Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS45058.roa
File:                     AS45058.roa (raw, json)
Hash identifier:          H4wh20/sFK82BWQX0BNo3GzNC++JF8urGycVtYY0/GQ=
Subject key identifier:   4C:40:83:6A:4A:DE:87:38:A8:29:81:D5:C9:A1:FB:96:DB:DF:98:7A
Certificate issuer:       /CN=A915370F0000/serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9
Certificate serial:       68C7FE5E22ADB354C523246BAB26EF2D57B7BE4B
Authority key identifier: 01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS45058.roa
Signing time:             Mon 08 Jun 2026 09:20:15 +0000
ROA not before:           Mon 08 Jun 2026 09:15:15 +0000
ROA not after:            Mon 07 Jun 2027 09:20:15 +0000
asID:                     45058
IP address blocks:        118.186.7.0/24 maxlen: 24
                          118.186.88.0/21 maxlen: 21
                          118.186.128.0/19 maxlen: 19
                          118.186.208.0/22 maxlen: 22
                          118.186.212.0/22 maxlen: 22
                          118.187.64.0/19 maxlen: 19
                          118.187.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:12:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c7:fe:5e:22:ad:b3:54:c5:23:24:6b:ab:26:ef:2d:57:b7:be:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F0000, serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9
        Validity
            Not Before: Jun  8 09:15:15 2026 GMT
            Not After : Jun  7 09:20:15 2027 GMT
        Subject: CN=4C40836A4ADE8738A82981D5C9A1FB96DBDF987A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:18:62:c8:38:27:b3:67:b6:78:30:bf:25:f1:
                    7b:ed:d7:81:d8:11:c2:88:65:ff:3b:54:4d:47:5e:
                    86:a9:dd:ab:92:cf:9b:85:59:a0:91:4d:97:4a:dd:
                    65:cc:d0:12:cc:b6:f8:32:8e:c1:30:35:75:77:1b:
                    71:b3:e2:67:8f:ae:0c:fd:91:89:50:5d:42:7d:47:
                    e0:75:ac:3a:9e:42:17:83:1e:24:37:b4:59:7b:ee:
                    d3:ed:1a:0a:fd:be:8b:b9:9e:be:ed:84:6d:a6:7d:
                    e5:01:05:01:7e:d4:4d:c2:6f:b3:8f:3b:14:80:8e:
                    bc:6e:6d:8d:97:e7:e3:34:a6:b6:e3:4b:7f:86:36:
                    3a:13:1b:28:ca:ee:c9:df:88:6f:2b:8e:4e:86:da:
                    99:bd:30:37:95:09:9f:f9:fe:49:88:9e:86:33:3c:
                    50:54:d2:31:d4:d8:5f:c6:40:a5:ba:66:9d:d3:bb:
                    3c:89:c5:39:fb:66:02:66:6a:72:1b:79:6c:82:9f:
                    bd:d7:8e:e7:83:c1:cc:56:e5:7f:1d:eb:63:f9:c5:
                    d9:d9:c6:a3:63:4f:23:a2:96:ba:d5:fb:57:5b:6d:
                    48:fc:8d:62:d6:07:ef:dc:79:f9:d5:c9:45:7d:42:
                    90:c6:c2:2a:5d:6d:a6:e3:c4:eb:e1:73:c0:f3:ef:
                    b5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:40:83:6A:4A:DE:87:38:A8:29:81:D5:C9:A1:FB:96:DB:DF:98:7A
            X509v3 Authority Key Identifier:
                keyid:01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS45058.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.186.7.0/24
                  118.186.88.0/21
                  118.186.128.0/19
                  118.186.208.0/21
                  118.187.64.0/19
                  118.187.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:85:95:52:4a:68:cf:a5:ad:d2:74:ae:00:a7:05:36:78:54:
         30:fb:b6:d8:5a:6b:02:63:86:cb:c3:70:0e:a9:43:ef:4e:65:
         87:0f:94:63:8a:ed:3d:14:d4:e2:80:73:04:81:88:94:4d:f0:
         ab:c0:70:b5:e6:3b:1b:d1:47:b5:83:4d:da:f3:b4:64:58:eb:
         59:5c:56:76:d9:61:12:c8:3c:89:36:b0:c2:ed:d5:2a:9d:e1:
         36:1f:60:f1:a0:8f:5f:50:62:63:f4:c9:60:06:c5:66:05:86:
         60:20:92:75:cb:84:38:9f:42:14:d6:27:3a:9d:86:f2:71:b6:
         a2:55:c8:fb:d1:53:68:50:4b:2b:98:48:f5:20:1d:ea:bb:78:
         74:c3:33:32:e1:ca:4c:4d:23:b4:1a:34:4f:04:de:a4:cb:cf:
         69:3a:3e:d1:b2:ab:0b:e4:0b:ca:58:9d:23:c8:83:be:98:e8:
         fe:b0:20:c2:8b:a7:2a:66:0a:9a:c7:6c:d6:9e:6c:bd:30:43:
         05:10:b2:8e:9b:08:7a:e1:01:4b:08:5e:dd:25:60:84:5d:b4:
         dc:09:4c:a6:f0:7c:ad:49:88:6e:90:76:95:92:81:31:47:26:
         77:85:cc:7a:e7:0d:05:fd:a1:77:52:73:5e:d1:7d:da:53:67:
         01:97:60:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:39 2026 by rpki-client