Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3139362e302f32322d3232203d3e203435303833.roa
File:                     312e34352e3139362e302f32322d3232203d3e203435303833.roa (raw, json)
Hash identifier:          YFB70Jpowcym4EI5aCAg1UNnT35/tOWJNa5vX7YXx5Q=
Subject key identifier:   70:0B:94:0C:1B:1F:09:62:BD:77:34:D9:6B:B2:65:43:AD:F9:41:6B
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       22C7BFC60367D8E7E0588E87E0643CC716E12B4C
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3139362e302f32322d3232203d3e203435303833.roa
Signing time:             Tue 16 Jun 2026 03:07:40 +0000
ROA not before:           Tue 16 Jun 2026 03:02:40 +0000
ROA not after:            Tue 15 Jun 2027 03:07:40 +0000
asID:                     45083
IP address blocks:        1.45.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 07:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:c7:bf:c6:03:67:d8:e7:e0:58:8e:87:e0:64:3c:c7:16:e1:2b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun 16 03:02:40 2026 GMT
            Not After : Jun 15 03:07:40 2027 GMT
        Subject: CN=700B940C1B1F0962BD7734D96BB26543ADF9416B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4d:66:35:9f:a2:53:ae:94:f3:25:9d:38:91:
                    78:75:6f:0f:c3:05:7f:d8:0e:56:9c:1d:5b:00:d2:
                    66:ea:bc:9f:9e:31:3a:54:c1:97:41:8e:9b:a9:a6:
                    72:4f:49:3f:01:b3:cb:cf:24:7e:7c:c8:ee:58:56:
                    46:88:65:57:af:47:b1:af:37:aa:82:af:1d:c9:13:
                    10:bb:49:f1:62:2b:15:d0:1c:8c:e6:18:6d:1b:e5:
                    02:71:e2:01:26:da:66:20:6d:2e:e5:e4:f3:47:9e:
                    e6:95:a1:9a:e4:4b:e6:c6:30:a2:aa:45:83:27:be:
                    e7:74:2b:2f:b1:da:77:be:7c:96:85:7d:be:c9:61:
                    e3:d1:e4:3d:e5:c9:7b:36:a8:89:3b:2d:96:53:97:
                    cd:95:f6:f8:3b:27:54:f1:35:24:17:74:8a:19:3c:
                    54:fa:23:2f:ce:ce:b1:b4:90:89:fe:f4:68:35:5d:
                    76:43:6b:b1:5d:05:6d:69:c6:5c:b9:fd:3e:18:6b:
                    87:d4:b6:0e:40:fd:43:25:1f:10:28:a7:46:3d:20:
                    f5:4b:fe:66:cb:a1:cc:f6:52:b0:51:44:fb:5c:d6:
                    55:0e:00:b3:f7:1e:1d:95:56:89:fe:d2:8c:b9:e6:
                    32:37:f5:c4:80:31:b0:1a:75:b6:87:46:8a:0f:34:
                    7f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0B:94:0C:1B:1F:09:62:BD:77:34:D9:6B:B2:65:43:AD:F9:41:6B
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3139362e302f32322d3232203d3e203435303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.45.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:03:91:7d:56:48:8a:e7:b6:ea:7a:80:5c:41:ac:bb:79:8d:
         a1:76:0d:db:3f:50:00:cd:8a:10:10:e9:83:d7:72:05:20:be:
         cb:85:3a:39:a0:61:c1:41:53:32:63:70:51:2e:b9:f3:5b:dd:
         12:08:95:05:1f:0d:90:cc:81:c2:d9:d0:2b:47:9d:ae:66:ae:
         4a:4c:9b:b9:2c:86:8d:bf:f9:61:88:c3:e1:92:c9:e8:52:b2:
         87:4c:5d:1b:46:ec:8b:66:0e:82:8b:ef:70:14:bd:1a:57:9f:
         bd:c5:ca:11:58:b2:4b:db:ae:15:e8:c6:dc:ae:3b:58:bc:84:
         76:2e:55:c4:b7:ec:b3:e9:8c:6b:2b:93:f6:96:4d:6a:c2:c4:
         dd:ff:03:a4:8f:ab:d3:6e:54:2a:32:d8:3b:76:f5:37:65:a4:
         3b:55:ba:45:0a:a5:85:82:c6:94:c9:12:13:f1:9d:99:f1:19:
         b8:76:09:95:06:0a:b0:22:80:55:bc:b3:65:31:4b:f0:a6:1b:
         29:f5:2d:d4:1b:f4:46:ee:07:f9:50:12:e5:3e:90:f7:cb:b9:
         91:8e:bb:33:53:c7:12:ef:ee:9a:d0:87:61:e2:10:c5:31:66:
         ad:be:91:65:9e:20:c1:a3:87:c2:80:7f:06:53:a7:79:a1:f3:
         4b:5e:93:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:25 2026 by rpki-client