Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3134342e302f32322d3232203d3e203435303833.roa
File:                     312e34352e3134342e302f32322d3232203d3e203435303833.roa (raw, json)
Hash identifier:          PUKFUHMdODgociBJcdop6bvv5JSr6MpKOYZPDEEcz0Q=
Subject key identifier:   13:06:79:7C:96:9B:2B:DD:BA:67:A5:49:7F:7A:3C:F0:2F:55:8C:D9
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       45FBB534876A9CC27837DB4287B90F4F8801BA25
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3134342e302f32322d3232203d3e203435303833.roa
Signing time:             Tue 16 Jun 2026 03:13:38 +0000
ROA not before:           Tue 16 Jun 2026 03:08:38 +0000
ROA not after:            Tue 15 Jun 2027 03:13:38 +0000
asID:                     45083
IP address blocks:        1.45.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 07:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:fb:b5:34:87:6a:9c:c2:78:37:db:42:87:b9:0f:4f:88:01:ba:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun 16 03:08:38 2026 GMT
            Not After : Jun 15 03:13:38 2027 GMT
        Subject: CN=1306797C969B2BDDBA67A5497F7A3CF02F558CD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:79:08:b7:1a:e5:24:24:2a:e0:6b:0a:20:3e:
                    7a:9d:fb:01:02:0c:7f:92:a4:f5:0b:56:d2:57:8e:
                    1b:19:02:85:38:f5:52:3b:24:d4:a1:09:63:63:17:
                    be:49:b4:b8:f9:b6:ad:38:59:b9:c4:3a:c6:f0:b9:
                    f6:58:64:f9:fd:81:1b:de:0f:7d:9b:e2:8e:65:fe:
                    8e:6b:96:a8:94:0b:9f:06:73:2e:36:ac:05:9c:14:
                    78:35:6d:13:71:51:b7:02:0e:31:f3:02:a0:f0:5d:
                    73:1f:5e:50:86:86:1e:0b:29:86:45:66:1a:19:9b:
                    65:11:6e:2f:4d:e7:a4:c3:c0:64:27:b5:81:4a:26:
                    f3:4a:4e:4d:63:a2:0e:91:e0:3a:ac:8b:8d:09:b4:
                    5b:65:7d:9a:3e:14:3a:c1:6b:8a:fe:1c:b5:57:f4:
                    42:b1:ec:ff:e4:ed:bd:c8:47:7f:6c:51:a3:38:f5:
                    f9:e0:99:28:50:e2:4f:7a:1d:de:63:6f:b0:81:d1:
                    ba:e4:34:97:32:75:e1:f5:56:9b:11:46:45:25:1d:
                    c4:fe:69:9c:fa:12:77:ba:80:ce:f8:5f:ae:27:d1:
                    20:5f:23:55:df:ad:d7:84:26:2a:94:d1:14:31:b7:
                    c8:3a:1b:8d:ac:7c:ab:71:09:39:1e:cd:78:88:b0:
                    ff:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:06:79:7C:96:9B:2B:DD:BA:67:A5:49:7F:7A:3C:F0:2F:55:8C:D9
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3134342e302f32322d3232203d3e203435303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.45.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:bd:a7:33:70:53:57:63:a9:71:ac:e7:1e:02:54:37:f1:1d:
         6a:d8:59:1f:00:08:5f:62:0b:e2:ca:46:34:ab:06:84:d1:23:
         84:01:25:92:c7:3f:70:a4:a0:c6:04:b8:8d:dc:f8:e9:d0:14:
         2c:e1:a4:fb:cc:3d:50:63:ee:57:ef:e8:d0:86:49:c2:31:54:
         4f:f5:ba:02:1e:fb:4e:2c:20:9b:43:c2:34:e6:40:a3:27:e0:
         f4:e9:09:aa:52:19:da:af:4f:04:17:9d:ad:0d:4f:56:96:b1:
         df:4c:68:22:1b:4b:64:93:0b:6a:83:93:1e:3d:ee:32:2a:c3:
         07:82:97:ed:32:e1:f1:0f:5b:ed:b8:dd:12:56:8b:ad:d2:c2:
         88:26:ba:dc:d6:eb:4c:6c:8e:ba:d2:1b:9a:fa:82:06:2d:63:
         62:a0:b3:0d:fc:27:33:2e:c4:1e:3f:fc:5b:7a:3e:90:cc:58:
         5d:5b:46:d3:75:35:a9:3c:27:9f:42:35:2f:87:37:ec:fb:d2:
         70:97:36:30:52:a2:e9:bd:ce:fc:cb:5b:cb:d7:a0:76:cc:2e:
         5c:30:ea:75:8c:65:50:16:67:4f:e8:36:63:cc:48:8e:8a:2e:
         b3:47:d2:9a:10:d4:02:0e:9a:98:aa:93:d9:0f:53:53:92:31:
         f0:ea:73:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:28 2026 by rpki-client