Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e33362e302f32322d3232203d3e203435303833.roa
File:                     312e34352e33362e302f32322d3232203d3e203435303833.roa (raw, json)
Hash identifier:          x7jowPga4U9D4bDgrXEb5YwIX7CLyVZRWVU+8Km3Sgg=
Subject key identifier:   9A:4E:83:B3:60:83:43:BF:DF:00:7C:C2:5A:F2:BC:4C:2A:83:E5:85
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       0F706E6E59928D6DAE8F6912E18A26CAA70B4449
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e33362e302f32322d3232203d3e203435303833.roa
Signing time:             Tue 16 Jun 2026 03:09:46 +0000
ROA not before:           Tue 16 Jun 2026 03:04:46 +0000
ROA not after:            Tue 15 Jun 2027 03:09:46 +0000
asID:                     45083
IP address blocks:        1.45.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 07:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:70:6e:6e:59:92:8d:6d:ae:8f:69:12:e1:8a:26:ca:a7:0b:44:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun 16 03:04:46 2026 GMT
            Not After : Jun 15 03:09:46 2027 GMT
        Subject: CN=9A4E83B3608343BFDF007CC25AF2BC4C2A83E585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:88:cc:9c:11:27:e5:a8:a7:07:aa:c3:5f:45:
                    e9:15:38:22:f8:39:70:ef:c8:7f:19:20:c0:d5:e8:
                    2d:f6:ee:37:2e:cc:ca:5c:24:15:13:85:d1:5d:89:
                    4c:d3:36:df:1b:c5:16:d0:a9:2b:95:3e:25:5f:0b:
                    0b:99:fa:92:0d:91:db:95:49:99:11:7c:cc:ee:a5:
                    74:ca:e5:ca:fc:95:0d:9c:bc:7d:13:84:fa:15:57:
                    68:ff:86:1c:d1:a0:27:07:23:aa:1e:0d:bb:d7:73:
                    5f:5b:b2:56:6d:7e:28:b3:a2:ad:7e:42:3f:75:ce:
                    88:11:1c:e0:52:cb:5d:b2:0f:f9:ce:a7:d9:86:05:
                    7e:44:5c:99:73:5b:4d:7a:cf:63:ca:ec:e6:69:6c:
                    90:4c:ea:d4:49:85:83:29:99:05:ae:99:2a:bd:9d:
                    c3:00:a5:f6:39:81:b6:47:d3:b9:46:f9:81:bd:3b:
                    1a:11:2f:67:c1:6e:16:31:e7:90:27:ae:0f:ce:6c:
                    de:00:96:7a:f3:ba:59:08:0c:80:17:7e:d2:05:03:
                    88:70:b7:2d:8e:79:44:73:fd:10:80:e3:f0:a4:5e:
                    d3:16:ee:5a:90:00:8a:2d:05:46:23:9c:70:06:f6:
                    31:f0:c4:68:a0:5e:28:77:e1:cf:a9:c7:91:f3:36:
                    ea:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4E:83:B3:60:83:43:BF:DF:00:7C:C2:5A:F2:BC:4C:2A:83:E5:85
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e33362e302f32322d3232203d3e203435303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.45.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:e8:1f:93:77:4c:0a:1d:b5:d6:ec:33:28:f5:18:a1:dc:f0:
         d3:77:3f:fe:fb:cc:0d:43:3a:5a:72:78:20:78:f0:61:83:8d:
         7b:fb:56:dd:f0:b6:91:88:62:83:15:94:c6:45:b8:41:51:ee:
         5f:96:a6:f8:dc:f0:5c:a1:4b:ce:6a:ad:2c:04:4d:95:b6:8f:
         5e:1d:25:82:19:30:05:5d:13:33:86:c4:40:1b:34:c8:34:72:
         b9:25:37:45:56:33:6f:07:02:24:43:22:86:78:27:30:bc:0d:
         ec:74:ae:25:78:0f:2a:54:83:0f:55:13:df:82:01:83:f6:cb:
         e4:ef:bb:f7:41:a9:4d:9e:09:a5:3a:5b:4f:9d:e5:e4:ce:80:
         41:77:a9:c6:3d:0e:b9:51:dc:89:be:0f:20:4d:6d:6d:13:64:
         35:bf:d7:f8:d3:26:69:ea:0e:2f:63:2f:8a:66:e4:3d:d2:91:
         85:da:9c:29:5d:c5:5c:8b:bf:90:b4:e6:e2:ef:06:9a:be:f4:
         fb:3e:54:bd:e8:08:e0:ab:08:0c:e4:71:a4:c7:69:46:9f:e5:
         7f:0d:94:8d:65:1c:bc:84:f5:7e:e2:03:b2:03:23:3d:6c:13:
         35:dd:e5:93:c1:af:38:c4:84:52:9b:ad:1a:52:7f:2c:7c:c4:
         df:ae:6d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:06 2026 by rpki-client