Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e39362e302f32322d3232203d3e203435303833.roa
File:                     312e34352e39362e302f32322d3232203d3e203435303833.roa (raw, json)
Hash identifier:          QCci1l8Ncy7p7ZF1x1fI/FRt87AVsEihGELlIlvA+C4=
Subject key identifier:   31:8D:47:BF:60:93:E9:0B:DE:3E:DD:D1:D2:8C:6D:55:03:0A:43:AC
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       65DCDC2055C589C425C44935CF302A78D0C6223F
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e39362e302f32322d3232203d3e203435303833.roa
Signing time:             Tue 16 Jun 2026 03:10:03 +0000
ROA not before:           Tue 16 Jun 2026 03:05:03 +0000
ROA not after:            Tue 15 Jun 2027 03:10:03 +0000
asID:                     45083
IP address blocks:        1.45.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 07:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:dc:dc:20:55:c5:89:c4:25:c4:49:35:cf:30:2a:78:d0:c6:22:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun 16 03:05:03 2026 GMT
            Not After : Jun 15 03:10:03 2027 GMT
        Subject: CN=318D47BF6093E90BDE3EDDD1D28C6D55030A43AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c4:91:0e:07:a1:32:1d:e0:aa:91:54:64:26:
                    97:21:1c:4b:b5:68:0b:47:71:f0:fb:49:8f:0c:e7:
                    03:77:53:05:ec:db:de:df:bb:47:5b:c8:49:72:57:
                    3c:f7:e6:9f:c8:6f:ec:fc:79:94:40:e3:d2:e0:1f:
                    17:1f:7e:6d:28:22:6f:1a:00:39:d7:7d:bf:ff:ca:
                    a0:43:6c:fc:47:f4:ea:5b:7c:be:ef:c8:70:c5:28:
                    c4:60:d5:d2:27:f3:d3:5f:0b:fd:c4:c0:84:36:bf:
                    0b:f0:c2:4f:58:1d:98:f9:47:3c:2a:5a:88:83:ba:
                    2c:ca:b7:36:ce:ff:5c:a8:f9:e6:2d:60:bd:ab:a3:
                    0f:ae:bd:b7:5f:47:b4:29:a5:c8:6d:d8:be:66:31:
                    21:b0:0f:f1:67:2f:3f:6b:00:1e:57:97:7f:ac:3b:
                    b0:e3:e8:fc:1f:80:13:c6:47:9c:93:95:7c:05:e9:
                    9f:3a:6a:25:e2:0e:9b:31:01:3d:12:87:e3:b1:61:
                    a4:9c:a8:1e:81:41:73:ee:14:16:11:d9:7d:b7:f8:
                    5d:48:b8:6a:6f:cc:74:84:51:b5:d1:fb:b9:5a:19:
                    a1:2a:d5:90:33:28:15:42:63:73:94:ed:6e:11:54:
                    b2:8f:aa:25:a1:c5:5e:dc:bd:41:16:bc:6d:f8:74:
                    4f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8D:47:BF:60:93:E9:0B:DE:3E:DD:D1:D2:8C:6D:55:03:0A:43:AC
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e39362e302f32322d3232203d3e203435303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.45.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:a4:9d:eb:2b:4c:61:9c:eb:54:f1:6c:ec:5c:d3:92:44:3c:
         8c:fa:df:ff:2c:99:e1:ae:96:46:1c:de:6f:6f:e4:aa:c3:29:
         90:3d:88:f1:61:a0:d6:9f:94:d4:41:72:d3:e4:51:2c:ef:27:
         2c:35:a0:1e:8e:28:9d:cf:2f:d5:a7:48:e3:4a:65:3d:d1:43:
         f7:d9:65:b3:93:45:e6:77:ce:c0:cf:01:29:11:32:82:b5:3c:
         c3:b6:64:56:32:f7:fa:1c:8e:e4:bc:91:b3:0a:98:73:ee:5e:
         ff:c6:4b:e4:4c:32:d6:aa:e4:ae:f1:c2:8c:f2:bc:62:ac:74:
         bc:bb:cc:f9:58:e4:19:77:32:39:87:4c:56:84:88:92:65:74:
         7d:9f:00:89:c1:e0:e5:59:b8:b7:9b:08:41:2a:1d:24:40:32:
         97:1b:42:ff:dc:cc:f9:8d:b3:a5:b0:3c:60:47:35:cb:cc:63:
         64:14:1b:c0:75:a6:2d:11:d4:52:a1:6c:23:96:db:a0:16:fd:
         e8:68:87:f6:0e:d4:10:7f:c4:a9:d9:e5:f7:7c:a3:92:58:65:
         c7:80:41:89:d2:08:26:19:3c:f1:cb:ca:de:f8:80:0c:ad:21:
         a2:e6:41:ba:65:c2:48:2b:61:48:09:b6:19:d6:1b:77:14:1e:
         dd:bb:91:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:04 2026 by rpki-client