Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121615833404080165/1/AS45090.roa
File: AS45090.roa (raw, json)
Hash identifier: 9z/vGwk9GoR4CuDglXxJBbz0kxT3UXkooKIlTGvAJ1I=
Subject key identifier: 6A:29:AB:50:8C:5F:B0:26:BD:71:94:68:94:40:72:41:5C:CB:B4:F3
Certificate issuer: /CN=A91209740000/serialNumber=4C9E671EAD464E04623BB043FD62E7BA2A77EDD4
Certificate serial: 60F0B031861D597A2F53D222D5E793F8AC1F16A7
Authority key identifier: 4C:9E:67:1E:AD:46:4E:04:62:3B:B0:43:FD:62:E7:BA:2A:77:ED:D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TJ5nHq1GTgRiO7BD_WLnuip37dQ.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/AS45090.roa
Signing time: Tue 30 Jun 2026 11:30:35 +0000
ROA not before: Tue 30 Jun 2026 11:25:35 +0000
ROA not after: Tue 29 Jun 2027 11:30:35 +0000
asID: 45090
IP address blocks: 45.40.192.0/18 maxlen: 18
45.40.192.0/22 maxlen: 22
45.40.196.0/22 maxlen: 22
45.40.200.0/22 maxlen: 22
45.40.204.0/22 maxlen: 22
45.40.216.0/22 maxlen: 22
45.40.220.0/22 maxlen: 22
45.40.224.0/20 maxlen: 20
45.40.236.0/23 maxlen: 23
45.40.240.0/22 maxlen: 22
45.40.244.0/22 maxlen: 22
45.40.248.0/22 maxlen: 22
45.40.252.0/22 maxlen: 22
129.28.0.0/16 maxlen: 16
129.28.0.0/22 maxlen: 22
129.28.4.0/22 maxlen: 22
129.28.8.0/22 maxlen: 22
129.28.12.0/22 maxlen: 22
129.28.16.0/20 maxlen: 20
129.28.32.0/20 maxlen: 20
129.28.48.0/20 maxlen: 20
129.28.64.0/20 maxlen: 20
129.28.80.0/20 maxlen: 20
129.28.96.0/20 maxlen: 20
129.28.112.0/20 maxlen: 20
129.28.128.0/20 maxlen: 20
129.28.144.0/20 maxlen: 20
129.28.160.0/20 maxlen: 20
129.28.176.0/20 maxlen: 20
129.28.192.0/20 maxlen: 20
129.28.208.0/20 maxlen: 20
129.28.224.0/20 maxlen: 20
129.28.240.0/20 maxlen: 20
129.28.240.0/21 maxlen: 21
129.28.248.0/21 maxlen: 21
129.204.0.0/16 maxlen: 16
129.204.0.0/18 maxlen: 18
129.204.64.0/18 maxlen: 18
129.204.128.0/19 maxlen: 19
129.204.160.0/19 maxlen: 19
129.204.192.0/20 maxlen: 20
129.204.208.0/20 maxlen: 20
129.204.224.0/20 maxlen: 20
129.204.240.0/20 maxlen: 20
129.211.0.0/16 maxlen: 16
129.211.0.0/18 maxlen: 18
129.211.64.0/18 maxlen: 18
129.211.128.0/19 maxlen: 19
129.211.160.0/20 maxlen: 20
129.211.176.0/20 maxlen: 20
129.211.192.0/18 maxlen: 18
129.211.192.0/20 maxlen: 20
129.211.208.0/22 maxlen: 22
132.232.0.0/16 maxlen: 16
132.232.0.0/20 maxlen: 20
132.232.16.0/20 maxlen: 20
132.232.32.0/20 maxlen: 20
132.232.48.0/20 maxlen: 20
132.232.64.0/20 maxlen: 20
132.232.80.0/20 maxlen: 20
132.232.96.0/20 maxlen: 20
132.232.112.0/20 maxlen: 20
132.232.128.0/20 maxlen: 20
132.232.144.0/20 maxlen: 20
132.232.160.0/20 maxlen: 20
132.232.176.0/20 maxlen: 20
132.232.192.0/20 maxlen: 20
132.232.208.0/20 maxlen: 20
132.232.224.0/20 maxlen: 20
132.232.240.0/20 maxlen: 20
134.175.0.0/16 maxlen: 16
134.175.0.0/20 maxlen: 20
134.175.16.0/20 maxlen: 20
134.175.32.0/20 maxlen: 20
134.175.48.0/20 maxlen: 20
134.175.64.0/20 maxlen: 20
134.175.80.0/20 maxlen: 20
134.175.96.0/20 maxlen: 20
134.175.112.0/20 maxlen: 20
134.175.128.0/20 maxlen: 20
134.175.144.0/20 maxlen: 20
134.175.160.0/20 maxlen: 20
134.175.176.0/20 maxlen: 20
134.175.192.0/20 maxlen: 20
134.175.208.0/20 maxlen: 20
134.175.208.0/21 maxlen: 21
134.175.224.0/20 maxlen: 20
134.175.232.0/21 maxlen: 21
134.175.240.0/20 maxlen: 20
146.56.192.0/18 maxlen: 18
146.56.192.0/19 maxlen: 19
146.56.224.0/19 maxlen: 19
148.70.0.0/16 maxlen: 16
148.70.0.0/20 maxlen: 20
148.70.16.0/20 maxlen: 20
148.70.32.0/20 maxlen: 20
148.70.48.0/20 maxlen: 20
148.70.64.0/20 maxlen: 20
148.70.80.0/20 maxlen: 20
148.70.96.0/20 maxlen: 20
148.70.112.0/20 maxlen: 20
148.70.128.0/20 maxlen: 20
148.70.144.0/20 maxlen: 20
148.70.160.0/20 maxlen: 20
148.70.176.0/20 maxlen: 20
148.70.192.0/20 maxlen: 20
148.70.208.0/20 maxlen: 20
148.70.224.0/20 maxlen: 20
148.70.240.0/20 maxlen: 20
152.136.0.0/16 maxlen: 16
152.136.0.0/20 maxlen: 20
152.136.16.0/20 maxlen: 20
152.136.32.0/19 maxlen: 19
152.136.64.0/20 maxlen: 20
152.136.80.0/20 maxlen: 20
152.136.96.0/22 maxlen: 22
152.136.100.0/22 maxlen: 22
152.136.104.0/22 maxlen: 22
152.136.108.0/22 maxlen: 22
152.136.112.0/22 maxlen: 22
152.136.116.0/22 maxlen: 22
152.136.120.0/22 maxlen: 22
152.136.124.0/22 maxlen: 22
152.136.128.0/22 maxlen: 22
152.136.132.0/22 maxlen: 22
152.136.136.0/22 maxlen: 22
152.136.140.0/22 maxlen: 22
152.136.144.0/22 maxlen: 22
152.136.148.0/22 maxlen: 22
152.136.152.0/22 maxlen: 22
152.136.156.0/22 maxlen: 22
152.136.160.0/22 maxlen: 22
152.136.164.0/22 maxlen: 22
152.136.168.0/22 maxlen: 22
152.136.172.0/22 maxlen: 22
152.136.176.0/22 maxlen: 22
152.136.180.0/22 maxlen: 22
152.136.184.0/22 maxlen: 22
152.136.188.0/22 maxlen: 22
152.136.192.0/18 maxlen: 18
152.136.192.0/22 maxlen: 22
152.136.196.0/22 maxlen: 22
152.136.200.0/22 maxlen: 22
152.136.204.0/22 maxlen: 22
152.136.208.0/22 maxlen: 22
152.136.212.0/22 maxlen: 22
152.136.216.0/22 maxlen: 22
152.136.220.0/22 maxlen: 22
152.136.224.0/22 maxlen: 22
152.136.228.0/22 maxlen: 22
152.136.232.0/22 maxlen: 22
152.136.236.0/22 maxlen: 22
152.136.240.0/22 maxlen: 22
159.75.0.0/16 maxlen: 16
159.75.0.0/18 maxlen: 18
159.75.64.0/18 maxlen: 18
159.75.128.0/18 maxlen: 18
159.75.192.0/18 maxlen: 18
162.14.0.0/16 maxlen: 16
162.14.0.0/22 maxlen: 22
162.14.4.0/22 maxlen: 22
162.14.8.0/22 maxlen: 22
162.14.12.0/22 maxlen: 22
162.14.16.0/22 maxlen: 22
162.14.20.0/22 maxlen: 22
162.14.24.0/22 maxlen: 22
162.14.28.0/22 maxlen: 22
162.14.32.0/22 maxlen: 22
162.14.36.0/22 maxlen: 22
162.14.40.0/22 maxlen: 22
162.14.44.0/22 maxlen: 22
162.14.44.0/24 maxlen: 24
162.14.45.0/24 maxlen: 24
162.14.46.0/24 maxlen: 24
162.14.47.0/24 maxlen: 24
162.14.48.0/22 maxlen: 22
162.14.52.0/22 maxlen: 22
162.14.56.0/22 maxlen: 22
162.14.64.0/18 maxlen: 18
162.14.128.0/20 maxlen: 20
162.14.144.0/20 maxlen: 20
162.14.160.0/20 maxlen: 20
162.14.176.0/20 maxlen: 20
162.14.192.0/18 maxlen: 18
172.81.192.0/18 maxlen: 18
172.81.192.0/21 maxlen: 21
172.81.200.0/23 maxlen: 23
172.81.202.0/23 maxlen: 23
172.81.204.0/22 maxlen: 22
172.81.208.0/20 maxlen: 20
172.81.224.0/20 maxlen: 20
172.81.240.0/20 maxlen: 20
192.144.128.0/17 maxlen: 17
192.144.128.0/18 maxlen: 18
192.144.192.0/18 maxlen: 18
192.144.248.0/23 maxlen: 23
192.144.250.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.crl
rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TJ5nHq1GTgRiO7BD_WLnuip37dQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Jul 2026 03:23:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:f0:b0:31:86:1d:59:7a:2f:53:d2:22:d5:e7:93:f8:ac:1f:16:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91209740000, serialNumber=4C9E671EAD464E04623BB043FD62E7BA2A77EDD4
Validity
Not Before: Jun 30 11:25:35 2026 GMT
Not After : Jun 29 11:30:35 2027 GMT
Subject: CN=6A29AB508C5FB026BD719468944072415CCBB4F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:00:ca:0c:22:0e:03:d8:8b:af:52:46:74:3a:
9d:de:63:58:6e:15:ac:4d:b9:3f:61:d7:c7:83:e3:
5f:34:e6:3d:9d:4f:b1:25:b3:1c:8d:10:ce:73:6e:
11:64:90:62:6c:26:36:0f:9f:c5:b1:bd:58:62:f3:
fe:88:56:45:f7:4f:bb:04:59:69:ee:07:56:c9:dc:
89:a9:51:49:c9:9f:74:7a:c4:51:a8:ad:71:a0:b7:
df:de:8c:66:7e:a0:e1:4e:4e:9c:85:ec:87:09:7f:
ab:0c:ea:75:85:19:87:95:54:91:5b:04:55:d8:ae:
fb:12:3b:bd:1b:f9:86:58:fd:6b:85:a8:a3:7c:97:
31:31:8e:96:ac:de:6f:dd:9a:c2:60:f6:78:3c:a7:
c2:d8:2e:c5:05:ad:5f:2e:41:b2:39:8f:23:16:73:
2f:b1:f1:d6:f8:12:d4:12:5b:64:e1:40:d4:80:a3:
49:79:13:f2:6a:72:13:5e:dc:b5:5d:81:ea:e3:3a:
79:ef:fc:e2:1a:6d:01:03:01:55:b0:68:f2:d3:05:
fb:27:62:09:31:27:45:c3:6d:9c:dd:a6:7c:fb:b1:
c6:f1:56:7a:c6:2d:3c:3d:29:4f:4c:3e:0e:24:62:
3c:63:34:9f:f2:31:fc:1d:e0:59:0a:ae:20:8b:41:
e7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:29:AB:50:8C:5F:B0:26:BD:71:94:68:94:40:72:41:5C:CB:B4:F3
X509v3 Authority Key Identifier:
keyid:4C:9E:67:1E:AD:46:4E:04:62:3B:B0:43:FD:62:E7:BA:2A:77:ED:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TJ5nHq1GTgRiO7BD_WLnuip37dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/AS45090.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.40.192.0/18
129.28.0.0/16
129.204.0.0/16
129.211.0.0/16
132.232.0.0/16
134.175.0.0/16
146.56.192.0/18
148.70.0.0/16
152.136.0.0/16
159.75.0.0/16
162.14.0.0/16
172.81.192.0/18
192.144.128.0/17
Signature Algorithm: sha256WithRSAEncryption
23:85:02:23:31:a4:3a:20:a1:43:f3:bf:dc:85:40:df:b6:74:
d0:83:af:d3:a1:be:35:05:e9:62:f6:e0:46:e7:37:a9:71:d2:
f2:df:3b:ee:27:e5:84:e7:de:30:33:a0:e7:4d:2b:17:c7:d4:
da:9c:1e:85:c0:ce:7c:10:f4:23:66:49:dc:f6:c4:dc:3f:77:
a6:d7:78:f9:a3:ce:ed:1b:44:4a:c4:a9:e0:96:23:34:ad:42:
03:e7:79:59:28:74:ee:9d:30:f5:e5:67:31:d1:03:e6:82:e2:
dc:34:c6:97:51:cb:81:b0:bb:6c:ba:4c:e1:8b:52:ee:89:5f:
5f:ed:cc:c0:eb:d4:9c:70:61:47:29:0c:88:f5:73:80:09:2d:
34:75:93:d6:16:6c:3d:04:81:d2:c1:47:37:e1:77:f2:da:14:
cd:5d:04:17:86:21:a4:26:a8:58:d1:29:49:63:56:b8:83:f6:
91:5c:b9:19:4a:65:5e:62:cd:27:32:f6:9c:c6:fa:aa:25:18:
fa:55:51:50:33:d4:9a:f7:18:72:2f:0d:ad:9d:e4:a1:fd:30:
8d:11:3d:b2:c2:19:5c:22:f9:cd:d9:ac:32:50:71:9c:21:7a:
b9:6f:7b:61:59:37:79:dd:35:54:66:28:9b:0d:8e:00:ba:f1:
e9:14:2d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:29:13 2026 by rpki-client