Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e38302e302f32322d3232203d3e203435303833.roa
File:                     312e34352e38302e302f32322d3232203d3e203435303833.roa (raw, json)
Hash identifier:          MYR04jZU2uJupErgPnjpOIXksYxVDPKJn4z3mZ+iciM=
Subject key identifier:   BE:9B:B4:BD:C7:54:94:82:26:7A:3F:96:81:DF:10:AB:B6:88:AB:E0
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       4BFF0A3081DC7B7A9E6242E32D6AC0D30AF2EE28
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e38302e302f32322d3232203d3e203435303833.roa
Signing time:             Tue 16 Jun 2026 02:59:37 +0000
ROA not before:           Tue 16 Jun 2026 02:54:37 +0000
ROA not after:            Tue 15 Jun 2027 02:59:37 +0000
asID:                     45083
IP address blocks:        1.45.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 07:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ff:0a:30:81:dc:7b:7a:9e:62:42:e3:2d:6a:c0:d3:0a:f2:ee:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun 16 02:54:37 2026 GMT
            Not After : Jun 15 02:59:37 2027 GMT
        Subject: CN=BE9BB4BDC7549482267A3F9681DF10ABB688ABE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:54:f2:dc:b3:07:17:d8:b4:b1:f9:d3:30:a3:
                    6a:7a:61:cc:e5:5f:a7:c8:0b:6c:e8:c8:eb:44:d4:
                    14:e3:ac:4c:6c:59:72:3e:42:62:f3:7e:81:24:5c:
                    4f:db:34:6e:a6:ef:da:d3:94:20:5d:48:90:16:fb:
                    ec:cb:24:2b:d2:62:8d:d2:13:3c:a9:6c:1c:99:fd:
                    5c:d3:eb:4a:3a:6c:af:57:5f:39:9e:bf:94:a3:d6:
                    53:2a:1c:3b:a5:f0:a2:93:83:87:39:48:fb:c0:ed:
                    ad:5f:c8:2a:eb:bf:9c:32:30:da:35:71:92:fb:7f:
                    20:62:81:42:a8:4e:64:16:d8:84:50:0e:4a:26:19:
                    b3:bf:fc:2f:da:cf:23:dc:be:b4:e8:f7:65:73:1f:
                    f7:f2:7a:27:7e:e9:f8:ec:71:0d:22:03:7d:51:79:
                    33:cf:f8:5a:56:7d:2c:93:78:2f:36:35:e5:a8:b1:
                    8b:00:72:bb:09:e9:e2:e9:e6:b5:3a:44:6e:dd:bd:
                    7f:2a:56:0c:cf:2e:42:b8:08:75:6c:ed:2d:60:72:
                    9f:8d:a2:b4:75:5a:7b:61:e6:04:64:f7:7e:f8:6e:
                    4d:34:f6:e6:6a:40:c5:2e:f9:a8:06:95:07:b1:fc:
                    1a:08:a5:6c:4d:a5:98:ea:a7:71:7c:26:ea:31:84:
                    27:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:9B:B4:BD:C7:54:94:82:26:7A:3F:96:81:DF:10:AB:B6:88:AB:E0
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e38302e302f32322d3232203d3e203435303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.45.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:04:c4:63:73:69:29:a4:9f:57:d8:00:d8:c6:30:11:b2:25:
         36:f0:4c:a9:77:a7:1b:0d:df:c4:f5:a3:33:80:6d:e8:62:cd:
         73:64:aa:7b:ff:b0:b8:c4:75:9e:8b:fb:f9:18:a6:56:fd:7b:
         39:98:81:88:36:22:9b:75:26:a9:4d:51:3a:a4:6c:6f:25:23:
         61:14:60:b0:9f:2e:13:b4:95:36:9b:3a:d7:c1:7b:a6:5e:28:
         66:63:82:a8:47:19:56:82:34:3f:d2:be:be:9c:97:a8:4c:0c:
         f6:6d:c3:eb:58:12:71:d6:04:43:6f:0f:ab:cb:42:d4:a5:27:
         51:67:95:52:1d:a8:a5:35:47:c6:c1:f2:a5:c4:7c:ae:25:53:
         48:9d:05:c3:8f:d5:6a:12:ea:00:ae:61:d5:8a:ec:4f:c1:6c:
         09:02:f4:96:7b:76:e2:db:0d:ad:88:1b:57:78:4e:2f:12:f2:
         6d:ce:e5:90:ae:9e:b1:60:eb:0b:c6:19:3d:68:aa:5a:16:bb:
         a5:37:dc:43:6b:39:cc:f2:b8:b8:cc:c8:0f:dc:85:0f:89:5d:
         c6:bd:59:50:05:db:12:19:4a:4b:0a:f8:9c:21:1b:4d:d4:a3:
         aa:32:75:71:85:ac:e6:1e:25:b4:bd:70:07:30:48:e8:3b:0d:
         0b:3a:48:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:06 2026 by rpki-client