Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121615833404080165/3/AS45090.roa
File: AS45090.roa (raw, json)
Hash identifier: sn70bdO2V7+ZbQfzexLi6sW+lrFjwUJxIN4L0R9gCzE=
Subject key identifier: 55:2E:49:B7:3B:23:BA:C7:DD:0B:A2:6F:26:6F:35:A8:B7:F2:69:79
Certificate issuer: /CN=A91209740000/serialNumber=A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353
Certificate serial: 54B96C86F95692761E84EEB6C09EFCA3AD714EC9
Authority key identifier: A3:AF:71:76:2F:A0:5E:5A:CE:3B:6A:3C:33:2C:AB:7F:29:AA:33:53
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/o69xdi-gXlrOO2o8MyyrfymqM1M.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/AS45090.roa
Signing time: Tue 30 Jun 2026 11:47:17 +0000
ROA not before: Tue 30 Jun 2026 11:42:17 +0000
ROA not after: Tue 29 Jun 2027 11:47:17 +0000
asID: 45090
IP address blocks: 62.234.0.0/16 maxlen: 16
62.234.0.0/20 maxlen: 20
62.234.16.0/20 maxlen: 20
62.234.32.0/20 maxlen: 20
62.234.48.0/20 maxlen: 20
62.234.64.0/20 maxlen: 20
62.234.80.0/20 maxlen: 20
62.234.96.0/20 maxlen: 20
62.234.112.0/20 maxlen: 20
62.234.128.0/20 maxlen: 20
62.234.144.0/20 maxlen: 20
62.234.160.0/20 maxlen: 20
62.234.176.0/20 maxlen: 20
62.234.192.0/20 maxlen: 20
62.234.208.0/20 maxlen: 20
62.234.224.0/20 maxlen: 20
62.234.232.0/22 maxlen: 22
62.234.236.0/22 maxlen: 22
62.234.240.0/22 maxlen: 22
62.234.244.0/22 maxlen: 22
62.234.248.0/22 maxlen: 22
62.234.252.0/22 maxlen: 22
81.68.0.0/14 maxlen: 14
81.68.0.0/18 maxlen: 18
81.68.64.0/18 maxlen: 18
81.68.128.0/18 maxlen: 18
81.68.192.0/18 maxlen: 18
81.69.0.0/18 maxlen: 18
81.69.64.0/18 maxlen: 18
81.69.128.0/18 maxlen: 18
81.69.192.0/18 maxlen: 18
81.70.0.0/18 maxlen: 18
81.70.64.0/18 maxlen: 18
81.70.128.0/18 maxlen: 18
81.70.192.0/18 maxlen: 18
81.71.0.0/18 maxlen: 18
81.71.64.0/18 maxlen: 18
81.71.128.0/18 maxlen: 18
81.71.192.0/18 maxlen: 18
82.156.0.0/15 maxlen: 15
82.156.0.0/18 maxlen: 18
82.156.64.0/18 maxlen: 18
82.156.128.0/18 maxlen: 18
82.156.192.0/18 maxlen: 18
82.157.0.0/18 maxlen: 18
82.157.64.0/18 maxlen: 18
82.157.128.0/18 maxlen: 18
82.157.192.0/18 maxlen: 18
94.191.0.0/17 maxlen: 17
94.191.0.0/20 maxlen: 20
94.191.16.0/20 maxlen: 20
94.191.32.0/20 maxlen: 20
94.191.48.0/20 maxlen: 20
94.191.64.0/20 maxlen: 20
94.191.80.0/20 maxlen: 20
94.191.96.0/20 maxlen: 20
94.191.112.0/20 maxlen: 20
109.244.0.0/16 maxlen: 16
109.244.0.0/20 maxlen: 20
109.244.0.0/21 maxlen: 21
109.244.0.0/23 maxlen: 23
109.244.8.0/23 maxlen: 23
109.244.10.0/23 maxlen: 23
109.244.16.0/20 maxlen: 20
109.244.32.0/20 maxlen: 20
109.244.48.0/20 maxlen: 20
109.244.64.0/20 maxlen: 20
109.244.80.0/20 maxlen: 20
109.244.96.0/20 maxlen: 20
109.244.96.0/24 maxlen: 24
109.244.112.0/20 maxlen: 20
109.244.128.0/21 maxlen: 21
109.244.136.0/22 maxlen: 22
109.244.140.0/22 maxlen: 22
109.244.144.0/21 maxlen: 21
109.244.152.0/21 maxlen: 21
109.244.160.0/21 maxlen: 21
109.244.168.0/22 maxlen: 22
109.244.172.0/22 maxlen: 22
109.244.176.0/21 maxlen: 21
109.244.184.0/21 maxlen: 21
109.244.192.0/22 maxlen: 22
109.244.196.0/22 maxlen: 22
109.244.200.0/22 maxlen: 22
109.244.204.0/22 maxlen: 22
109.244.208.0/20 maxlen: 20
109.244.224.0/21 maxlen: 21
109.244.236.0/22 maxlen: 22
109.244.240.0/21 maxlen: 21
109.244.248.0/21 maxlen: 21
128.108.0.0/16 maxlen: 16
128.108.0.0/21 maxlen: 21
128.108.8.0/21 maxlen: 21
128.108.16.0/21 maxlen: 21
128.108.24.0/21 maxlen: 21
128.108.32.0/21 maxlen: 21
128.108.40.0/21 maxlen: 21
128.108.48.0/21 maxlen: 21
128.108.56.0/21 maxlen: 21
128.108.64.0/20 maxlen: 20
128.108.80.0/21 maxlen: 21
128.108.88.0/21 maxlen: 21
128.108.96.0/21 maxlen: 21
128.108.104.0/21 maxlen: 21
128.108.112.0/20 maxlen: 20
128.108.128.0/21 maxlen: 21
128.108.136.0/21 maxlen: 21
128.108.144.0/20 maxlen: 20
128.108.160.0/21 maxlen: 21
128.108.168.0/21 maxlen: 21
128.108.176.0/20 maxlen: 20
128.108.192.0/21 maxlen: 21
128.108.200.0/21 maxlen: 21
128.108.208.0/21 maxlen: 21
128.108.224.0/20 maxlen: 20
128.108.240.0/20 maxlen: 20
188.131.128.0/17 maxlen: 17
188.131.128.0/20 maxlen: 20
188.131.144.0/20 maxlen: 20
188.131.160.0/20 maxlen: 20
188.131.176.0/20 maxlen: 20
188.131.192.0/20 maxlen: 20
188.131.208.0/20 maxlen: 20
188.131.208.0/23 maxlen: 23
188.131.224.0/20 maxlen: 20
188.131.240.0/20 maxlen: 20
193.112.0.0/16 maxlen: 16
193.112.0.0/18 maxlen: 18
193.112.0.0/23 maxlen: 23
193.112.2.0/23 maxlen: 23
193.112.4.0/23 maxlen: 23
193.112.6.0/23 maxlen: 23
193.112.8.0/23 maxlen: 23
193.112.10.0/23 maxlen: 23
193.112.12.0/23 maxlen: 23
193.112.14.0/23 maxlen: 23
193.112.16.0/23 maxlen: 23
193.112.18.0/23 maxlen: 23
193.112.64.0/19 maxlen: 19
193.112.96.0/20 maxlen: 20
193.112.112.0/23 maxlen: 23
193.112.114.0/23 maxlen: 23
193.112.116.0/23 maxlen: 23
193.112.118.0/23 maxlen: 23
193.112.120.0/21 maxlen: 21
193.112.128.0/18 maxlen: 18
193.112.192.0/18 maxlen: 18
212.64.0.0/17 maxlen: 17
212.64.0.0/20 maxlen: 20
212.64.16.0/20 maxlen: 20
212.64.32.0/20 maxlen: 20
212.64.48.0/20 maxlen: 20
212.64.62.0/23 maxlen: 23
212.64.64.0/20 maxlen: 20
212.64.80.0/20 maxlen: 20
212.64.96.0/20 maxlen: 20
212.64.112.0/20 maxlen: 20
212.129.128.0/17 maxlen: 17
212.129.128.0/20 maxlen: 20
212.129.144.0/20 maxlen: 20
212.129.160.0/22 maxlen: 22
212.129.164.0/22 maxlen: 22
212.129.168.0/21 maxlen: 21
212.129.176.0/20 maxlen: 20
212.129.192.0/20 maxlen: 20
212.129.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.crl
rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/o69xdi-gXlrOO2o8MyyrfymqM1M.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Jul 2026 16:13:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:b9:6c:86:f9:56:92:76:1e:84:ee:b6:c0:9e:fc:a3:ad:71:4e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91209740000, serialNumber=A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353
Validity
Not Before: Jun 30 11:42:17 2026 GMT
Not After : Jun 29 11:47:17 2027 GMT
Subject: CN=552E49B73B23BAC7DD0BA26F266F35A8B7F26979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:64:0d:5a:3a:22:6a:8e:41:24:85:03:58:3b:
83:9e:65:34:f1:a9:8c:78:a4:5b:80:13:8b:96:d0:
90:51:5a:50:db:d6:4e:02:13:c4:47:dc:2e:a3:89:
4b:2d:a1:7d:04:0d:d6:21:f8:e5:cb:89:0f:70:b1:
64:ba:61:cc:d4:53:e5:ec:ef:0b:65:ff:b3:4e:34:
76:b4:93:21:22:f5:27:eb:57:50:a6:b9:12:2d:b1:
03:d5:98:a1:c2:7d:da:81:35:cb:53:65:5a:14:a6:
94:40:d4:51:ee:bd:fa:a4:7a:ba:8b:39:ce:48:9d:
bd:da:62:5e:cd:ad:00:1d:f5:c2:ac:76:ef:60:a2:
cf:59:13:ea:9c:ea:1b:9f:37:bc:99:50:47:63:5b:
7d:24:f8:d9:39:bf:0f:8f:ee:7e:f4:ea:6e:3f:d8:
6f:be:03:5c:67:86:65:ea:28:50:53:34:dd:1d:8d:
6b:75:8e:a5:03:cb:91:0d:cc:4b:a4:ac:5d:52:e3:
d9:41:f2:3d:ca:7b:60:45:69:96:c6:5d:b5:f3:6d:
fe:cb:cb:bf:cf:3e:c5:c9:09:c0:55:66:27:49:29:
26:39:e9:f6:f4:aa:cc:58:0f:f6:2e:e2:44:e9:6f:
b2:f9:bf:f4:f3:e8:ae:a5:0c:34:7c:33:c2:42:b0:
25:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2E:49:B7:3B:23:BA:C7:DD:0B:A2:6F:26:6F:35:A8:B7:F2:69:79
X509v3 Authority Key Identifier:
keyid:A3:AF:71:76:2F:A0:5E:5A:CE:3B:6A:3C:33:2C:AB:7F:29:AA:33:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/o69xdi-gXlrOO2o8MyyrfymqM1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/AS45090.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.234.0.0/16
81.68.0.0/14
82.156.0.0/15
94.191.0.0/17
109.244.0.0/16
128.108.0.0/16
188.131.128.0/17
193.112.0.0/16
212.64.0.0/17
212.129.128.0/17
Signature Algorithm: sha256WithRSAEncryption
c2:4c:b7:74:71:bf:bb:2d:b3:48:65:09:29:82:2e:8b:3c:12:
03:1c:8d:86:16:36:14:b2:7e:b0:b4:9d:66:29:8c:e6:90:3d:
11:2b:51:15:7b:2d:ac:9f:4d:2a:05:b6:4c:92:67:0a:ab:60:
42:9a:8f:a9:e0:16:18:0c:cc:5b:be:90:0d:25:e6:d3:87:f4:
75:8f:18:d7:02:6e:4d:e0:b9:dd:5a:72:2e:bd:ca:09:96:21:
e4:12:e8:ed:97:dd:f8:e5:0e:76:86:b5:58:46:94:08:5d:7a:
d9:f5:d2:87:8d:f1:7c:13:98:20:bb:79:23:b9:7d:96:fc:ca:
ea:2b:28:d0:af:7f:73:6e:53:d9:8b:b1:4f:34:b1:5c:99:2c:
57:35:94:1b:b2:24:88:ae:77:8b:8e:46:f6:29:44:70:c5:70:
81:9b:30:30:06:be:f3:d3:a3:ae:33:de:5c:5d:6c:57:82:14:
00:ed:e3:17:ec:41:b7:fe:ea:e4:b9:81:d5:67:82:9e:21:95:
1d:7a:33:1f:9e:76:0c:53:d6:a7:17:6f:a2:4b:4f:f8:3a:d6:
16:29:d2:5f:78:10:65:d2:ce:a8:16:eb:41:19:a1:76:e7:9d:
e7:4e:7c:b1:4f:5f:85:1c:64:d8:b1:c2:9c:18:ef:25:a7:38:
83:7c:f7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 06:08:42 2026 by rpki-client