Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e33322e302f32322d3232203d3e203435303833.roa
File:                     312e34352e33322e302f32322d3232203d3e203435303833.roa (raw, json)
Hash identifier:          0rE1fQoGNX7P1La0h/k7T55efssELYzHZ/X5Inn2nkU=
Subject key identifier:   27:66:B2:78:77:C6:E7:E3:FB:49:C1:44:70:2D:7F:40:D9:53:7F:D9
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       3096AF9DE287E83CE19127A63B2DFC0C2253F22D
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e33322e302f32322d3232203d3e203435303833.roa
Signing time:             Tue 16 Jun 2026 03:02:35 +0000
ROA not before:           Tue 16 Jun 2026 02:57:35 +0000
ROA not after:            Tue 15 Jun 2027 03:02:35 +0000
asID:                     45083
IP address blocks:        1.45.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 07:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:96:af:9d:e2:87:e8:3c:e1:91:27:a6:3b:2d:fc:0c:22:53:f2:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun 16 02:57:35 2026 GMT
            Not After : Jun 15 03:02:35 2027 GMT
        Subject: CN=2766B27877C6E7E3FB49C144702D7F40D9537FD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d8:e7:2c:52:fa:1a:8a:4b:35:ce:7a:bd:0a:
                    69:66:fd:a9:a6:1b:3a:34:34:06:9c:35:e2:a7:36:
                    4a:70:3e:49:05:35:cd:a2:b0:37:cf:e1:db:e5:58:
                    01:ef:ab:4a:06:d6:8f:68:ae:cf:48:41:e3:99:62:
                    ac:4d:b3:28:1a:28:9e:b2:f2:6f:7f:29:ba:64:c5:
                    06:8f:c1:ce:3c:67:8f:ef:92:f5:7c:2e:27:cd:9d:
                    e6:70:0d:25:e2:3e:ba:db:5a:f9:07:17:99:c4:e4:
                    ee:1c:02:08:3f:0c:b9:d0:c3:a2:d9:06:d4:d2:52:
                    20:4b:2d:8d:22:66:7b:f5:b2:bc:58:ff:24:ef:3b:
                    03:7f:39:2f:a1:6a:aa:ae:a9:aa:7b:da:16:da:bb:
                    fd:c2:77:46:79:79:af:7f:a5:72:7f:8b:7a:ae:dc:
                    63:40:f0:0d:82:80:05:27:c0:16:ce:ef:2f:e7:1c:
                    67:b0:3b:54:41:c8:e6:e0:df:27:ba:af:1d:ae:a5:
                    cd:72:5b:06:9d:b0:ec:90:ef:a2:50:12:11:1c:68:
                    cb:19:98:e4:06:0f:20:c9:93:11:b7:c7:da:ea:4d:
                    fe:88:42:27:4f:4b:b4:6e:c2:fa:9a:10:90:c0:c6:
                    c5:1b:9e:4e:bd:d6:fc:94:1a:19:e7:58:0b:13:b9:
                    4d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:66:B2:78:77:C6:E7:E3:FB:49:C1:44:70:2D:7F:40:D9:53:7F:D9
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e33322e302f32322d3232203d3e203435303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.45.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:21:c4:c6:38:79:d9:67:b6:a1:95:6a:12:82:00:92:7e:39:
         76:84:18:3d:85:a0:74:61:15:db:42:30:b4:0e:99:7a:95:aa:
         cd:6b:0d:0e:d7:11:32:d0:35:86:82:eb:69:65:c9:91:42:c4:
         3b:1b:57:e5:2b:51:e8:94:ad:07:f2:84:1c:b4:4c:d7:c5:e7:
         2a:d1:3a:16:63:03:e4:24:f1:be:23:59:5e:04:58:6e:1b:bb:
         6b:6f:36:8e:8f:d6:83:d4:7c:32:fc:ae:7b:8c:bf:28:c9:af:
         fe:7c:d5:8d:52:2b:7e:72:6f:8f:bd:10:88:84:e0:82:64:fd:
         46:06:f7:ec:04:11:28:1d:7f:bc:6f:45:9a:59:76:d2:34:2a:
         6a:d1:da:a6:f0:01:17:0a:16:03:46:b9:a3:49:65:b8:4d:9d:
         15:93:cf:c6:71:37:b8:cb:75:41:af:35:7a:0a:f7:e0:29:50:
         c7:d0:09:4b:9c:b8:07:b9:1e:bb:cb:31:b1:1b:33:8f:eb:09:
         17:ce:15:d7:e5:db:75:ff:c9:7b:23:05:5f:be:e1:a5:ac:7f:
         01:22:50:97:05:7e:16:22:58:6c:b1:44:f1:2b:1a:d5:fd:52:
         07:13:42:ef:b8:7e:a3:97:8e:87:79:01:a0:7c:1d:0d:d2:b7:
         c9:fc:8f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:02 2026 by rpki-client