Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e38342e302f32322d3232203d3e203435303833.roa
File:                     312e34352e38342e302f32322d3232203d3e203435303833.roa (raw, json)
Hash identifier:          WkvRQMh93cUsTOkVpFcdFMXpTH6Ftjmngl48WAYw5UY=
Subject key identifier:   B0:F9:3E:EB:3F:05:7E:EA:8A:D7:51:01:F8:F4:1C:5C:F0:BD:7E:41
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       770794C06950E763074D42A91545A57ADFCB0F5F
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e38342e302f32322d3232203d3e203435303833.roa
Signing time:             Tue 16 Jun 2026 03:11:09 +0000
ROA not before:           Tue 16 Jun 2026 03:06:09 +0000
ROA not after:            Tue 15 Jun 2027 03:11:09 +0000
asID:                     45083
IP address blocks:        1.45.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 07:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:07:94:c0:69:50:e7:63:07:4d:42:a9:15:45:a5:7a:df:cb:0f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun 16 03:06:09 2026 GMT
            Not After : Jun 15 03:11:09 2027 GMT
        Subject: CN=B0F93EEB3F057EEA8AD75101F8F41C5CF0BD7E41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4e:38:dc:e1:8f:1d:f3:93:49:47:34:79:d5:
                    0a:1b:66:66:c0:1e:c4:81:98:f6:8d:cd:17:f2:57:
                    3f:96:f8:66:f2:42:61:1c:43:e7:50:1d:58:d5:78:
                    4e:eb:fb:15:d3:60:31:f4:fa:17:9c:30:2a:f9:c4:
                    0c:25:f6:01:a5:83:1a:56:c3:ce:eb:e6:75:84:4d:
                    e6:83:df:a8:ef:cf:87:14:58:77:de:6d:b2:66:33:
                    d0:67:9c:fa:8d:62:25:78:cc:bc:82:fd:aa:f5:9d:
                    6d:ac:d7:d9:6c:fb:e0:e2:3b:1c:5a:53:5d:30:37:
                    c8:c6:c1:b2:4a:a1:5e:9f:7d:82:87:1a:be:7c:fa:
                    0b:e9:f1:cf:34:ac:58:0f:ab:c6:18:d8:c3:61:cf:
                    ba:cc:77:de:3f:95:4a:f7:8e:21:8a:fa:b9:b1:6d:
                    b5:d7:68:b5:9b:0d:5f:ee:f3:af:6c:a3:83:f4:fc:
                    10:1d:d6:ec:ec:b3:54:ce:f9:dc:ec:dd:4d:8d:7b:
                    2a:aa:b1:d4:34:74:4b:2c:e7:85:1b:ce:ab:29:72:
                    f5:33:d3:27:34:9d:a2:e3:24:fb:42:08:31:19:b8:
                    44:c2:93:19:b9:c7:b0:f5:b4:13:cd:00:2d:cd:05:
                    05:ec:ba:72:aa:ac:ee:0e:2d:e2:a8:79:5b:af:f6:
                    04:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F9:3E:EB:3F:05:7E:EA:8A:D7:51:01:F8:F4:1C:5C:F0:BD:7E:41
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e38342e302f32322d3232203d3e203435303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.45.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:c3:99:20:34:f6:2d:de:0a:1c:b2:4a:fe:3c:5e:a1:b5:c3:
         55:6c:50:6b:e0:31:4f:ea:ff:05:12:b0:45:74:3f:12:17:cc:
         d6:c5:eb:5d:0d:60:e8:43:b4:e1:92:26:e0:d6:6a:61:20:a3:
         81:48:d2:01:58:ca:1f:c9:42:93:45:7b:41:a8:64:27:27:0b:
         8a:2d:41:e7:0f:f5:8a:0d:c0:69:90:7a:21:e4:e1:f2:65:d0:
         08:ea:89:b6:6c:72:d8:15:3c:0b:6c:5a:1f:72:a5:c1:4a:4e:
         98:da:f8:21:61:60:1b:3c:6d:85:51:6b:34:6b:03:8e:fd:32:
         3f:52:62:24:db:31:85:2e:e7:13:fe:c9:aa:03:fb:03:2f:bb:
         40:99:6d:8b:dd:ee:a1:88:f0:dd:53:dc:49:8a:c7:07:93:46:
         7d:e8:c4:2a:67:d5:22:32:fe:30:43:0e:da:09:e8:95:df:e8:
         66:13:9a:f6:44:7c:55:6e:25:e3:86:6b:19:34:99:3e:30:00:
         5f:96:db:ed:86:dc:bf:48:ae:d2:c7:85:42:9a:2e:ab:7c:56:
         19:a0:e3:00:cd:bf:d9:db:fb:4d:6a:55:bb:87:8d:71:db:51:
         9c:be:d8:53:65:9d:81:07:76:cf:c3:61:9e:f2:04:de:b1:3b:
         21:4c:f7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:05 2026 by rpki-client