Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e302e302f32322d3232203d3e2034383131.roa
File:                     3137352e3130322e302e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier:          kMArvboT86faJimGf7pXJRl2/+u5NYSVDIFh1kMb9vw=
Subject key identifier:   0A:38:A5:DB:FD:36:9F:23:54:0E:25:02:63:D6:0F:A5:EB:19:E5:12
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       1C04AA738C6370EA1C754E2414FD85F96D8F69F6
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e302e302f32322d3232203d3e2034383131.roa
Signing time:             Thu 07 May 2026 01:35:07 +0000
ROA not before:           Thu 07 May 2026 01:30:07 +0000
ROA not after:            Thu 06 May 2027 01:35:07 +0000
asID:                     4811
IP address blocks:        175.102.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:04:aa:73:8c:63:70:ea:1c:75:4e:24:14:fd:85:f9:6d:8f:69:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: May  7 01:30:07 2026 GMT
            Not After : May  6 01:35:07 2027 GMT
        Subject: CN=0A38A5DBFD369F23540E250263D60FA5EB19E512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:15:c9:06:9b:ad:2b:59:65:3e:eb:cb:22:25:
                    bd:70:f3:e9:76:d4:60:52:35:b2:2c:e3:7e:b1:67:
                    5c:76:18:a6:5f:6a:10:61:f6:1d:c1:58:e5:a5:89:
                    93:f4:e3:a7:ad:c8:7d:9f:73:fd:02:be:65:85:73:
                    fb:0e:87:6b:9c:fd:dc:5c:d2:13:9d:e2:91:82:83:
                    f8:e3:ec:25:87:e0:b6:ad:cd:46:c0:b7:75:86:0a:
                    dd:26:f0:ff:08:fe:b2:c8:30:36:78:f2:f3:bc:97:
                    bf:5d:c3:51:30:75:7a:41:a3:76:64:5a:88:33:22:
                    ba:7d:b9:de:10:6d:fb:8a:b6:0b:fc:92:a9:1b:73:
                    2b:b3:fa:8f:f9:0c:31:e6:95:7a:88:d7:49:f6:d9:
                    bf:01:bd:a3:4d:19:d4:aa:c5:9d:06:53:f9:ec:d7:
                    a8:f9:51:8d:22:0c:88:1c:0d:8a:31:9c:4f:f8:09:
                    27:92:81:52:66:b8:3e:15:34:76:fe:25:a7:c5:27:
                    eb:a9:9e:50:ed:8a:37:ea:b6:7b:8a:51:01:75:ca:
                    41:86:fe:a8:a4:44:16:c5:e2:3a:ca:96:11:7e:cd:
                    48:87:47:c4:a2:ed:c0:c2:2d:9b:92:2b:64:fd:1e:
                    ff:7a:d4:d0:43:cd:8c:7a:b3:a8:38:08:31:73:2b:
                    f9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:38:A5:DB:FD:36:9F:23:54:0E:25:02:63:D6:0F:A5:EB:19:E5:12
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e302e302f32322d3232203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:ba:19:cf:9a:27:3f:9e:cc:85:d0:a6:ad:0d:43:06:a1:64:
         a4:81:49:f7:79:9f:b0:1b:2f:05:ee:24:8a:8a:91:43:bc:c4:
         cd:ab:13:4a:39:7e:04:c2:d8:75:22:20:40:2c:39:15:ff:37:
         79:38:36:6a:29:15:1f:ac:35:93:ba:c9:fe:22:06:fb:08:a2:
         3c:50:68:71:36:d6:eb:aa:9d:ee:44:96:9e:cb:27:b9:20:0f:
         cc:cd:89:b8:9b:f7:8d:a9:ca:e9:e5:5f:66:08:99:a7:dc:15:
         27:e2:fc:95:37:93:32:e4:39:84:43:3f:c1:02:36:dd:4d:fe:
         e7:8a:26:d8:3b:a1:aa:26:29:6f:5e:99:29:ed:b4:b7:96:06:
         b6:b3:41:65:df:97:97:d8:20:57:c9:be:da:05:33:10:e0:8f:
         91:40:c4:60:3d:98:98:a7:cd:95:5a:8d:e7:a3:6a:9d:3e:cc:
         f1:9f:20:34:7c:8f:5f:58:3d:15:91:68:e6:87:17:1d:64:55:
         56:12:c9:5b:9f:11:37:b4:e2:39:ee:09:b0:bd:a7:74:46:72:
         5e:ef:ac:e2:20:2b:ce:d4:f2:56:e6:a7:87:52:14:8b:c7:fe:
         89:f2:c5:04:a3:cd:2f:67:fe:ff:39:e6:5d:a3:c0:06:0d:39:
         b1:47:c8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:42:09 2026 by rpki-client