Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS45062.roa
File: AS45062.roa (raw, json)
Hash identifier: STiEmUQxgiIp2yDH8XyS+9RpscxPdwUhmAokPpGsBzw=
Subject key identifier: 7B:33:2C:3E:4B:73:79:93:9B:21:C0:21:F1:CE:6B:DC:35:E5:33:4D
Certificate issuer: /CN=A915370F0000/serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9
Certificate serial: 301896BA274EEA0B34608C115114312EA986D3F7
Authority key identifier: 01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS45062.roa
Signing time: Mon 08 Jun 2026 06:54:11 +0000
ROA not before: Mon 08 Jun 2026 06:49:11 +0000
ROA not after: Mon 07 Jun 2027 06:54:11 +0000
asID: 45062
IP address blocks: 123.58.160.0/24 maxlen: 24
123.58.161.0/24 maxlen: 24
123.58.162.0/24 maxlen: 24
123.58.163.0/24 maxlen: 24
123.58.164.0/24 maxlen: 24
123.58.165.0/24 maxlen: 24
123.58.166.0/24 maxlen: 24
123.58.167.0/24 maxlen: 24
123.58.168.0/24 maxlen: 24
123.58.169.0/24 maxlen: 24
123.58.170.0/24 maxlen: 24
123.58.171.0/24 maxlen: 24
123.58.172.0/24 maxlen: 24
123.58.173.0/24 maxlen: 24
123.58.174.0/24 maxlen: 24
123.58.175.0/24 maxlen: 24
123.58.176.0/24 maxlen: 24
123.58.177.0/24 maxlen: 24
123.58.178.0/24 maxlen: 24
123.58.179.0/24 maxlen: 24
123.58.180.0/24 maxlen: 24
123.58.181.0/24 maxlen: 24
123.58.182.0/24 maxlen: 24
123.58.183.0/24 maxlen: 24
123.58.184.0/24 maxlen: 24
123.58.185.0/24 maxlen: 24
123.58.186.0/24 maxlen: 24
123.58.187.0/24 maxlen: 24
123.58.188.0/24 maxlen: 24
123.58.189.0/24 maxlen: 24
123.58.190.0/24 maxlen: 24
123.58.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl
rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 12:12:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:18:96:ba:27:4e:ea:0b:34:60:8c:11:51:14:31:2e:a9:86:d3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F0000, serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9
Validity
Not Before: Jun 8 06:49:11 2026 GMT
Not After : Jun 7 06:54:11 2027 GMT
Subject: CN=7B332C3E4B7379939B21C021F1CE6BDC35E5334D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:be:3c:80:7a:ef:db:74:4a:64:3a:6a:21:55:
bb:87:6d:54:07:b1:f7:22:34:7a:79:5b:69:8d:75:
7d:c3:4f:aa:47:68:c8:08:11:aa:e3:4e:d7:e6:7d:
1f:18:a4:80:52:fd:06:79:62:ed:25:6f:87:f8:d7:
0c:b2:c6:85:f3:97:90:9d:7a:a2:cc:83:74:b3:8a:
49:ff:92:da:ac:07:0e:ed:89:5d:90:a6:cb:86:1f:
23:7a:0b:71:b1:e2:43:b7:90:10:c6:98:51:6b:1e:
fb:4e:28:84:b8:9c:3c:7a:96:d1:6c:d3:73:d2:59:
42:7d:a3:37:88:f7:60:09:28:1b:d8:37:78:ac:98:
05:d9:69:1b:77:55:95:08:b9:32:34:81:26:8a:81:
96:29:a0:cc:2a:d5:98:20:30:44:84:2f:b5:f9:5c:
dd:86:1c:31:c2:39:c7:1c:61:03:16:82:72:86:28:
7c:c7:7c:dd:38:9a:66:03:c5:bd:2d:b5:d7:92:62:
a0:3d:d4:81:24:b1:3c:19:87:66:60:61:8e:25:1c:
a0:95:66:50:05:42:9c:a9:0e:86:71:b6:31:f4:69:
50:ff:8a:54:9f:56:07:d1:9a:3f:76:7d:11:0c:98:
5d:b3:7c:0f:51:91:07:c7:ae:06:2c:5c:51:d6:10:
60:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:33:2C:3E:4B:73:79:93:9B:21:C0:21:F1:CE:6B:DC:35:E5:33:4D
X509v3 Authority Key Identifier:
keyid:01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS45062.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.58.160.0/19
Signature Algorithm: sha256WithRSAEncryption
6f:76:98:58:2e:79:99:4a:5c:3f:a6:d6:d9:3a:6a:72:00:a9:
d6:53:40:07:5a:56:b3:e7:77:09:ea:87:13:18:4a:19:39:47:
a6:7a:53:4e:e5:d0:a6:99:64:fa:85:14:c2:88:99:e7:53:1b:
86:de:b3:96:54:65:91:48:f7:15:37:9e:e1:eb:84:15:b6:a0:
89:bd:a6:0c:16:8a:83:1b:51:fd:a1:3b:dc:81:1c:c6:29:91:
a4:b9:fe:39:ba:fb:4b:63:4c:0f:b4:0d:54:d9:bb:05:22:f2:
3a:69:20:80:5a:e5:08:7e:43:6b:dc:36:c9:07:49:15:f3:d6:
0c:ee:8d:ba:b4:d0:02:ce:ee:63:8a:51:65:37:7c:97:ff:d6:
74:53:1c:ac:46:35:20:ed:8e:6f:30:1f:6e:d9:92:98:66:2e:
bf:66:94:2a:6f:c7:ef:9a:ba:a3:cc:91:ec:5b:aa:fa:a2:29:
bb:5c:39:b9:33:c3:8f:a1:42:ed:14:f1:bd:04:71:54:ef:97:
6a:e4:22:c6:5d:c7:d7:1a:e8:71:51:5e:af:8d:3d:68:6b:3f:
d7:33:6e:dc:5c:f5:0b:7d:3d:bf:e5:45:ed:ef:95:34:b4:ec:
45:12:27:b6:2c:4d:ba:a2:fd:b9:1a:79:5b:17:60:e3:92:fa:
24:0f:79:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:39 2026 by rpki-client