Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e34302e302f32322d3232203d3e203435303833.roa
File:                     312e34352e34302e302f32322d3232203d3e203435303833.roa (raw, json)
Hash identifier:          cJvlpPfsH5rQbnJjvKTiAWLPFP/vo0oTslVpHkF8xeU=
Subject key identifier:   31:37:D0:AF:5A:53:FB:D9:C0:1A:F0:35:79:2A:5C:68:4F:EF:86:3E
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       058DD07A4CCD9D9956C17783A894C70E9D0922E4
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e34302e302f32322d3232203d3e203435303833.roa
Signing time:             Tue 16 Jun 2026 03:05:12 +0000
ROA not before:           Tue 16 Jun 2026 03:00:12 +0000
ROA not after:            Tue 15 Jun 2027 03:05:12 +0000
asID:                     45083
IP address blocks:        1.45.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 07:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:8d:d0:7a:4c:cd:9d:99:56:c1:77:83:a8:94:c7:0e:9d:09:22:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun 16 03:00:12 2026 GMT
            Not After : Jun 15 03:05:12 2027 GMT
        Subject: CN=3137D0AF5A53FBD9C01AF035792A5C684FEF863E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3f:56:07:ed:32:00:ce:eb:fa:33:72:ff:af:
                    1f:aa:46:5d:21:8c:ab:eb:dc:b0:10:b9:a1:ad:35:
                    61:2a:1f:0e:03:2d:e7:05:26:6f:d7:68:e3:62:36:
                    49:4c:00:15:2c:87:b2:24:97:39:f6:e9:55:46:d4:
                    0e:ed:a8:ba:63:7c:00:34:d0:0d:bb:73:d6:4f:53:
                    25:f9:72:1d:ea:56:c4:48:d0:ce:16:25:e8:e4:79:
                    41:a1:36:c4:e4:61:c6:c7:64:f5:79:1a:8b:2f:f6:
                    1c:4c:fe:8f:7b:64:6d:0a:75:4d:94:54:87:d8:76:
                    c4:97:05:a4:fb:12:99:a2:99:d9:3a:66:9e:fe:91:
                    c8:cf:ad:f2:4c:4d:5c:bd:fa:01:c6:40:a9:d8:3a:
                    d4:b4:e4:52:e8:d2:3b:c7:04:58:d1:f1:42:40:20:
                    e6:38:13:a8:60:a6:0a:ee:6d:46:7c:a3:a9:9f:ec:
                    2b:61:f7:de:83:8a:df:13:42:85:77:da:bc:8a:65:
                    08:d7:7a:c1:4e:3b:7a:81:60:dd:e3:81:d6:fa:07:
                    2a:51:b1:1d:44:fd:8c:bd:2e:92:68:04:0b:41:e4:
                    5e:1d:76:1d:7d:e3:0c:3b:c9:20:cc:68:55:cc:02:
                    a4:86:89:e5:69:f8:70:67:01:9a:de:17:6a:c5:62:
                    0e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:37:D0:AF:5A:53:FB:D9:C0:1A:F0:35:79:2A:5C:68:4F:EF:86:3E
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e34302e302f32322d3232203d3e203435303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.45.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:ec:94:3f:32:c6:f3:84:84:93:fb:29:0f:13:77:54:20:6f:
         d2:3c:7d:b7:e4:e9:91:55:71:ea:d1:c5:27:e8:06:0a:7c:2f:
         ed:51:b0:65:cb:0b:ab:5c:f7:6a:64:6f:5d:d2:ed:a7:e8:c2:
         61:fa:f6:96:30:c7:01:2c:a5:6e:2f:90:11:eb:0a:37:3d:11:
         71:4c:5f:96:ae:3d:fb:34:dc:91:27:be:df:b3:63:8f:33:d1:
         54:75:ac:d5:f4:37:9f:35:e6:36:81:30:4c:75:79:69:92:16:
         4f:ca:54:82:dd:3e:be:62:1b:8d:24:1b:25:28:f5:13:c6:59:
         e0:72:57:38:a1:4f:53:8e:ba:9c:b9:1f:0e:92:9a:db:68:ed:
         35:6f:c8:d7:d0:d9:ed:44:3f:3d:ef:1b:0e:b9:26:4a:23:d3:
         13:07:bd:0f:44:d2:62:69:dc:b7:36:c6:d2:d0:2c:bc:de:e3:
         89:a6:cc:5d:62:c5:1e:61:64:c1:7f:ae:38:e3:5f:76:e0:1c:
         46:b5:4d:aa:22:f2:2a:99:64:cf:b4:ab:e2:5d:89:d7:78:b2:
         21:83:40:dd:20:8b:ec:0a:e9:27:62:79:3c:5c:bb:fd:e6:b9:
         02:c6:28:73:24:0a:5a:f9:06:1c:5f:05:45:52:ae:56:20:55:
         3e:da:07:18
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUBY3QekzNnZlWwXeDqJTHDp0JIuQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5
RjkzRjZGODAeFw0yNjA2MTYwMzAwMTJaFw0yNzA2MTUwMzA1MTJaMDMxMTAvBgNV
BAMTKDMxMzdEMEFGNUE1M0ZCRDlDMDFBRjAzNTc5MkE1QzY4NEZFRjg2M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqP1YH7TIAzuv6M3L/rx+qRl0h
jKvr3LAQuaGtNWEqHw4DLecFJm/XaONiNklMABUsh7Iklzn26VVG1A7tqLpjfAA0
0A27c9ZPUyX5ch3qVsRI0M4WJejkeUGhNsTkYcbHZPV5Gosv9hxM/o97ZG0KdU2U
VIfYdsSXBaT7Epmimdk6Zp7+kcjPrfJMTVy9+gHGQKnYOtS05FLo0jvHBFjR8UJA
IOY4E6hgpgrubUZ8o6mf7Cth996Dit8TQoV32ryKZQjXesFOO3qBYN3jgdb6BypR
sR1E/Yy9LpJoBAtB5F4ddh194ww7ySDMaFXMAqSGieVp+HBnAZreF2rFYg7PAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUMTfQr1pT+9nAGvA1eSpcaE/vhj4wHwYDVR0j
BBgwFoAUpgmQqcpYkWQFBDK9BUc9z5+T9vgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NzU3NTQzNzUzMTI4MzQ3Ny8wL0E2MDk5MEE5Q0E1ODkxNjQwNTA0MzJCRDA1NDcz
RENGOUY5M0Y2RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5RjkzRjZGOC5jZXIw
gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA3NTc1NDM3NTMxMjgzNDc3LzAvMzEyZTM0MzUyZTM0
MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM1MzAzODMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
AS0oMA0GCSqGSIb3DQEBCwUAA4IBAQCR7JQ/MsbzhIST+ykPE3dUIG/SPH235OmR
VXHq0cUn6AYKfC/tUbBlywurXPdqZG9d0u2n6MJh+vaWMMcBLKVuL5AR6wo3PRFx
TF+Wrj37NNyRJ77fs2OPM9FUdazV9DefNeY2gTBMdXlpkhZPylSC3T6+YhuNJBsl
KPUTxlngclc4oU9TjrqcuR8OkprbaO01b8jX0NntRD897xsOuSZKI9MTB70PRNJi
ady3NsbS0Cy83uOJpsxdYsUeYWTBf64441924BxGtU2qIvIqmWTPtKviXYnXeLIh
g0DdIIvsCuknYnk8XLv95rkCxihzJApa+QYcXwVFUq5WIFU+2gcY
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:06 2026 by rpki-client