Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3135362e302f32322d3232203d3e203435303833.roa
File:                     312e34352e3135362e302f32322d3232203d3e203435303833.roa (raw, json)
Hash identifier:          c8JLF7QLlCDqKeWv0HJUsJtGNwDs1xGh4FT9Y0brqfM=
Subject key identifier:   B6:59:5B:20:61:22:AD:05:CB:E6:F4:64:EE:94:47:8D:F8:F8:E9:C7
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       2018DB5A64CECE2347DE841700D9BE9B74AF40B2
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3135362e302f32322d3232203d3e203435303833.roa
Signing time:             Tue 16 Jun 2026 03:11:30 +0000
ROA not before:           Tue 16 Jun 2026 03:06:30 +0000
ROA not after:            Tue 15 Jun 2027 03:11:30 +0000
asID:                     45083
IP address blocks:        1.45.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 07:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:18:db:5a:64:ce:ce:23:47:de:84:17:00:d9:be:9b:74:af:40:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun 16 03:06:30 2026 GMT
            Not After : Jun 15 03:11:30 2027 GMT
        Subject: CN=B6595B206122AD05CBE6F464EE94478DF8F8E9C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7d:d5:3b:f3:2e:a2:77:1f:f6:d4:17:76:0c:
                    e1:58:ea:4f:1d:bb:22:a6:36:08:72:be:d6:6f:75:
                    cc:6a:3d:ac:d1:9f:31:0b:f2:b7:d7:96:87:e3:a8:
                    94:eb:c6:dd:6a:d9:9d:cf:98:d2:75:3f:3e:30:a4:
                    c7:e8:77:72:dd:bd:4d:02:45:31:14:d9:37:e6:40:
                    63:08:10:e8:1b:9f:d8:b8:9e:78:12:74:a1:bf:fd:
                    dc:70:3d:95:15:eb:98:a6:8f:bc:91:0c:cf:97:63:
                    9e:56:6c:38:e4:3f:cf:04:a2:ae:34:33:58:1b:0b:
                    3c:90:1f:7f:f7:6e:7c:86:ac:0e:9c:56:2e:57:ee:
                    6d:6a:5f:75:70:b4:6f:01:98:39:29:9b:34:d8:2d:
                    c4:b3:5a:a9:e9:7d:3f:f3:45:3e:11:93:e1:7f:64:
                    d7:4a:2f:21:5b:6f:65:0a:42:9f:da:ce:85:a6:bd:
                    66:54:28:ea:9a:35:9a:8a:28:05:5d:7f:d5:f1:bd:
                    af:56:f9:cf:28:ae:81:95:08:5a:ed:bd:b9:a9:8b:
                    8a:1d:9e:b5:e6:87:4b:c5:79:01:3b:75:f9:a4:a3:
                    01:ab:e9:cf:07:5d:af:72:1c:02:dd:f8:d6:3e:55:
                    03:12:04:f6:c3:d3:2c:e3:54:b9:ea:30:9c:1a:84:
                    3d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:59:5B:20:61:22:AD:05:CB:E6:F4:64:EE:94:47:8D:F8:F8:E9:C7
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3135362e302f32322d3232203d3e203435303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.45.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:02:ee:70:d7:d3:d8:f2:f9:f9:58:06:8a:0d:83:53:43:62:
         8e:09:b9:3b:5c:3f:b3:bb:60:11:42:3f:9f:2d:5c:a9:1c:16:
         1f:f8:d2:8b:c6:3c:74:9e:08:b6:0a:31:fd:09:49:28:1e:c0:
         43:72:52:d2:b3:a9:de:8d:26:a3:02:c6:6e:41:a8:27:4e:6c:
         05:de:f6:9b:51:f8:ff:fa:06:fd:f6:d8:9c:40:cf:0b:c1:cb:
         76:9a:af:c0:57:c6:0a:69:59:ee:cd:de:76:f3:09:95:99:97:
         eb:51:ae:77:23:f8:7e:b6:02:9a:0a:c5:34:b1:68:37:48:3c:
         d2:3a:a0:6a:2f:c2:de:b0:b6:32:02:5b:2c:12:a5:b1:bb:4b:
         ba:45:e3:9c:16:59:38:06:77:5d:12:d0:05:27:b4:3a:de:d3:
         6f:8a:8d:c5:cd:e4:4f:de:1a:02:87:46:65:18:98:86:f1:7b:
         7b:08:f8:4b:50:32:b4:23:99:b5:ce:d9:49:ff:ee:85:5e:ce:
         7d:7f:e6:a4:58:40:d9:6c:81:ce:34:7a:3c:55:fc:54:07:23:
         9b:cf:56:bc:b3:23:5e:09:68:dc:24:e8:7b:12:7c:37:c8:ee:
         00:67:a6:ff:c8:8a:47:b0:2a:a4:50:31:b7:e4:c6:91:88:e5:
         90:1d:32:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:27 2026 by rpki-client