Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3138382e302f32322d3232203d3e203435303833.roa
File:                     312e34352e3138382e302f32322d3232203d3e203435303833.roa (raw, json)
Hash identifier:          lxsZlXaKjmrAAvhhw1DnmkXtd4KD7VSDTs4O1QfEKWk=
Subject key identifier:   05:EE:64:27:81:30:1F:48:D2:DA:D0:9B:1D:71:FB:DE:72:D3:9D:BA
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       13673958C7A80B9171CDC244691A7E7323A1F9BA
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3138382e302f32322d3232203d3e203435303833.roa
Signing time:             Tue 16 Jun 2026 03:04:56 +0000
ROA not before:           Tue 16 Jun 2026 02:59:56 +0000
ROA not after:            Tue 15 Jun 2027 03:04:56 +0000
asID:                     45083
IP address blocks:        1.45.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 07:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:67:39:58:c7:a8:0b:91:71:cd:c2:44:69:1a:7e:73:23:a1:f9:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun 16 02:59:56 2026 GMT
            Not After : Jun 15 03:04:56 2027 GMT
        Subject: CN=05EE642781301F48D2DAD09B1D71FBDE72D39DBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fc:1b:67:17:e4:1e:19:7e:a5:3d:41:c2:71:
                    4d:3c:6e:f3:42:71:aa:99:81:7f:da:0b:09:54:01:
                    c0:c8:3a:4f:5a:21:e9:9f:7f:0f:74:fa:cb:7e:49:
                    6f:50:28:4f:4b:3e:8b:60:70:bb:82:21:42:60:28:
                    1b:0f:9c:28:53:12:4e:02:8c:e5:d4:24:6d:9e:72:
                    4a:f8:cf:47:a1:d7:da:5d:1f:58:77:0c:25:ce:0d:
                    df:c0:ea:cb:81:9a:74:5a:0b:e2:1c:76:10:ee:73:
                    57:59:8e:8c:e7:52:00:a3:b1:fa:bd:c3:04:59:60:
                    0b:a0:e0:4b:cd:01:9c:3e:ff:fc:75:f7:72:58:6f:
                    de:11:6e:b8:d5:72:bb:b2:d1:f8:a1:5e:4e:c1:9a:
                    dc:c9:90:45:b6:8f:93:3e:22:c1:ac:cb:38:6e:ea:
                    d4:19:46:bc:ee:34:68:c1:17:85:bb:c8:3e:7a:41:
                    b0:ea:b3:2e:6c:e4:e1:80:b2:63:0f:7e:83:f5:ba:
                    0b:f4:b0:c8:65:a7:03:a7:b5:25:b2:c9:7d:f4:10:
                    dd:75:56:c9:d9:39:f3:1b:87:58:ea:1f:8d:f8:84:
                    ef:43:9b:60:a7:ea:32:09:a1:4b:51:da:ed:0f:ad:
                    53:f6:9a:18:83:ae:be:02:ef:ea:6f:ea:ff:4e:94:
                    32:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:EE:64:27:81:30:1F:48:D2:DA:D0:9B:1D:71:FB:DE:72:D3:9D:BA
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3138382e302f32322d3232203d3e203435303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.45.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:c2:77:29:9c:54:4b:59:f1:d4:6f:8e:ad:1f:83:da:71:83:
         fa:3b:0a:5a:ad:da:a2:32:47:3d:80:b4:e6:7e:4c:7a:a6:50:
         bc:94:b7:28:1b:b9:ab:d1:8e:03:dc:87:6c:d2:ed:0d:b4:b0:
         96:be:e8:4b:0a:d2:f6:6f:36:b3:a3:b2:02:1a:b8:98:41:5a:
         b4:d2:59:15:08:ab:86:95:89:b6:2d:4b:89:93:0b:8c:3d:55:
         4e:94:95:95:ca:d9:ae:76:db:fc:aa:6d:d4:a3:c7:bb:80:01:
         c0:49:82:01:26:d8:e4:0b:65:f2:86:f7:e9:0a:6b:a4:2c:cc:
         63:df:15:1c:55:0e:b3:f3:dd:d3:49:e2:d7:e8:6a:b6:c3:b7:
         3b:93:40:43:bb:2c:91:a1:81:50:fa:22:88:d6:95:56:94:df:
         eb:b7:d3:0f:17:24:90:3b:4b:66:e5:34:68:95:02:65:bd:ce:
         5b:01:12:37:c7:f2:c8:81:0e:0d:cf:9c:bf:4f:4c:43:2d:ce:
         63:52:a9:1c:45:ec:4c:14:8d:8e:dc:9f:ef:d2:2f:76:07:f9:
         e2:a8:72:01:0e:61:1b:a8:20:ed:00:62:ac:f6:2e:a0:59:ec:
         51:ca:1e:85:b5:d3:b6:5e:35:f4:2f:1f:c3:d1:29:77:3b:13:
         12:f8:dd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:24 2026 by rpki-client