Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e32342e302f32322d3232203d3e203435303833.roa
File:                     312e34352e32342e302f32322d3232203d3e203435303833.roa (raw, json)
Hash identifier:          HU98oUm6LO/17qpkGY52bV4DOVrigZFAh9hYClRPHTQ=
Subject key identifier:   8B:68:A3:85:49:81:CF:ED:5A:9D:25:D0:95:A1:FF:38:3F:D5:77:16
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       73E4EBF675067C93AEE23DC07048CF0C3EC73C80
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e32342e302f32322d3232203d3e203435303833.roa
Signing time:             Tue 16 Jun 2026 03:10:48 +0000
ROA not before:           Tue 16 Jun 2026 03:05:48 +0000
ROA not after:            Tue 15 Jun 2027 03:10:48 +0000
asID:                     45083
IP address blocks:        1.45.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 07:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e4:eb:f6:75:06:7c:93:ae:e2:3d:c0:70:48:cf:0c:3e:c7:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun 16 03:05:48 2026 GMT
            Not After : Jun 15 03:10:48 2027 GMT
        Subject: CN=8B68A3854981CFED5A9D25D095A1FF383FD57716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e9:5a:5d:df:f0:fa:b2:bb:97:7e:bb:c0:ff:
                    53:34:d1:06:32:01:13:c1:5d:d0:d4:aa:c2:f9:f9:
                    9f:2b:88:82:98:b0:50:48:96:b1:60:d8:ea:d5:b4:
                    b9:ee:50:21:37:16:02:d3:44:ab:85:49:7d:90:c4:
                    cd:6c:66:62:58:8a:64:3a:b0:7f:9a:f8:91:c3:6c:
                    dc:41:05:da:67:7f:1c:f5:e8:fc:ad:a1:1a:27:bd:
                    6a:be:55:81:9d:5c:1b:c5:25:71:59:54:4f:81:ef:
                    55:72:88:28:72:2a:2b:ab:17:d7:b5:99:86:fc:32:
                    8f:a9:84:6b:6b:bd:61:8c:f8:66:35:03:02:23:0c:
                    09:09:2f:58:0c:77:42:55:20:a5:13:0d:c9:0e:90:
                    ea:a7:e7:c7:d9:da:02:25:23:0b:b9:ab:b3:74:72:
                    ee:09:a6:be:94:8d:43:22:37:ce:8d:1f:5f:f8:3a:
                    01:98:51:64:6b:75:8a:ab:ca:8f:8f:48:35:a1:5a:
                    d8:22:fd:d6:ae:16:5a:10:b9:9c:44:ab:33:f5:2d:
                    ec:2d:33:79:16:90:8b:71:8b:8d:6a:04:7a:7d:c6:
                    59:86:93:4d:f3:75:ba:ab:21:45:85:f5:ff:36:17:
                    1c:ff:d4:b6:fe:56:54:70:b4:5e:b1:10:45:7a:53:
                    bd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:68:A3:85:49:81:CF:ED:5A:9D:25:D0:95:A1:FF:38:3F:D5:77:16
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e32342e302f32322d3232203d3e203435303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.45.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:32:2b:1c:75:de:7c:96:25:88:cd:be:cd:3f:19:ee:61:e8:
         b6:6e:0a:29:4d:bc:37:fc:70:8a:85:c4:a8:07:1a:20:9d:a2:
         50:de:d4:e3:b0:dd:26:07:a2:8e:cd:2a:b0:48:fe:fe:38:32:
         e9:19:fa:c3:78:34:cd:66:85:32:37:b9:fd:39:7d:c0:f9:6e:
         b9:dc:66:b0:eb:25:45:0d:c2:cc:d7:ba:11:0a:22:4c:b7:7d:
         d4:38:f8:5b:00:22:7a:5a:71:a4:84:ed:75:3d:16:f7:40:ca:
         40:89:b2:3c:38:81:30:6f:6c:1f:93:6a:50:2a:76:26:2b:89:
         02:30:21:3c:b7:49:a3:1b:72:f2:51:77:f8:d2:b8:4f:b7:50:
         2e:1f:1e:9a:22:28:3f:bf:28:f1:d1:9b:52:e1:4b:f2:47:64:
         ba:c7:0b:6f:40:bf:08:7c:c7:4f:bb:c4:7e:28:f8:3e:54:59:
         61:f0:c1:f0:e5:83:06:bd:d3:aa:18:06:6f:6b:0a:2e:9f:d0:
         94:b2:29:59:0c:99:ca:a8:24:2d:2c:d7:a2:f8:3c:83:8a:6e:
         1d:59:f7:03:20:2a:8e:17:c7:ed:c4:5c:cd:2e:ec:ec:35:d1:
         c7:7d:45:ae:c7:bb:f1:68:e5:60:52:22:b8:f1:f2:8c:dc:7f:
         4d:b7:d1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:54:32 2026 by rpki-client