Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e312e302f32342d3234203d3e2034383131.roa
File:                     3137352e3130322e312e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier:          8XSHQAQsiJh2DUESHMcYifnga3yzweKCLPegZgioVrg=
Subject key identifier:   99:37:28:71:60:14:6B:47:5E:52:C4:B0:A3:B5:FD:76:A7:73:50:D5
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       5877993D619C655C5D175DF7FEA0BF9D7C237A09
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e312e302f32342d3234203d3e2034383131.roa
Signing time:             Thu 07 May 2026 01:34:17 +0000
ROA not before:           Thu 07 May 2026 01:29:17 +0000
ROA not after:            Thu 06 May 2027 01:34:17 +0000
asID:                     4811
IP address blocks:        175.102.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:77:99:3d:61:9c:65:5c:5d:17:5d:f7:fe:a0:bf:9d:7c:23:7a:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: May  7 01:29:17 2026 GMT
            Not After : May  6 01:34:17 2027 GMT
        Subject: CN=9937287160146B475E52C4B0A3B5FD76A77350D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e9:65:69:2d:39:61:4a:6a:6c:6a:84:c5:6c:
                    c7:9c:48:4a:da:75:00:a7:6a:b3:bf:8d:b3:70:f4:
                    8d:d0:a7:d5:20:34:2c:53:02:7b:42:cb:13:62:ba:
                    23:1d:1a:bd:0f:cf:84:41:c7:19:d6:63:3a:71:a4:
                    72:95:92:35:46:fd:3f:80:7c:98:0e:25:7e:bf:8b:
                    03:47:14:66:91:38:c0:19:eb:4e:35:fb:62:7f:39:
                    40:b8:69:40:a0:42:bd:30:9d:96:d5:cd:6a:80:59:
                    8b:17:b8:95:21:17:ba:c4:8f:13:a5:ab:51:50:85:
                    05:3a:ef:11:66:8f:2c:20:c0:65:9e:7b:36:bc:c6:
                    e6:67:c4:e6:cb:db:25:43:db:6f:86:62:80:dd:9d:
                    18:25:d9:c8:23:35:03:ad:be:79:4f:c4:4f:b3:ca:
                    e8:f5:4a:ea:a1:0a:65:f3:04:a6:dc:dd:f0:1f:b0:
                    b5:ea:62:d9:08:ae:a2:cd:88:0b:2d:af:aa:ab:b2:
                    29:8e:7e:17:9d:b0:e0:66:b8:60:9a:63:09:aa:92:
                    70:0a:33:10:84:8c:b8:92:f2:63:d6:74:ea:50:b1:
                    6e:d4:68:4a:15:6f:9b:0c:15:ca:58:c9:50:ce:85:
                    fe:b7:9b:0f:c1:03:fb:0a:f0:6d:52:d2:2d:7f:42:
                    24:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:37:28:71:60:14:6B:47:5E:52:C4:B0:A3:B5:FD:76:A7:73:50:D5
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e312e302f32342d3234203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:d5:8e:63:86:5f:73:20:5f:bd:1f:e5:8a:1d:2d:34:93:07:
         c8:17:cf:cd:a1:87:cd:98:2e:82:9d:25:2e:cc:55:57:35:8c:
         7b:08:5b:34:d7:32:57:24:ad:16:50:22:72:a2:35:f6:07:3f:
         81:6a:8d:6e:6f:9d:26:0d:49:c2:8f:3f:fa:e5:66:fa:46:95:
         a0:57:a6:b9:cf:19:49:af:53:7d:c1:39:24:6f:90:73:64:d7:
         19:a9:ec:d9:75:03:7c:8d:37:b0:b5:24:ca:05:8d:f8:93:ec:
         91:e6:76:03:45:3d:b4:13:26:b8:14:6e:63:0a:57:4a:0d:63:
         32:f5:89:0d:d1:65:01:a6:e1:a9:6c:98:40:11:40:81:2c:6a:
         7d:67:96:de:e7:9d:bb:32:77:2a:18:ed:93:0c:a3:33:4b:d1:
         3d:23:e5:9c:62:ae:0c:c2:94:70:22:de:df:88:4d:f5:95:73:
         53:a0:e8:fc:71:d5:ee:24:09:f4:72:ec:16:21:bb:44:6f:8d:
         82:42:da:5c:4d:3d:0b:45:7c:ac:48:22:2e:88:ea:f2:ea:8a:
         1d:11:06:7f:73:61:e3:47:45:42:da:0c:e3:78:df:52:cf:73:
         bb:1f:89:50:4a:92:da:e0:25:b9:c1:92:6a:5e:2c:62:45:31:
         e0:a8:52:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:41:25 2026 by rpki-client