Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e36342e302f32322d3232203d3e203435303833.roa
File:                     312e34352e36342e302f32322d3232203d3e203435303833.roa (raw, json)
Hash identifier:          krNocUL/VtdEzFDXXSVqRSG9fZEKdBGLgIJDglXkeas=
Subject key identifier:   C3:16:33:C4:21:A3:74:80:B3:6A:25:BF:18:FF:4A:99:62:B8:72:1A
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       780557EB77ACFA7D0EBB13AA0FE273BBA8408BB4
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e36342e302f32322d3232203d3e203435303833.roa
Signing time:             Tue 16 Jun 2026 03:12:23 +0000
ROA not before:           Tue 16 Jun 2026 03:07:23 +0000
ROA not after:            Tue 15 Jun 2027 03:12:23 +0000
asID:                     45083
IP address blocks:        1.45.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 07:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:05:57:eb:77:ac:fa:7d:0e:bb:13:aa:0f:e2:73:bb:a8:40:8b:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun 16 03:07:23 2026 GMT
            Not After : Jun 15 03:12:23 2027 GMT
        Subject: CN=C31633C421A37480B36A25BF18FF4A9962B8721A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a2:22:13:b7:58:40:d9:14:7c:6c:be:c9:37:
                    d1:16:30:ec:9e:06:dc:38:26:a1:20:c1:a8:fa:f1:
                    f7:bd:60:38:eb:02:9f:01:cb:bf:5b:a6:87:28:27:
                    dc:af:a0:ed:a8:65:3b:bd:36:f1:1b:2e:1d:c0:b1:
                    c6:d2:85:97:eb:d0:60:3a:66:8e:64:35:4c:39:b2:
                    6b:83:6c:7b:14:af:02:9f:04:2a:f0:a5:dd:36:6c:
                    59:28:1c:49:ef:96:df:3c:51:32:bf:a7:11:3d:ba:
                    6b:29:a5:a5:af:38:3e:a9:d8:91:27:ed:c1:35:99:
                    8b:3a:74:6b:b5:25:1e:37:5b:ff:1c:7d:42:05:1c:
                    1b:2e:aa:38:2d:ee:be:97:53:d3:d1:da:17:92:94:
                    d4:28:4e:a5:16:9b:06:f5:38:e2:5b:98:4a:69:1c:
                    a6:3b:4c:04:f8:c3:a5:f6:e5:3e:33:e7:23:b4:a6:
                    8c:91:a0:e0:12:b5:a2:4c:9f:66:99:cd:a9:64:f7:
                    3e:8a:90:27:f6:9b:00:eb:e9:1d:cc:46:fb:3f:bc:
                    5b:51:e4:b1:07:76:6e:1b:6c:c6:fc:c6:17:6b:bf:
                    ca:fd:e1:91:65:9c:7f:20:a6:42:e6:f0:19:28:ba:
                    5c:8b:0e:ed:e0:44:1b:e8:dd:50:7c:25:60:dd:31:
                    75:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:16:33:C4:21:A3:74:80:B3:6A:25:BF:18:FF:4A:99:62:B8:72:1A
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e36342e302f32322d3232203d3e203435303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.45.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:e1:9b:da:b1:bc:d8:76:cf:9e:3d:93:64:c5:4f:fd:37:8d:
         9c:04:87:12:47:c6:04:92:3b:3b:8e:87:1e:21:09:c6:25:66:
         cd:3b:25:3b:eb:1d:86:e2:a0:7d:4a:97:37:11:c0:30:af:a5:
         cd:4f:79:15:fd:ec:29:82:88:c4:58:a3:2c:2c:2a:44:8a:eb:
         a1:21:78:ce:cf:50:33:a9:89:f9:48:15:a4:39:81:37:31:8a:
         48:ed:ef:22:5d:db:6c:ab:e1:91:f3:2e:58:4a:45:c6:ca:06:
         a0:c9:7a:a3:06:ae:b2:90:2d:47:7c:83:c3:25:db:5a:77:54:
         25:b5:63:cc:ec:ed:61:b4:fd:9c:42:94:3d:e9:8a:90:1a:f6:
         d2:c1:9a:03:3c:d3:7e:c9:bb:d1:d5:56:2d:89:7c:49:44:86:
         af:06:d6:cc:81:8f:06:04:9b:15:55:84:b3:ed:9a:27:69:d3:
         25:de:49:72:ff:6c:18:a6:3e:b5:f5:8b:5b:0c:2c:d7:e8:90:
         4f:51:d6:8c:67:05:bf:70:ba:ca:e2:dc:2b:f9:11:e6:90:bd:
         1c:79:16:d4:39:0b:c9:87:2f:2a:e2:33:13:ea:89:60:07:9a:
         b2:32:6e:e3:7c:da:f4:05:47:d1:cb:29:03:63:27:69:87:c1:
         60:bf:73:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:06 2026 by rpki-client