Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e37322e302f32322d3232203d3e203435303833.roa
File:                     312e34352e37322e302f32322d3232203d3e203435303833.roa (raw, json)
Hash identifier:          Eb5nsSjy+egKqYXr59jMTxSzqdV7d0Ib929lsHGQoJY=
Subject key identifier:   AF:F6:D1:19:C0:2C:FA:F0:6F:EF:DA:23:47:81:D6:EF:86:3E:A4:91
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       07ED966558E033B3C7376138AA61B531A829943C
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e37322e302f32322d3232203d3e203435303833.roa
Signing time:             Tue 16 Jun 2026 03:08:25 +0000
ROA not before:           Tue 16 Jun 2026 03:03:25 +0000
ROA not after:            Tue 15 Jun 2027 03:08:25 +0000
asID:                     45083
IP address blocks:        1.45.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 07:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ed:96:65:58:e0:33:b3:c7:37:61:38:aa:61:b5:31:a8:29:94:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun 16 03:03:25 2026 GMT
            Not After : Jun 15 03:08:25 2027 GMT
        Subject: CN=AFF6D119C02CFAF06FEFDA234781D6EF863EA491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:76:50:b6:ce:a1:89:51:4f:28:e6:43:1e:05:
                    b7:44:a5:4f:d0:15:34:f0:f1:4d:ef:d7:ff:d8:17:
                    1b:69:37:93:36:c7:5a:cc:0a:e8:5f:e1:bd:86:96:
                    b0:0a:5e:73:14:1e:9e:7d:18:7b:13:b7:62:76:06:
                    5a:9b:ac:50:c0:94:75:9b:4f:a7:5f:d2:2f:72:dd:
                    9b:2f:68:cf:55:af:6d:08:10:69:51:e5:44:0f:9a:
                    33:c8:35:46:33:55:85:a8:ba:a1:01:69:36:a5:6f:
                    f8:36:a3:9e:db:ec:6f:1e:52:c3:aa:17:7d:f6:03:
                    c3:c6:25:3f:84:55:19:17:f9:ea:5c:ec:89:0f:b1:
                    2a:f1:76:68:6a:a5:3c:a8:05:05:bf:45:7b:5c:ab:
                    44:9c:46:b5:8e:bc:6f:bc:cc:05:3a:9e:8c:d5:c6:
                    49:fc:e1:d2:b0:9d:f3:f8:12:dc:27:cc:6e:81:7f:
                    5e:14:33:e4:7c:31:fb:dd:2d:53:b9:b4:79:30:3e:
                    74:99:b0:07:32:42:57:4d:a3:17:38:87:4b:0d:ee:
                    0e:75:fd:0b:c9:a2:e3:84:b8:fe:14:3c:83:63:a8:
                    52:fd:b3:02:77:7b:2c:bf:34:85:f1:a3:86:d5:f6:
                    cf:d5:bc:b7:32:34:28:dc:36:f1:28:da:d9:dc:4f:
                    e7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F6:D1:19:C0:2C:FA:F0:6F:EF:DA:23:47:81:D6:EF:86:3E:A4:91
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e37322e302f32322d3232203d3e203435303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.45.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:14:d1:5f:5b:48:1d:f7:a9:8c:0d:97:d7:c2:23:b6:fa:5f:
         8f:27:2a:57:22:f4:71:c4:a7:94:73:ac:8a:8e:b9:fe:4a:f4:
         d0:23:d7:2e:9e:ee:91:52:aa:d4:6b:c2:6e:2f:d6:06:6f:0d:
         60:3f:e2:b2:36:d7:ca:c8:ef:ca:0f:e8:9c:c5:72:14:9f:b8:
         b3:d8:6d:9f:c6:3f:cf:8c:cd:35:70:55:16:a4:28:a9:aa:90:
         9b:f1:13:3d:07:62:ec:27:17:b2:58:17:1c:c4:cd:b1:c3:29:
         c7:cf:b8:75:98:28:7f:7d:89:08:6f:6c:03:12:af:51:fe:54:
         bb:df:cf:13:e4:cc:09:9d:9f:8c:9c:3a:b6:b2:e1:94:87:10:
         15:eb:c4:9b:b4:9a:c6:e7:56:47:ae:5f:10:44:01:d7:db:9c:
         2c:9d:96:ea:f3:65:bf:bf:17:9f:04:bc:aa:c8:28:52:61:9b:
         54:11:c2:80:25:98:d3:0b:53:5a:28:af:f7:63:82:a9:3a:da:
         3a:b2:67:8b:55:9b:c0:20:3d:61:d9:b1:08:db:56:04:6b:43:
         6e:df:e7:c0:84:ca:1d:f4:ea:a4:e5:7c:a1:ff:b1:dc:1e:56:
         8c:e4:cb:39:6b:af:cf:51:6b:cf:82:09:84:6b:7a:ac:ff:ed:
         b6:22:21:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:01 2026 by rpki-client