Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e36302e302f32322d3232203d3e203435303833.roa
File:                     312e34352e36302e302f32322d3232203d3e203435303833.roa (raw, json)
Hash identifier:          vb809P9YYbq2G8CvzBX8WNo75vYmJb8WSGRiVPKJLyo=
Subject key identifier:   0A:71:4F:5F:62:D5:31:42:D4:79:B3:A8:19:9C:30:00:46:90:71:C0
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       3789B322DCB50C823E28BEE0E54C59D755D0B4B8
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e36302e302f32322d3232203d3e203435303833.roa
Signing time:             Tue 16 Jun 2026 03:03:46 +0000
ROA not before:           Tue 16 Jun 2026 02:58:46 +0000
ROA not after:            Tue 15 Jun 2027 03:03:46 +0000
asID:                     45083
IP address blocks:        1.45.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 07:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:89:b3:22:dc:b5:0c:82:3e:28:be:e0:e5:4c:59:d7:55:d0:b4:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun 16 02:58:46 2026 GMT
            Not After : Jun 15 03:03:46 2027 GMT
        Subject: CN=0A714F5F62D53142D479B3A8199C3000469071C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7b:99:3e:e2:d7:54:76:2d:be:ab:ab:bb:1c:
                    70:61:f4:55:d1:54:99:8f:4a:6e:e8:ab:57:fa:92:
                    43:42:d9:4d:1c:d8:f4:d2:7d:e1:79:b7:1f:b7:ff:
                    37:f9:bb:2e:16:74:84:9c:54:7d:58:b9:e5:8b:e5:
                    3a:04:33:87:ab:74:0b:f2:8f:09:30:32:ed:0a:3a:
                    ed:00:4d:7d:b8:a6:7f:aa:57:ed:08:2e:3a:99:48:
                    d1:63:d6:85:98:0e:c1:2a:60:cb:ec:7e:81:99:a0:
                    63:c6:10:f2:95:71:ed:69:9b:62:24:67:a7:88:5a:
                    03:98:fd:a5:c0:7c:0b:c2:0f:d6:12:99:d9:bf:0b:
                    50:9f:4f:ca:1d:2f:4b:d7:d8:06:8a:34:c9:94:0c:
                    58:ae:48:0b:7c:e9:93:95:6a:cb:62:89:04:bd:80:
                    ce:3e:74:77:af:d4:1c:82:9c:56:50:57:b1:02:3e:
                    ae:46:41:ab:29:1c:2e:5e:b3:57:2a:a7:8d:a8:10:
                    61:e0:8f:3e:6c:01:49:68:22:4a:71:a4:7b:70:34:
                    c0:5d:9e:00:47:b1:c2:f5:52:cd:1c:6d:41:23:ba:
                    d3:63:88:ab:1c:6a:33:99:b6:d7:a1:38:06:d4:2e:
                    e8:e4:04:57:33:46:ad:a8:58:76:75:ab:cb:ad:92:
                    77:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:71:4F:5F:62:D5:31:42:D4:79:B3:A8:19:9C:30:00:46:90:71:C0
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e36302e302f32322d3232203d3e203435303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.45.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:ca:e0:c5:78:42:e7:e1:dd:2d:ac:d3:b5:55:37:87:64:bb:
         50:07:b7:fc:55:79:32:da:85:b2:24:42:43:3b:71:ee:d7:b8:
         f8:d2:b7:3e:f4:8f:94:5e:a2:4a:14:75:c9:60:88:ad:a1:78:
         ca:86:54:ef:6b:0f:b3:35:4e:10:21:93:6e:bf:cf:29:7d:19:
         e4:5d:d1:fc:8a:83:12:03:20:45:ce:1f:31:11:dc:5d:ed:77:
         ca:0f:ce:55:ad:c0:6f:d7:d1:71:66:b8:37:bd:e8:54:e6:06:
         9e:84:33:91:27:19:f5:90:5b:bf:19:61:ad:12:69:d7:d4:6e:
         db:58:58:fe:01:00:9e:64:cb:e5:81:e2:4a:72:67:1d:3c:e6:
         73:00:0e:58:4e:be:dc:3b:41:78:3c:a7:69:af:f7:25:e1:12:
         56:2a:ad:b5:0d:6e:3b:46:cb:bd:d8:20:77:b5:da:3c:09:49:
         d9:62:8f:00:fc:d8:79:c0:1c:42:54:e4:10:7d:db:73:4b:64:
         c0:dd:76:a3:63:c8:21:60:61:37:a3:cb:85:1e:bf:0a:7d:39:
         45:51:41:6f:4b:6f:97:fb:e9:26:e7:d2:56:42:83:4a:91:4c:
         75:8f:28:9f:5e:a0:09:46:99:70:3b:83:1b:1a:67:66:ce:18:
         92:4b:c2:f1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUN4mzIty1DII+KL7g5UxZ11XQtLgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5
RjkzRjZGODAeFw0yNjA2MTYwMjU4NDZaFw0yNzA2MTUwMzAzNDZaMDMxMTAvBgNV
BAMTKDBBNzE0RjVGNjJENTMxNDJENDc5QjNBODE5OUMzMDAwNDY5MDcxQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6e5k+4tdUdi2+q6u7HHBh9FXR
VJmPSm7oq1f6kkNC2U0c2PTSfeF5tx+3/zf5uy4WdIScVH1YueWL5ToEM4erdAvy
jwkwMu0KOu0ATX24pn+qV+0ILjqZSNFj1oWYDsEqYMvsfoGZoGPGEPKVce1pm2Ik
Z6eIWgOY/aXAfAvCD9YSmdm/C1CfT8odL0vX2AaKNMmUDFiuSAt86ZOVastiiQS9
gM4+dHev1ByCnFZQV7ECPq5GQaspHC5es1cqp42oEGHgjz5sAUloIkpxpHtwNMBd
ngBHscL1Us0cbUEjutNjiKscajOZttehOAbULujkBFczRq2oWHZ1q8utkndfAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUCnFPX2LVMULUebOoGZwwAEaQccAwHwYDVR0j
BBgwFoAUpgmQqcpYkWQFBDK9BUc9z5+T9vgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NzU3NTQzNzUzMTI4MzQ3Ny8wL0E2MDk5MEE5Q0E1ODkxNjQwNTA0MzJCRDA1NDcz
RENGOUY5M0Y2RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5RjkzRjZGOC5jZXIw
gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA3NTc1NDM3NTMxMjgzNDc3LzAvMzEyZTM0MzUyZTM2
MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM1MzAzODMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
AS08MA0GCSqGSIb3DQEBCwUAA4IBAQCkyuDFeELn4d0trNO1VTeHZLtQB7f8VXky
2oWyJEJDO3Hu17j40rc+9I+UXqJKFHXJYIitoXjKhlTvaw+zNU4QIZNuv88pfRnk
XdH8ioMSAyBFzh8xEdxd7XfKD85VrcBv19FxZrg3vehU5gaehDORJxn1kFu/GWGt
EmnX1G7bWFj+AQCeZMvlgeJKcmcdPOZzAA5YTr7cO0F4PKdpr/cl4RJWKq21DW47
Rsu92CB3tdo8CUnZYo8A/Nh5wBxCVOQQfdtzS2TA3XajY8ghYGE3o8uFHr8KfTlF
UUFvS2+X++km59JWQoNKkUx1jyifXqAJRplwO4MbGmdmzhiSS8Lx
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:06 2026 by rpki-client