Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e31302e302f32342d3234203d3e2034383131.roa
File:                     3137352e3130322e31302e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier:          4yjMq0I5cYrhs8jLNQLUwSVWkrRplqgGdoMCgR9Ck1E=
Subject key identifier:   E6:51:61:87:1D:41:EE:FC:F3:7C:94:0C:47:7E:8E:B8:54:DC:AB:EA
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       4BE4755FE867D33FD629A438A577B18D87B9C000
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e31302e302f32342d3234203d3e2034383131.roa
Signing time:             Thu 07 May 2026 01:37:30 +0000
ROA not before:           Thu 07 May 2026 01:32:30 +0000
ROA not after:            Thu 06 May 2027 01:37:30 +0000
asID:                     4811
IP address blocks:        175.102.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e4:75:5f:e8:67:d3:3f:d6:29:a4:38:a5:77:b1:8d:87:b9:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: May  7 01:32:30 2026 GMT
            Not After : May  6 01:37:30 2027 GMT
        Subject: CN=E65161871D41EEFCF37C940C477E8EB854DCABEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7f:8c:17:54:6b:ec:3e:10:ed:b3:bb:d4:1f:
                    ee:bc:bb:64:c2:1a:78:b4:06:cc:d8:e0:6f:4f:d7:
                    1f:60:9b:a5:98:03:2b:cd:ab:4e:76:25:af:4c:26:
                    ea:37:aa:2e:3b:2b:2b:78:d6:cf:f2:4a:11:34:8b:
                    65:7e:5f:f9:1b:69:b6:76:bd:1b:af:a4:27:81:93:
                    6b:d0:b6:2e:b8:80:af:8e:b5:cd:95:e2:4f:2d:cb:
                    1c:77:7d:d7:22:aa:2d:c9:2a:83:81:80:bd:f1:30:
                    6b:fa:7e:63:c5:77:a3:35:e4:93:70:ad:ae:b9:11:
                    04:ee:d5:3a:c3:dc:f6:aa:18:d8:af:bb:4e:72:48:
                    dd:64:86:29:3e:e5:b1:45:cd:54:6a:09:45:ef:cb:
                    93:fd:e3:d7:63:a7:9c:6b:ca:ed:af:09:4b:8b:41:
                    21:eb:8a:be:3c:27:6f:6f:cd:09:05:b3:b1:92:a5:
                    78:0e:e9:60:98:91:7b:de:2c:04:4a:c6:59:3c:d7:
                    a3:5a:3c:88:70:9a:79:ee:11:cc:de:52:86:f9:57:
                    49:df:ac:3f:f9:b1:70:68:39:14:37:44:f6:e0:16:
                    5d:33:5f:b2:1a:91:84:3d:39:ef:2d:6d:73:c7:63:
                    70:c6:af:af:80:27:a3:9e:33:50:a8:32:e9:01:44:
                    b4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:51:61:87:1D:41:EE:FC:F3:7C:94:0C:47:7E:8E:B8:54:DC:AB:EA
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e31302e302f32342d3234203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:6c:74:54:36:37:3d:3b:f0:de:8e:b5:6b:9f:a0:8f:e9:7a:
         7c:67:98:43:e1:fc:b4:b3:a5:53:ed:7a:94:68:a5:3c:df:c6:
         6f:42:d2:3d:23:cb:3b:16:65:dc:4f:72:ed:7e:a7:dc:df:8d:
         8d:e3:79:44:85:e7:13:a3:a6:e6:b4:29:b4:43:b2:03:0a:45:
         d9:00:00:bb:29:8c:bd:7b:b3:a8:c5:ec:e9:20:b9:83:5c:19:
         14:ba:93:9f:bb:d1:83:ee:31:93:be:13:96:ef:15:af:95:67:
         85:16:f5:74:47:b7:c7:85:1c:da:9c:73:ef:6d:b0:e7:1f:f1:
         71:f5:36:71:03:07:56:17:7c:e6:d5:db:37:08:03:cc:86:4f:
         1a:cb:a0:e5:67:3c:08:0c:94:e5:7c:b9:98:b2:ed:6e:a7:98:
         78:eb:63:84:4a:b2:85:51:85:b4:cb:bc:bb:c9:bb:45:bc:70:
         6c:a0:af:c9:23:d9:ce:46:0d:89:f3:3a:b6:04:55:7a:d6:17:
         4b:98:48:3c:ff:75:9f:bc:18:58:c7:0f:0a:b3:e8:7e:7f:d6:
         60:be:96:0b:f8:58:24:77:ca:2b:d4:64:29:d2:23:9b:f0:34:
         bf:03:ff:4c:18:8f:12:4b:02:ea:ec:dd:a3:6f:e5:72:e7:23:
         8e:3b:84:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:25:14 2026 by rpki-client