQUMxQzg4ODVCM0FFM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO9iXIezXjk3XgBRq9/InRpMx0
7RVBMGELHROX+Pz1cdq+ueTuVureruzQoPso6AttNg629zaNAnX7ZPFiDRJWgqaP
oX0VZgEqrEl5T/QYNJELKLZnBjlzlYE0u5jroIqQw+WiZoqDo/gRVajTiuYaFvt/
qyTdDAZF1sqmfYZbsrO+l8p5sD3RMmFate12dd6L/S78aNvmIpK2xlLEALPC9Bp7
T32F1GmwzLUShzkRvg3CyFORuKgnpQkDVDCy2AlRQTgzxZhiJhfxVADoJ3gr/IhV
dazHuIzc+xzmlPNi01eyKJ+41von7wWJAWmnf445IB9DhhP/P9xV5QS7nhH7AgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUTsN3Kwt83W+BtCEVr6wciIWzrj4wHwYDVR0j
BBgwFoAUpgmQqcpYkWQFBDK9BUc9z5+T9vgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NzU3NTQzNzUzMTI4MzQ3Ny8wL0E2MDk5MEE5Q0E1ODkxNjQwNTA0MzJCRDA1NDcz
RENGOUY5M0Y2RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5RjkzRjZGOC5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA3NTc1NDM3NTMxMjgzNDc3LzAvMzEyZTM0MzUyZTMx
MzMzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM0MzUzMDM4MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAIBLYgwDQYJKoZIhvcNAQELBQADggEBAEvNeVr0YZmJaXO9xe+eSZ7VHwP2lk7Q
2JycZKKSeDsaGe2TXwbkSsp3ob6gSXnZZJnYOlHBuQAG8vW9L36ROGmriPjJJOiF
b7n0SXjsPc6hHdd1fc596W8RWv8PpT45gRYLj1kJY4ST1bxKk2vqefz3noiFLttA
Bkjqio3XSNdXsd7JUo/u2zneH1HgCbwhZx/6FNrl+jjVe3wvF5sOeCD9trfJHuTb
7KEc3Wd5qmx6S98piCJW+/fzrllWedCho1whYsNNxFcEHffYcdD2kzqrE8f8/pwI
+DbS9/ljlg3C1GVwrL7noEAW+wBJnBu1gAyqLBuah899/AUTPd5/dY4=
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:57:58 2026 by rpki-client