Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121615833404080165/2/AS45090.roa
File:                     AS45090.roa (raw, json)
Hash identifier:          HEeeGmrOuHbjsvEBYWjApEe9XYDpObqvfUUdLqGqjVU=
Subject key identifier:   37:16:6B:B7:42:64:B9:C8:48:20:7F:E6:15:37:51:DC:A6:64:01:A0
Certificate issuer:       /CN=A91209740000/serialNumber=6845D331C417296D3A93181DD9010591B1F70D50
Certificate serial:       127A6D894314C07746897A8246DC8538299F6766
Authority key identifier: 68:45:D3:31:C4:17:29:6D:3A:93:18:1D:D9:01:05:91:B1:F7:0D:50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEXTMcQXKW06kxgd2QEFkbH3DVA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/AS45090.roa
Signing time:             Tue 30 Jun 2026 11:27:01 +0000
ROA not before:           Tue 30 Jun 2026 11:22:01 +0000
ROA not after:            Tue 29 Jun 2027 11:27:01 +0000
asID:                     45090
IP address blocks:        43.136.0.0/14 maxlen: 14
                          43.136.0.0/18 maxlen: 18
                          43.136.64.0/18 maxlen: 18
                          43.136.128.0/18 maxlen: 18
                          43.136.192.0/18 maxlen: 18
                          43.137.0.0/18 maxlen: 18
                          43.137.64.0/18 maxlen: 18
                          43.137.128.0/19 maxlen: 19
                          43.137.160.0/19 maxlen: 19
                          43.137.192.0/19 maxlen: 19
                          43.137.224.0/20 maxlen: 20
                          43.137.240.0/20 maxlen: 20
                          43.138.0.0/18 maxlen: 18
                          43.138.64.0/18 maxlen: 18
                          43.138.128.0/18 maxlen: 18
                          43.138.192.0/18 maxlen: 18
                          43.139.0.0/18 maxlen: 18
                          43.139.64.0/18 maxlen: 18
                          43.139.128.0/18 maxlen: 18
                          43.139.192.0/18 maxlen: 18
                          43.140.0.0/14 maxlen: 14
                          43.140.0.0/18 maxlen: 18
                          43.140.64.0/18 maxlen: 18
                          43.140.128.0/18 maxlen: 18
                          43.140.130.0/24 maxlen: 24
                          43.140.192.0/18 maxlen: 18
                          43.141.0.0/19 maxlen: 19
                          43.141.32.0/19 maxlen: 19
                          43.141.64.0/19 maxlen: 19
                          43.141.96.0/19 maxlen: 19
                          43.141.128.0/19 maxlen: 19
                          43.141.160.0/19 maxlen: 19
                          43.141.192.0/18 maxlen: 18
                          43.142.0.0/18 maxlen: 18
                          43.142.64.0/18 maxlen: 18
                          43.142.128.0/18 maxlen: 18
                          43.142.192.0/18 maxlen: 18
                          43.143.0.0/18 maxlen: 18
                          43.143.64.0/18 maxlen: 18
                          43.143.128.0/18 maxlen: 18
                          43.143.192.0/18 maxlen: 18
                          43.144.0.0/15 maxlen: 15
                          43.144.0.0/18 maxlen: 18
                          43.144.64.0/18 maxlen: 18
                          43.144.128.0/18 maxlen: 18
                          43.144.192.0/18 maxlen: 18
                          43.145.0.0/18 maxlen: 18
                          43.145.64.0/18 maxlen: 18
                          43.176.0.0/14 maxlen: 14
                          43.179.128.0/18 maxlen: 18
                          43.179.192.0/18 maxlen: 18
                          43.180.0.0/16 maxlen: 16
                          43.180.0.0/19 maxlen: 19
                          43.180.64.0/19 maxlen: 19
                          43.180.96.0/20 maxlen: 20
                          43.180.128.0/18 maxlen: 18
                          43.180.192.0/19 maxlen: 19
                          43.180.224.0/20 maxlen: 20
                          43.180.240.0/20 maxlen: 20
                          101.33.128.0/17 maxlen: 17
                          101.33.128.0/22 maxlen: 22
                          101.33.132.0/22 maxlen: 22
                          101.33.136.0/22 maxlen: 22
                          101.33.140.0/22 maxlen: 22
                          101.33.144.0/22 maxlen: 22
                          101.33.148.0/22 maxlen: 22
                          101.33.152.0/22 maxlen: 22
                          101.33.156.0/22 maxlen: 22
                          101.33.160.0/22 maxlen: 22
                          101.33.164.0/22 maxlen: 22
                          101.33.168.0/22 maxlen: 22
                          101.33.172.0/22 maxlen: 22
                          101.33.176.0/22 maxlen: 22
                          101.33.180.0/22 maxlen: 22
                          101.33.184.0/22 maxlen: 22
                          101.33.188.0/22 maxlen: 22
                          101.33.192.0/18 maxlen: 18
                          101.34.0.0/15 maxlen: 15
                          101.34.0.0/18 maxlen: 18
                          101.34.64.0/18 maxlen: 18
                          101.34.128.0/18 maxlen: 18
                          101.34.192.0/18 maxlen: 18
                          101.35.0.0/18 maxlen: 18
                          101.35.64.0/18 maxlen: 18
                          101.35.128.0/18 maxlen: 18
                          101.35.192.0/18 maxlen: 18
                          101.42.0.0/15 maxlen: 15
                          101.42.0.0/18 maxlen: 18
                          101.42.64.0/18 maxlen: 18
                          101.42.128.0/18 maxlen: 18
                          101.42.192.0/18 maxlen: 18
                          101.43.0.0/18 maxlen: 18
                          101.43.64.0/18 maxlen: 18
                          101.43.128.0/18 maxlen: 18
                          101.43.192.0/18 maxlen: 18
                          114.117.128.0/21 maxlen: 21
                          114.117.128.0/22 maxlen: 22
                          114.117.132.0/22 maxlen: 22
                          114.117.132.0/24 maxlen: 24
                          114.117.135.0/24 maxlen: 24
                          114.117.136.0/21 maxlen: 21
                          114.117.136.0/22 maxlen: 22
                          114.117.140.0/22 maxlen: 22
                          114.117.160.0/19 maxlen: 19
                          114.117.192.0/18 maxlen: 18
                          118.24.0.0/15 maxlen: 15
                          118.24.0.0/22 maxlen: 22
                          118.24.4.0/22 maxlen: 22
                          118.24.8.0/22 maxlen: 22
                          118.24.12.0/22 maxlen: 22
                          118.24.16.0/22 maxlen: 22
                          118.24.20.0/22 maxlen: 22
                          118.24.24.0/22 maxlen: 22
                          118.24.28.0/22 maxlen: 22
                          118.24.32.0/22 maxlen: 22
                          118.24.36.0/22 maxlen: 22
                          118.24.40.0/22 maxlen: 22
                          118.24.44.0/22 maxlen: 22
                          118.24.48.0/22 maxlen: 22
                          118.24.52.0/22 maxlen: 22
                          118.24.56.0/22 maxlen: 22
                          118.24.60.0/22 maxlen: 22
                          118.24.64.0/22 maxlen: 22
                          118.24.68.0/22 maxlen: 22
                          118.24.72.0/22 maxlen: 22
                          118.24.76.0/22 maxlen: 22
                          118.24.80.0/22 maxlen: 22
                          118.24.84.0/22 maxlen: 22
                          118.24.88.0/22 maxlen: 22
                          118.24.92.0/22 maxlen: 22
                          118.24.96.0/22 maxlen: 22
                          118.24.100.0/22 maxlen: 22
                          118.24.104.0/22 maxlen: 22
                          118.24.108.0/22 maxlen: 22
                          118.24.112.0/22 maxlen: 22
                          118.24.116.0/22 maxlen: 22
                          118.24.120.0/22 maxlen: 22
                          118.24.124.0/22 maxlen: 22
                          118.24.128.0/23 maxlen: 23
                          118.24.130.0/23 maxlen: 23
                          118.24.132.0/22 maxlen: 22
                          118.24.136.0/22 maxlen: 22
                          118.24.140.0/22 maxlen: 22
                          118.24.144.0/22 maxlen: 22
                          118.24.148.0/22 maxlen: 22
                          118.24.152.0/22 maxlen: 22
                          118.24.156.0/22 maxlen: 22
                          118.24.160.0/22 maxlen: 22
                          118.24.164.0/22 maxlen: 22
                          118.24.168.0/22 maxlen: 22
                          118.24.172.0/22 maxlen: 22
                          118.24.176.0/22 maxlen: 22
                          118.24.180.0/22 maxlen: 22
                          118.24.184.0/22 maxlen: 22
                          118.24.188.0/23 maxlen: 23
                          118.24.190.0/23 maxlen: 23
                          118.24.192.0/20 maxlen: 20
                          118.24.192.0/24 maxlen: 24
                          118.24.208.0/20 maxlen: 20
                          118.24.224.0/22 maxlen: 22
                          118.24.228.0/22 maxlen: 22
                          118.24.232.0/22 maxlen: 22
                          118.24.236.0/22 maxlen: 22
                          118.24.240.0/22 maxlen: 22
                          118.24.244.0/22 maxlen: 22
                          118.24.248.0/22 maxlen: 22
                          118.24.252.0/22 maxlen: 22
                          118.25.0.0/22 maxlen: 22
                          118.25.4.0/22 maxlen: 22
                          118.25.8.0/22 maxlen: 22
                          118.25.12.0/22 maxlen: 22
                          118.25.16.0/22 maxlen: 22
                          118.25.20.0/22 maxlen: 22
                          118.25.24.0/22 maxlen: 22
                          118.25.28.0/22 maxlen: 22
                          118.25.32.0/22 maxlen: 22
                          118.25.36.0/22 maxlen: 22
                          118.25.40.0/22 maxlen: 22
                          118.25.44.0/22 maxlen: 22
                          118.25.48.0/22 maxlen: 22
                          118.25.52.0/22 maxlen: 22
                          118.25.56.0/22 maxlen: 22
                          118.25.60.0/22 maxlen: 22
                          118.25.64.0/22 maxlen: 22
                          118.25.68.0/22 maxlen: 22
                          118.25.72.0/22 maxlen: 22
                          118.25.76.0/22 maxlen: 22
                          118.25.80.0/22 maxlen: 22
                          118.25.84.0/22 maxlen: 22
                          118.25.88.0/22 maxlen: 22
                          118.25.92.0/22 maxlen: 22
                          118.25.96.0/22 maxlen: 22
                          118.25.100.0/22 maxlen: 22
                          118.25.104.0/22 maxlen: 22
                          118.25.108.0/22 maxlen: 22
                          118.25.112.0/22 maxlen: 22
                          118.25.116.0/22 maxlen: 22
                          118.25.120.0/22 maxlen: 22
                          118.25.124.0/22 maxlen: 22
                          118.25.128.0/22 maxlen: 22
                          118.25.132.0/22 maxlen: 22
                          118.25.136.0/22 maxlen: 22
                          118.25.140.0/22 maxlen: 22
                          118.25.144.0/22 maxlen: 22
                          118.25.148.0/22 maxlen: 22
                          118.25.152.0/22 maxlen: 22
                          118.25.156.0/22 maxlen: 22
                          118.25.160.0/22 maxlen: 22
                          118.25.164.0/22 maxlen: 22
                          118.25.168.0/22 maxlen: 22
                          118.25.172.0/22 maxlen: 22
                          118.25.176.0/22 maxlen: 22
                          118.25.180.0/22 maxlen: 22
                          118.25.184.0/22 maxlen: 22
                          118.25.188.0/22 maxlen: 22
                          118.25.192.0/22 maxlen: 22
                          118.25.196.0/22 maxlen: 22
                          118.25.200.0/22 maxlen: 22
                          118.25.204.0/22 maxlen: 22
                          118.25.208.0/20 maxlen: 20
                          118.25.224.0/20 maxlen: 20
                          118.25.240.0/20 maxlen: 20
                          118.195.128.0/17 maxlen: 17
                          118.195.128.0/18 maxlen: 18
                          118.195.192.0/18 maxlen: 18
                          150.158.0.0/16 maxlen: 16
                          150.158.0.0/18 maxlen: 18
                          150.158.64.0/18 maxlen: 18
                          150.158.128.0/18 maxlen: 18
                          150.158.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEXTMcQXKW06kxgd2QEFkbH3DVA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 Jul 2026 01:22:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:7a:6d:89:43:14:c0:77:46:89:7a:82:46:dc:85:38:29:9f:67:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91209740000, serialNumber=6845D331C417296D3A93181DD9010591B1F70D50
        Validity
            Not Before: Jun 30 11:22:01 2026 GMT
            Not After : Jun 29 11:27:01 2027 GMT
        Subject: CN=37166BB74264B9C848207FE6153751DCA66401A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1d:c9:07:6b:f6:01:45:ce:9b:6f:b3:7a:ee:
                    7e:aa:11:33:31:4b:c4:cc:64:97:9c:05:30:de:e5:
                    24:ec:09:1e:48:a7:ec:0d:55:c5:fa:98:1b:b7:8b:
                    0b:97:a8:f7:2e:4e:9c:1d:72:d8:c8:4f:9e:74:21:
                    c8:9d:49:69:1d:aa:51:40:57:2d:4a:81:c9:96:3f:
                    0d:82:80:70:30:b9:2f:c0:76:a2:6c:6e:b1:27:0d:
                    82:4f:a1:09:5c:e2:7f:9a:cb:45:69:27:9e:e7:2e:
                    ae:d7:c5:d8:e4:ee:63:48:62:8f:b1:55:f4:c8:e7:
                    b5:22:03:dd:25:83:f9:69:0f:c0:00:98:1a:98:e6:
                    09:9a:30:22:f8:c0:ba:37:19:db:2f:35:18:ce:1e:
                    5f:ad:aa:91:d5:e4:a1:53:19:60:6e:04:f8:6c:93:
                    9a:3e:06:03:51:4d:c7:e5:56:d0:b2:a0:60:0a:1e:
                    b7:b4:89:16:f3:08:0f:1b:ce:fa:70:7e:5d:c5:a9:
                    65:54:5f:3b:ab:eb:be:1c:fb:bd:d9:03:c7:8d:3b:
                    58:9c:16:45:1a:90:45:2b:b4:cd:fe:d2:4f:ab:d2:
                    25:61:9e:0a:87:b8:1c:37:21:51:e6:c8:f0:79:4c:
                    2e:2c:dc:96:95:62:79:97:6f:ba:8f:9f:14:03:9f:
                    52:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:16:6B:B7:42:64:B9:C8:48:20:7F:E6:15:37:51:DC:A6:64:01:A0
            X509v3 Authority Key Identifier:
                keyid:68:45:D3:31:C4:17:29:6D:3A:93:18:1D:D9:01:05:91:B1:F7:0D:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEXTMcQXKW06kxgd2QEFkbH3DVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/AS45090.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.136.0.0-43.145.255.255
                  43.176.0.0-43.180.255.255
                  101.33.128.0-101.35.255.255
                  101.42.0.0/15
                  114.117.128.0/20
                  114.117.160.0-114.117.255.255
                  118.24.0.0/15
                  118.195.128.0/17
                  150.158.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         68:97:14:8e:e4:48:cc:16:d9:81:34:5d:4f:a2:12:11:d7:a8:
         8f:40:4f:49:90:cc:6b:a5:85:08:9a:7c:cb:11:c9:bf:40:e8:
         a5:7e:6d:e0:3e:ad:88:bf:d3:ce:85:a7:67:4a:7e:59:1d:43:
         71:2d:3b:bc:19:6b:df:ee:97:d4:d6:6c:b3:27:5c:e7:e7:a0:
         a3:fc:78:76:20:fd:55:9f:2e:4a:8d:0b:ff:82:c1:87:85:77:
         b9:80:fd:0f:19:f7:c5:73:0e:69:84:5a:7c:f5:05:9e:4b:4b:
         a8:01:46:9c:0f:b8:0a:20:08:96:fd:8e:cb:67:3b:5b:59:84:
         76:aa:f4:63:44:cf:4d:7b:2f:3a:d8:64:a6:2a:fb:23:21:94:
         bf:71:ad:08:a3:84:57:bb:7b:ff:b5:58:3e:12:7e:39:e9:82:
         f5:2f:cc:d1:3c:43:fc:f1:70:ae:7f:9d:5e:0f:47:46:bc:40:
         2c:17:f9:33:bb:45:5a:f6:e6:26:5b:62:54:9e:22:bc:ed:7c:
         0a:04:b0:81:25:01:0c:f4:2f:64:de:eb:4a:38:4a:e6:3c:54:
         21:5e:43:86:3a:c2:dc:ff:6c:9e:d4:d5:1b:e0:ee:1b:a4:fb:
         4e:a7:5a:92:5b:bf:d3:cd:15:b7:6e:1f:aa:31:52:90:52:ae:
         0c:ba:08:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 09:20:49 2026 by rpki-client