Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e35322e302f32322d3232203d3e203435303833.roa
File:                     312e34352e35322e302f32322d3232203d3e203435303833.roa (raw, json)
Hash identifier:          NaD9VyhhwCrq/EEXut5RuMxhs7vL5J0J+GDij11wrfw=
Subject key identifier:   40:44:12:C2:66:16:5C:47:C2:03:87:7E:7A:59:01:C1:9D:02:AC:90
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       7A4BC60703C3CBFEDFFC8E61E3071ECBBE9811B1
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e35322e302f32322d3232203d3e203435303833.roa
Signing time:             Tue 16 Jun 2026 03:03:28 +0000
ROA not before:           Tue 16 Jun 2026 02:58:28 +0000
ROA not after:            Tue 15 Jun 2027 03:03:28 +0000
asID:                     45083
IP address blocks:        1.45.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 07:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:4b:c6:07:03:c3:cb:fe:df:fc:8e:61:e3:07:1e:cb:be:98:11:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun 16 02:58:28 2026 GMT
            Not After : Jun 15 03:03:28 2027 GMT
        Subject: CN=404412C266165C47C203877E7A5901C19D02AC90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ce:74:8c:4e:f3:33:d4:21:11:38:1f:32:37:
                    a9:12:95:71:54:02:87:1d:0d:d1:f5:11:c9:01:fe:
                    9c:d2:cd:34:f7:d5:26:f0:40:ad:08:b8:42:bd:36:
                    8c:ba:09:1e:ad:2f:b3:ca:17:e0:9d:b4:bb:65:e1:
                    72:47:88:57:64:5f:66:35:de:1a:e4:da:6a:b9:02:
                    ca:0a:6e:5d:c0:c5:91:90:7a:28:29:f7:9b:de:22:
                    15:b6:e6:37:cf:0c:f0:83:76:6f:e7:a0:17:e7:38:
                    e0:18:6a:7a:16:59:ca:24:13:c3:38:03:dc:f2:1a:
                    c0:26:8c:5d:f2:54:d2:08:3a:a4:c9:86:36:bf:bb:
                    d1:c8:9f:8c:bf:56:52:bd:86:7b:cb:b9:e6:c2:ce:
                    ca:5a:e4:ca:a3:7e:a1:a9:8a:68:57:1c:00:d3:49:
                    3c:3b:57:c1:26:44:fc:68:28:fe:1c:8d:fa:28:82:
                    68:79:b9:00:77:11:7e:d4:aa:78:74:40:64:45:3e:
                    4b:f4:2a:f4:bb:ab:a1:d7:57:1a:f1:1e:e0:e5:df:
                    72:73:1c:53:12:57:b3:2d:7b:54:89:2e:e1:11:6b:
                    0d:a9:10:66:ce:50:a0:39:f8:de:bb:93:de:32:84:
                    d7:46:3a:2a:db:b9:3a:7f:84:f5:09:b0:28:5e:e7:
                    15:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:44:12:C2:66:16:5C:47:C2:03:87:7E:7A:59:01:C1:9D:02:AC:90
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e35322e302f32322d3232203d3e203435303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.45.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:0a:f5:91:a7:d7:d0:a1:3d:bb:ce:6c:c5:5c:62:e0:a7:49:
         2c:42:21:d8:21:c9:fd:26:65:58:75:e8:dd:78:e0:c6:c2:a2:
         49:de:ab:26:86:c4:60:7e:d8:8a:85:15:00:6d:92:d8:8b:2a:
         71:32:1f:fa:57:5f:28:af:57:62:88:b3:a1:f3:ee:73:a0:3b:
         ae:37:2c:97:d5:52:31:3e:74:17:bc:35:46:17:9e:e4:2f:09:
         0b:fb:52:d0:f8:d2:fa:a5:e9:ce:0d:7c:1d:1d:11:60:69:e5:
         c1:9a:03:c0:5b:ce:c9:cd:3a:70:36:e1:d5:64:f3:28:15:a6:
         d9:43:16:b9:aa:68:50:af:19:46:83:8f:36:44:75:5c:25:1a:
         4e:37:8f:5d:1f:b1:66:7d:2d:cd:b1:1a:88:49:c2:9c:47:d7:
         d3:0f:cc:c6:6c:ff:c0:bc:1d:3d:dc:cd:df:82:5f:1c:47:c4:
         af:50:9c:7a:be:db:0c:0f:4a:a4:b6:da:a3:6e:6a:a2:3a:63:
         6c:0e:c2:06:33:c6:8c:a2:83:80:7b:9e:17:d0:ec:0d:d4:cf:
         0d:c5:a6:89:25:b2:7f:16:3f:81:2c:43:a5:dd:7d:4a:64:72:
         80:2e:3e:9a:fe:68:9c:99:25:19:53:c2:74:ec:42:20:f5:c1:
         c0:22:b0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:02 2026 by rpki-client