Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3230342e302f32322d3232203d3e203435303833.roa
File:                     312e34352e3230342e302f32322d3232203d3e203435303833.roa (raw, json)
Hash identifier:          D2xL6LsxY3K40ec2WINTaoLzQiGL7+LgSURFstnxlM8=
Subject key identifier:   9D:54:3F:68:52:F8:01:E2:79:2F:42:21:09:C9:4A:DB:0D:18:B1:DD
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       71DCFBFFEE7754830D11D797E9E3D75C3C5F5099
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3230342e302f32322d3232203d3e203435303833.roa
Signing time:             Tue 16 Jun 2026 03:02:18 +0000
ROA not before:           Tue 16 Jun 2026 02:57:18 +0000
ROA not after:            Tue 15 Jun 2027 03:02:18 +0000
asID:                     45083
IP address blocks:        1.45.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 07:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:dc:fb:ff:ee:77:54:83:0d:11:d7:97:e9:e3:d7:5c:3c:5f:50:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun 16 02:57:18 2026 GMT
            Not After : Jun 15 03:02:18 2027 GMT
        Subject: CN=9D543F6852F801E2792F422109C94ADB0D18B1DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:13:17:40:55:3d:65:4a:40:3c:e9:14:7a:70:
                    a5:2a:8f:38:98:a6:8b:4a:83:f8:c5:70:2a:d7:1b:
                    24:f9:ee:49:14:5d:c6:fa:f6:ea:63:c7:fe:75:19:
                    16:c8:02:45:7a:39:f9:f8:7f:31:fa:d8:89:25:34:
                    e0:52:ac:f1:30:37:82:7c:85:49:c5:d9:dc:6d:a0:
                    cc:1f:23:6f:f9:ac:b4:4f:dd:ce:b1:15:8a:d0:f3:
                    12:2a:d5:f2:e1:b1:2b:e4:13:ee:40:99:21:4a:33:
                    b7:68:78:d8:cf:ac:0f:e9:e3:f9:16:e2:cd:8b:02:
                    e3:0f:80:f6:02:85:59:51:7f:89:b2:99:69:99:d9:
                    df:d6:b5:79:2a:f2:bd:61:4a:51:53:7f:b1:12:54:
                    de:d3:a6:36:97:ec:e4:2c:46:dd:aa:f4:d2:b8:38:
                    2a:2e:0f:9f:2c:9a:34:3f:28:7a:48:a3:01:a6:2e:
                    53:48:f6:e3:a3:8b:2f:10:bc:af:2a:4b:f7:e4:75:
                    8a:5b:62:12:ca:ac:6a:d9:6f:01:b3:66:64:62:02:
                    97:3e:08:85:66:b8:88:7b:0e:43:41:c3:be:77:81:
                    7f:12:e7:fe:9a:ed:61:48:d5:31:8e:22:35:2d:64:
                    a4:8b:e6:e2:14:70:5e:fe:2d:bf:51:1c:5a:46:31:
                    72:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:54:3F:68:52:F8:01:E2:79:2F:42:21:09:C9:4A:DB:0D:18:B1:DD
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3230342e302f32322d3232203d3e203435303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.45.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:b5:97:e6:ee:7c:5f:87:d2:40:c1:02:e3:23:46:83:70:a7:
         0a:71:63:f9:cc:cc:9c:0c:d0:af:a0:ff:5e:13:1a:6b:84:5e:
         13:ee:a3:2c:c1:96:ca:69:08:80:8f:2c:c5:a7:ca:e3:e1:60:
         95:d1:18:12:ca:81:32:a4:d8:c0:1a:d0:cc:d8:19:8d:64:48:
         70:22:6d:71:f2:0c:bc:e1:a1:98:10:42:bd:07:12:2e:09:24:
         98:e4:02:98:fb:c7:25:65:d4:0e:a0:44:14:8b:d6:3a:86:50:
         f8:b7:99:9b:81:f3:fc:c8:9a:9f:78:c6:6e:d7:e4:f0:94:12:
         49:0b:6c:b8:35:71:41:c8:38:83:40:05:40:ea:09:0d:61:e7:
         2e:11:9f:ab:99:c8:d0:65:ec:96:bb:f1:cc:ab:db:26:85:1c:
         e7:30:28:73:93:93:0e:8c:dc:21:41:65:da:40:e2:57:bb:bf:
         22:fe:ff:bf:8a:82:f5:ca:c2:05:0c:72:7e:31:66:70:1e:be:
         5e:18:1b:6e:21:f2:6d:b1:16:4e:56:32:9c:67:6e:ed:91:b7:
         e4:8c:3b:fc:bd:d4:ed:7e:32:8b:81:89:e1:c1:e0:40:6c:0f:
         8c:65:d7:fd:b9:ab:45:90:66:4c:20:d4:37:3f:47:5f:34:9c:
         ec:91:0e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:04 2026 by rpki-client