Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e34342e302f32322d3232203d3e203435303833.roa
File:                     312e34352e34342e302f32322d3232203d3e203435303833.roa (raw, json)
Hash identifier:          ucKDUhaehCWWw5azl7RwIrXuZ7FwbQ+4cD+czsCzBv0=
Subject key identifier:   35:CB:FF:7A:FD:CD:4F:EE:A5:A8:2B:8B:0F:17:B4:71:07:75:CB:7A
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       4AF905AD5BFB6BA0CA29FD853262EA184ED6DB1E
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e34342e302f32322d3232203d3e203435303833.roa
Signing time:             Tue 16 Jun 2026 02:59:08 +0000
ROA not before:           Tue 16 Jun 2026 02:54:08 +0000
ROA not after:            Tue 15 Jun 2027 02:59:08 +0000
asID:                     45083
IP address blocks:        1.45.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 07:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f9:05:ad:5b:fb:6b:a0:ca:29:fd:85:32:62:ea:18:4e:d6:db:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun 16 02:54:08 2026 GMT
            Not After : Jun 15 02:59:08 2027 GMT
        Subject: CN=35CBFF7AFDCD4FEEA5A82B8B0F17B4710775CB7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:32:c1:ac:a0:45:e9:be:95:0e:46:da:73:dc:
                    34:70:38:00:0e:d6:96:c6:65:78:1a:9c:24:d9:a1:
                    76:66:a5:3b:9d:54:b1:18:2a:f8:39:b4:cc:27:9a:
                    7e:d5:62:b6:9a:d4:96:56:86:46:f0:cb:5c:4a:10:
                    6f:eb:b3:42:38:9a:8d:04:a3:2e:fe:ec:01:ef:02:
                    7c:33:4f:e2:a6:37:5f:91:cf:77:df:78:45:80:6f:
                    e6:1e:5b:60:47:9c:40:b6:4e:78:c5:17:f3:e8:64:
                    e2:5d:97:dd:a3:ad:04:4b:bd:30:72:c9:4c:f4:ef:
                    2f:4e:2f:fd:52:b0:f0:b6:c8:7c:46:b7:53:c9:4a:
                    65:70:ae:34:17:f9:b0:08:19:a7:0e:e5:4d:df:6c:
                    21:e3:a2:ae:f4:22:52:76:f4:8b:43:b4:50:9d:6a:
                    58:c9:3a:d5:1a:f3:ad:f5:08:f5:16:46:4e:91:aa:
                    21:71:15:df:6d:8a:66:3d:44:df:60:a9:ba:c3:97:
                    29:c4:94:bb:ba:1a:2d:cc:f5:14:c7:94:9f:af:f6:
                    61:30:5b:02:31:bf:8b:af:65:80:c7:23:78:a6:5b:
                    12:a7:af:d6:bd:a9:e4:d6:72:69:9d:f6:3e:13:01:
                    0a:67:f2:76:0b:92:17:b1:75:83:e2:7c:1b:72:49:
                    38:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:CB:FF:7A:FD:CD:4F:EE:A5:A8:2B:8B:0F:17:B4:71:07:75:CB:7A
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e34342e302f32322d3232203d3e203435303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.45.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:49:5e:0f:5b:82:2b:98:e8:c7:db:af:cf:9a:7b:c3:71:af:
         de:10:fa:42:b2:15:98:ab:ad:0d:5e:e9:ce:f4:c2:e0:ce:48:
         ef:ea:2a:b5:62:50:fb:fc:9e:b4:2b:d5:33:fa:18:17:b0:4c:
         e1:ad:d6:98:29:83:16:20:49:d2:69:92:13:3d:14:77:c6:1f:
         9e:fe:e0:76:04:71:92:5d:23:3a:17:70:65:06:c0:3e:0b:e3:
         f1:f3:62:e7:e0:56:1f:f9:db:4a:f6:a6:8b:80:e0:3f:ad:c9:
         06:fd:bf:c9:3f:97:3c:28:d4:08:10:ae:ac:f1:2e:2b:34:f5:
         d3:08:09:4c:4b:e4:12:7a:da:7e:31:ab:bd:68:a6:00:95:47:
         c5:be:7f:3a:77:53:63:df:b1:8b:1d:9c:f4:5b:43:25:bb:26:
         de:fb:89:37:9f:1e:c8:12:9f:01:e7:d2:0d:de:52:0d:41:a3:
         29:21:ea:8d:f1:08:40:69:3c:80:f7:d7:31:e1:62:2a:a7:93:
         b4:fd:46:d6:37:56:8d:4d:11:eb:c5:c7:66:57:9c:30:68:ca:
         af:b6:e8:e7:f9:ca:4a:83:9a:62:15:13:ed:0a:27:34:15:50:
         71:f0:1c:ef:cc:81:08:ce:58:41:14:59:0e:13:cf:27:25:98:
         04:e8:a6:75
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUSvkFrVv7a6DKKf2FMmLqGE7W2x4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5
RjkzRjZGODAeFw0yNjA2MTYwMjU0MDhaFw0yNzA2MTUwMjU5MDhaMDMxMTAvBgNV
BAMTKDM1Q0JGRjdBRkRDRDRGRUVBNUE4MkI4QjBGMTdCNDcxMDc3NUNCN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTMsGsoEXpvpUORtpz3DRwOAAO
1pbGZXganCTZoXZmpTudVLEYKvg5tMwnmn7VYraa1JZWhkbwy1xKEG/rs0I4mo0E
oy7+7AHvAnwzT+KmN1+Rz3ffeEWAb+YeW2BHnEC2TnjFF/PoZOJdl92jrQRLvTBy
yUz07y9OL/1SsPC2yHxGt1PJSmVwrjQX+bAIGacO5U3fbCHjoq70IlJ29ItDtFCd
aljJOtUa8631CPUWRk6RqiFxFd9timY9RN9gqbrDlynElLu6Gi3M9RTHlJ+v9mEw
WwIxv4uvZYDHI3imWxKnr9a9qeTWcmmd9j4TAQpn8nYLkhexdYPifBtySTjLAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUNcv/ev3NT+6lqCuLDxe0cQd1y3owHwYDVR0j
BBgwFoAUpgmQqcpYkWQFBDK9BUc9z5+T9vgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NzU3NTQzNzUzMTI4MzQ3Ny8wL0E2MDk5MEE5Q0E1ODkxNjQwNTA0MzJCRDA1NDcz
RENGOUY5M0Y2RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5RjkzRjZGOC5jZXIw
gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA3NTc1NDM3NTMxMjgzNDc3LzAvMzEyZTM0MzUyZTM0
MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM1MzAzODMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
AS0sMA0GCSqGSIb3DQEBCwUAA4IBAQCbSV4PW4IrmOjH26/PmnvDca/eEPpCshWY
q60NXunO9MLgzkjv6iq1YlD7/J60K9Uz+hgXsEzhrdaYKYMWIEnSaZITPRR3xh+e
/uB2BHGSXSM6F3BlBsA+C+Px82Ln4FYf+dtK9qaLgOA/rckG/b/JP5c8KNQIEK6s
8S4rNPXTCAlMS+QSetp+Mau9aKYAlUfFvn86d1Nj37GLHZz0W0Mluybe+4k3nx7I
Ep8B59IN3lINQaMpIeqN8QhAaTyA99cx4WIqp5O0/UbWN1aNTRHrxcdmV5wwaMqv
tujn+cpKg5piFRPtCic0FVBx8BzvzIEIzlhBFFkOE88nJZgE6KZ1
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:06 2026 by rpki-client