Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3139322e302f32322d3232203d3e203435303833.roa
File:                     312e34352e3139322e302f32322d3232203d3e203435303833.roa (raw, json)
Hash identifier:          EKPZ1LqoZ71+7f9K3J/u9pXUmVBp9TL5+GJEIUfjncI=
Subject key identifier:   11:36:1C:62:FF:BE:28:84:8B:77:47:FC:52:34:82:92:0B:9E:DC:73
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       0BCDDFE8BCCB06DC392BBA3DB75492EF48A916E8
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3139322e302f32322d3232203d3e203435303833.roa
Signing time:             Mon 08 Jun 2026 03:03:19 +0000
ROA not before:           Mon 08 Jun 2026 02:58:19 +0000
ROA not after:            Mon 07 Jun 2027 03:03:19 +0000
asID:                     45083
IP address blocks:        1.45.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 10:05:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:cd:df:e8:bc:cb:06:dc:39:2b:ba:3d:b7:54:92:ef:48:a9:16:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun  8 02:58:19 2026 GMT
            Not After : Jun  7 03:03:19 2027 GMT
        Subject: CN=11361C62FFBE28848B7747FC523482920B9EDC73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:59:ed:97:aa:db:c5:a6:6e:6d:f1:38:9b:b9:
                    44:e2:11:89:1c:9c:f1:9d:a3:e9:ec:ad:8c:1b:fb:
                    89:c2:eb:76:1e:a6:7e:95:fe:b0:00:04:bf:93:20:
                    fd:98:9e:77:46:e1:59:d4:4f:40:b4:14:08:45:b3:
                    91:8d:b5:99:e2:f9:22:b2:38:af:89:6e:b3:08:3e:
                    46:c7:91:ee:10:1a:5b:91:31:33:2d:82:f0:ff:73:
                    99:42:9e:a6:57:b4:06:71:a5:d0:d0:20:d0:a4:8a:
                    96:54:35:72:dc:c2:8c:b2:ab:a4:7f:95:68:b8:f1:
                    90:44:3a:b6:8e:98:e7:c7:2e:59:db:92:11:10:5b:
                    da:03:2d:1e:05:a4:a0:a2:ae:a9:ac:f3:81:93:fe:
                    7d:d6:9b:0c:22:b7:f6:bd:09:d2:f7:8a:c5:b5:81:
                    4b:1e:4f:46:56:b2:fd:20:39:e3:48:1b:25:ae:d3:
                    2b:36:74:03:b5:dc:78:9e:36:80:1e:1e:8b:0e:ca:
                    c3:4d:35:6b:3b:6c:a7:f0:b8:57:c7:b7:f1:bf:a2:
                    b0:68:f6:69:ca:04:db:a0:ad:dd:97:07:bc:06:a7:
                    14:9e:6e:ff:fc:31:bf:4a:fc:70:db:e8:91:4a:e3:
                    b8:c6:02:c0:8f:b9:26:74:c7:f0:f6:76:a5:13:3f:
                    bc:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:36:1C:62:FF:BE:28:84:8B:77:47:FC:52:34:82:92:0B:9E:DC:73
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3139322e302f32322d3232203d3e203435303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.45.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:f1:4e:19:10:48:51:58:f4:09:9d:a1:02:48:1e:d6:44:a9:
         89:24:ce:c1:9a:f8:b8:e3:3b:f5:69:ed:a4:b5:67:03:bd:69:
         0c:83:37:c4:88:fd:dd:ce:42:f4:f7:27:1b:6d:76:73:0d:6a:
         fd:fb:2d:fc:73:42:d3:27:a0:b9:8f:53:50:27:0d:30:65:c9:
         c3:22:c2:3d:5a:11:51:be:2c:97:28:75:6f:72:e9:7c:50:0b:
         af:1e:eb:c6:c8:3d:14:30:fc:9b:96:09:88:84:5f:c9:32:29:
         35:7a:62:1b:d7:29:f7:80:17:58:06:f5:7c:70:cc:d0:74:f1:
         8e:7e:e2:7e:04:67:e3:1a:ae:87:05:da:04:31:71:d2:62:79:
         dc:4a:76:3e:73:41:89:63:a0:68:8f:61:3d:b6:c5:b1:d5:be:
         1b:65:43:3a:ac:f4:c0:e8:a4:71:34:68:0d:e7:ee:c4:70:b8:
         d0:ba:a7:c8:16:0c:cd:04:3f:9c:72:07:d0:f5:40:a4:3d:c9:
         b6:84:ab:1f:ba:d1:11:14:bb:e6:60:b8:20:b5:da:b9:d4:9e:
         eb:bd:e8:63:3a:e4:b3:5a:6e:6a:26:a8:30:db:d0:ac:9c:77:
         df:81:c4:72:55:15:77:04:ce:b6:32:1a:9f:bf:91:ec:08:64:
         60:98:8c:87
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUC83f6LzLBtw5K7o9t1SS70ipFugwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5
RjkzRjZGODAeFw0yNjA2MDgwMjU4MTlaFw0yNzA2MDcwMzAzMTlaMDMxMTAvBgNV
BAMTKDExMzYxQzYyRkZCRTI4ODQ4Qjc3NDdGQzUyMzQ4MjkyMEI5RURDNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqWe2XqtvFpm5t8TibuUTiEYkc
nPGdo+nsrYwb+4nC63Yepn6V/rAABL+TIP2YnndG4VnUT0C0FAhFs5GNtZni+SKy
OK+JbrMIPkbHke4QGluRMTMtgvD/c5lCnqZXtAZxpdDQINCkipZUNXLcwoyyq6R/
lWi48ZBEOraOmOfHLlnbkhEQW9oDLR4FpKCirqms84GT/n3Wmwwit/a9CdL3isW1
gUseT0ZWsv0gOeNIGyWu0ys2dAO13HieNoAeHosOysNNNWs7bKfwuFfHt/G/orBo
9mnKBNugrd2XB7wGpxSebv/8Mb9K/HDb6JFK47jGAsCPuSZ0x/D2dqUTP7wnAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUETYcYv++KISLd0f8UjSCkgue3HMwHwYDVR0j
BBgwFoAUpgmQqcpYkWQFBDK9BUc9z5+T9vgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NzU3NTQzNzUzMTI4MzQ3Ny8wL0E2MDk5MEE5Q0E1ODkxNjQwNTA0MzJCRDA1NDcz
RENGOUY5M0Y2RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5RjkzRjZGOC5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA3NTc1NDM3NTMxMjgzNDc3LzAvMzEyZTM0MzUyZTMx
MzkzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM0MzUzMDM4MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAIBLcAwDQYJKoZIhvcNAQELBQADggEBAFLxThkQSFFY9AmdoQJIHtZEqYkkzsGa
+LjjO/Vp7aS1ZwO9aQyDN8SI/d3OQvT3JxttdnMNav37LfxzQtMnoLmPU1AnDTBl
ycMiwj1aEVG+LJcodW9y6XxQC68e68bIPRQw/JuWCYiEX8kyKTV6YhvXKfeAF1gG
9XxwzNB08Y5+4n4EZ+MarocF2gQxcdJiedxKdj5zQYljoGiPYT22xbHVvhtlQzqs
9MDopHE0aA3n7sRwuNC6p8gWDM0EP5xyB9D1QKQ9ybaEqx+60REUu+ZguCC12rnU
nuu96GM65LNabmomqDDb0Kycd9+BxHJVFXcEzrYyGp+/kewIZGCYjIc=
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:58:26 2026 by rpki-client