Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e39322e302f32322d3232203d3e203435303833.roa
File:                     312e34352e39322e302f32322d3232203d3e203435303833.roa (raw, json)
Hash identifier:          b/Pd4IcuqrNsJ0CVs1c1nY7hw5ipeYumRMmveOcej1M=
Subject key identifier:   9E:33:4F:81:E4:22:85:27:F3:45:72:2E:07:31:1A:AD:61:BC:6E:9A
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       2BC88C44AD736D72B4A1D68FC9ADD9E15AE2CBE4
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e39322e302f32322d3232203d3e203435303833.roa
Signing time:             Tue 16 Jun 2026 03:06:35 +0000
ROA not before:           Tue 16 Jun 2026 03:01:35 +0000
ROA not after:            Tue 15 Jun 2027 03:06:35 +0000
asID:                     45083
IP address blocks:        1.45.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 07:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c8:8c:44:ad:73:6d:72:b4:a1:d6:8f:c9:ad:d9:e1:5a:e2:cb:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun 16 03:01:35 2026 GMT
            Not After : Jun 15 03:06:35 2027 GMT
        Subject: CN=9E334F81E4228527F345722E07311AAD61BC6E9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:90:97:79:c0:ea:06:11:ee:d9:a6:d7:83:f1:
                    a7:7e:6d:5f:a9:ae:48:fd:b4:c6:83:c5:26:f2:be:
                    d2:bd:1b:32:94:01:8d:69:d7:ee:4b:41:c7:1c:22:
                    4c:e1:34:6c:19:7e:c4:fe:a1:ac:7c:92:33:39:49:
                    48:15:25:5f:d9:59:19:e2:23:1a:69:fa:20:30:3e:
                    b9:25:7c:9a:19:79:3d:cc:2d:61:4d:65:94:f7:74:
                    bc:45:78:ef:af:27:44:59:58:7a:1a:c5:3e:15:f5:
                    04:9e:84:51:d8:17:fc:1f:04:9d:0a:4f:7f:c9:0d:
                    46:28:77:ee:1b:a0:ea:22:04:7a:72:c8:5e:f2:56:
                    e7:c4:f8:d2:78:eb:1d:a2:03:c3:e9:29:7a:d9:ac:
                    50:a7:f9:f4:29:4c:3c:48:db:fa:db:b7:75:f6:95:
                    61:4f:b2:ed:75:1e:55:94:ee:45:d1:8e:ae:72:70:
                    75:7e:f0:5a:26:f1:4a:26:e3:72:d6:d0:94:c3:0a:
                    71:8d:6a:b0:e5:66:bc:f3:1e:f5:80:9d:db:b9:c0:
                    99:37:81:ed:a9:47:ff:47:70:f4:7d:6d:d9:f1:20:
                    3c:00:c3:e7:41:82:c4:2e:cc:6f:ea:92:9d:68:ba:
                    c6:ff:8a:8c:65:7f:c4:4c:57:0e:3b:fa:5d:ff:1d:
                    6f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:33:4F:81:E4:22:85:27:F3:45:72:2E:07:31:1A:AD:61:BC:6E:9A
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e39322e302f32322d3232203d3e203435303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.45.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:d0:5b:51:44:5b:67:5b:93:25:a5:d5:7a:aa:54:b5:95:92:
         43:0b:c4:55:6f:0b:50:86:95:30:1e:9f:b7:ab:75:2c:a8:18:
         cf:13:9d:9d:7d:3f:2e:45:a1:b6:d4:69:54:aa:29:01:63:34:
         aa:67:6c:70:85:9d:66:4a:ab:b4:c5:77:61:07:b6:9c:f2:fc:
         1c:7d:5e:2f:dd:0b:d1:e3:dd:77:e3:e8:b5:40:71:ac:14:be:
         73:7e:03:7c:0e:9f:a3:3c:2c:9a:05:e0:d3:a6:b5:d8:7f:99:
         48:a6:ab:56:7e:3b:ac:17:e2:af:81:85:99:35:52:3c:28:a3:
         b8:9c:5c:75:39:14:19:35:ee:e0:2d:0d:59:0a:a8:28:1e:cd:
         8b:f9:48:a8:1d:a9:f6:a2:53:aa:70:ee:76:52:fe:6e:f6:7c:
         d5:21:07:57:d1:7e:cb:bd:68:25:b8:8c:42:b2:3c:71:ce:11:
         8b:4f:7c:dd:3b:fa:4d:16:ae:54:73:73:97:c6:03:28:a9:ec:
         bd:83:36:61:24:e3:5d:f4:10:84:31:30:e5:a7:56:16:94:c7:
         d0:52:92:68:eb:ee:76:d0:35:a7:37:a6:da:aa:1f:10:86:14:
         ab:29:cc:48:26:a9:b9:ee:4d:7b:93:b0:e1:1d:f4:29:63:37:
         93:68:90:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:01 2026 by rpki-client