Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e38382e302f32322d3232203d3e203435303833.roa
File:                     312e34352e38382e302f32322d3232203d3e203435303833.roa (raw, json)
Hash identifier:          dph0hQhs1vANzWED5dyMBXdsXvnGGFLEESyqg3W5fSg=
Subject key identifier:   02:B1:5C:52:B1:08:AD:73:FD:62:C0:E2:10:26:F7:C8:25:0D:53:9B
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       126DD907AFA31ED544661E700B5F727FC91576FE
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e38382e302f32322d3232203d3e203435303833.roa
Signing time:             Tue 16 Jun 2026 03:13:52 +0000
ROA not before:           Tue 16 Jun 2026 03:08:52 +0000
ROA not after:            Tue 15 Jun 2027 03:13:52 +0000
asID:                     45083
IP address blocks:        1.45.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 07:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:6d:d9:07:af:a3:1e:d5:44:66:1e:70:0b:5f:72:7f:c9:15:76:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun 16 03:08:52 2026 GMT
            Not After : Jun 15 03:13:52 2027 GMT
        Subject: CN=02B15C52B108AD73FD62C0E21026F7C8250D539B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:45:37:64:14:8b:7e:70:86:f4:46:3b:aa:88:
                    06:aa:07:cc:be:28:e0:fc:23:b1:be:95:55:83:79:
                    62:5e:9d:22:9d:d2:65:d7:f9:2c:57:a2:30:ec:66:
                    a4:5b:0c:4c:2b:12:5a:cd:59:2f:4d:b4:a0:68:79:
                    4d:73:ba:21:8b:80:6a:a0:b8:aa:b0:27:4d:84:03:
                    3b:49:31:67:2f:3e:f5:d8:c4:36:e0:d9:aa:3f:b3:
                    a0:11:63:e2:51:b1:91:c2:82:7a:a7:1d:b1:2e:66:
                    22:7e:a8:97:a4:c7:6e:e0:56:f5:be:ac:b3:1e:91:
                    96:81:1b:24:6c:7c:9a:57:cf:95:0c:3c:f5:e1:b8:
                    6f:e3:56:9b:49:18:18:24:d7:a6:7b:ab:56:9b:4e:
                    94:5e:6b:fe:68:2f:f1:2c:a4:7f:d8:be:47:f7:a0:
                    29:be:aa:b2:f9:5f:de:86:f5:81:83:25:f1:81:79:
                    10:a9:b5:32:a0:8d:57:82:bb:7e:2e:59:23:29:84:
                    06:41:80:84:00:d3:b1:21:20:14:a6:ef:e1:d5:f3:
                    b4:b2:c1:a9:3c:89:27:f4:5c:38:c4:db:5c:a3:71:
                    b1:a0:2e:21:a6:ae:cd:4e:da:aa:d9:95:b6:92:4d:
                    92:66:2b:97:36:5e:11:24:a0:94:96:e1:13:d2:d5:
                    50:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B1:5C:52:B1:08:AD:73:FD:62:C0:E2:10:26:F7:C8:25:0D:53:9B
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e38382e302f32322d3232203d3e203435303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.45.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:f0:b7:5a:77:c2:e1:e8:9d:86:a2:e6:37:a6:58:ca:98:b7:
         8e:7d:c4:96:46:53:2b:53:34:f6:88:69:d3:3e:cb:f7:af:39:
         57:6d:68:16:7c:0f:28:9c:07:d8:40:cb:96:b9:11:40:aa:df:
         0b:af:a8:74:a6:4f:0d:c1:fa:b7:43:fa:c3:c9:3e:36:93:43:
         99:f7:8c:42:20:f4:6a:c3:f9:f4:ec:f2:86:87:df:35:75:eb:
         46:c9:f7:00:49:72:68:38:b6:53:9d:8c:92:0c:8a:81:0f:ef:
         fb:f0:ae:2a:d5:ee:af:66:58:c5:68:47:fb:8b:8e:13:3b:24:
         44:cb:0c:83:62:21:83:59:69:0d:d3:b9:65:30:18:28:15:1f:
         a6:1c:3e:45:96:a2:d3:a3:9d:ef:c8:90:91:47:45:b2:1e:33:
         c3:0f:49:da:67:bc:ef:4b:06:67:c8:df:7f:f2:a1:90:d2:d9:
         f2:83:a2:38:fa:29:00:25:37:35:a9:b3:3d:b3:2b:7a:8b:73:
         53:46:16:0c:32:3c:4b:a7:a1:59:5b:ca:23:3d:92:ac:3a:2f:
         65:81:41:ed:c5:15:e9:88:a0:90:d7:ef:43:28:99:90:54:6a:
         27:6d:ba:49:3a:2b:46:e9:34:8a:9c:cd:de:96:8a:07:fd:a8:
         fc:27:d4:5f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUEm3ZB6+jHtVEZh5wC19yf8kVdv4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5
RjkzRjZGODAeFw0yNjA2MTYwMzA4NTJaFw0yNzA2MTUwMzEzNTJaMDMxMTAvBgNV
BAMTKDAyQjE1QzUyQjEwOEFENzNGRDYyQzBFMjEwMjZGN0M4MjUwRDUzOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDRTdkFIt+cIb0RjuqiAaqB8y+
KOD8I7G+lVWDeWJenSKd0mXX+SxXojDsZqRbDEwrElrNWS9NtKBoeU1zuiGLgGqg
uKqwJ02EAztJMWcvPvXYxDbg2ao/s6ARY+JRsZHCgnqnHbEuZiJ+qJekx27gVvW+
rLMekZaBGyRsfJpXz5UMPPXhuG/jVptJGBgk16Z7q1abTpRea/5oL/EspH/Yvkf3
oCm+qrL5X96G9YGDJfGBeRCptTKgjVeCu34uWSMphAZBgIQA07EhIBSm7+HV87Sy
wak8iSf0XDjE21yjcbGgLiGmrs1O2qrZlbaSTZJmK5c2XhEkoJSW4RPS1VBPAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUArFcUrEIrXP9YsDiECb3yCUNU5swHwYDVR0j
BBgwFoAUpgmQqcpYkWQFBDK9BUc9z5+T9vgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NzU3NTQzNzUzMTI4MzQ3Ny8wL0E2MDk5MEE5Q0E1ODkxNjQwNTA0MzJCRDA1NDcz
RENGOUY5M0Y2RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5RjkzRjZGOC5jZXIw
gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA3NTc1NDM3NTMxMjgzNDc3LzAvMzEyZTM0MzUyZTM4
MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM1MzAzODMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
AS1YMA0GCSqGSIb3DQEBCwUAA4IBAQCS8Ldad8Lh6J2GouY3pljKmLeOfcSWRlMr
UzT2iGnTPsv3rzlXbWgWfA8onAfYQMuWuRFAqt8Lr6h0pk8Nwfq3Q/rDyT42k0OZ
94xCIPRqw/n07PKGh981detGyfcASXJoOLZTnYySDIqBD+/78K4q1e6vZljFaEf7
i44TOyREywyDYiGDWWkN07llMBgoFR+mHD5FlqLTo53vyJCRR0WyHjPDD0naZ7zv
SwZnyN9/8qGQ0tnyg6I4+ikAJTc1qbM9syt6i3NTRhYMMjxLp6FZW8ojPZKsOi9l
gUHtxRXpiKCQ1+9DKJmQVGonbbpJOitG6TSKnM3elooH/aj8J9Rf
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:03 2026 by rpki-client