Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e31322e302f32342d3234203d3e2034383131.roa
File:                     3137352e3130322e31322e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier:          FG89TkV1QFgjtHzSj2c1ZOsVn73A4Tub7Fo25hqhcWU=
Subject key identifier:   7C:D7:2A:7D:C0:28:E1:07:CD:44:8F:8F:32:42:F0:37:D3:AA:2C:B2
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       31C811594B76C440E5BE4916BE2A4641EF0B4EDA
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e31322e302f32342d3234203d3e2034383131.roa
Signing time:             Thu 07 May 2026 01:38:40 +0000
ROA not before:           Thu 07 May 2026 01:33:40 +0000
ROA not after:            Thu 06 May 2027 01:38:40 +0000
asID:                     4811
IP address blocks:        175.102.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c8:11:59:4b:76:c4:40:e5:be:49:16:be:2a:46:41:ef:0b:4e:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: May  7 01:33:40 2026 GMT
            Not After : May  6 01:38:40 2027 GMT
        Subject: CN=7CD72A7DC028E107CD448F8F3242F037D3AA2CB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:90:3b:fc:85:d8:8d:f7:16:e5:94:b1:41:1b:
                    f2:ac:a4:6f:e8:29:66:c3:bc:b1:f0:df:f7:9a:3a:
                    37:99:52:53:3f:e7:c3:27:96:8d:86:62:a1:4d:a6:
                    41:39:83:31:1a:d1:09:2d:b7:dd:60:96:b3:8d:a5:
                    0c:4d:13:19:08:dd:d2:60:1c:ff:ac:63:00:e5:b0:
                    fa:9e:6f:46:9a:ad:04:a9:2e:ee:77:fc:65:b2:d6:
                    31:35:17:8c:11:df:45:ab:9c:03:94:c1:ed:26:92:
                    80:9f:9c:a8:bf:18:4d:cd:12:b7:18:e4:40:8f:37:
                    0e:2d:08:c3:f9:e8:d9:58:cd:7c:63:44:6c:11:94:
                    63:ac:fb:df:3e:62:2b:e6:da:2f:08:74:64:1e:72:
                    d1:a8:68:f9:57:12:76:9b:5d:cd:18:a9:82:d0:b3:
                    0b:f5:56:34:da:53:f6:c9:33:c3:b9:31:f6:74:cb:
                    bb:88:de:62:b4:bd:2c:fd:d0:29:48:b5:18:d4:5e:
                    2e:b6:f8:15:16:74:bc:77:fa:ef:47:d8:8d:30:bd:
                    1b:6d:15:eb:eb:38:80:dc:a8:4d:39:a9:84:fe:b4:
                    fe:51:fe:79:1b:c6:ea:d0:bb:96:5d:18:c0:32:fb:
                    a0:6f:50:05:52:e3:82:2d:b1:fd:98:f7:fc:60:9c:
                    da:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D7:2A:7D:C0:28:E1:07:CD:44:8F:8F:32:42:F0:37:D3:AA:2C:B2
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e31322e302f32342d3234203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:3d:c7:89:04:b6:92:98:cb:a1:de:74:2b:64:9b:a7:70:c5:
         71:31:d0:e5:0e:8f:fc:dc:9f:fa:8d:16:2a:14:e6:b6:d9:d6:
         55:06:db:3e:9e:02:21:69:09:7d:52:c0:8a:f6:e5:64:7b:58:
         b5:47:ee:24:ca:36:9d:96:f9:12:8d:27:40:2b:48:8f:ca:55:
         f7:2f:73:04:ba:b6:5d:33:d9:28:0a:88:a4:f7:59:24:db:3a:
         d5:cb:05:5b:43:0b:63:86:2b:ef:ae:7f:34:1e:7e:ac:a8:57:
         3a:b0:eb:09:48:98:2a:1c:86:49:55:e3:e5:06:53:a6:d5:af:
         c9:65:22:ed:78:f5:ec:af:36:3e:bf:c1:97:22:c7:a8:f8:2a:
         23:ed:d0:85:88:81:93:41:20:a1:15:79:40:95:84:c8:0e:6a:
         6f:09:56:b0:2c:23:19:5b:37:60:66:4c:c0:45:9f:48:67:b0:
         d9:fe:4f:be:8f:36:75:43:7a:f3:70:e5:6c:34:3f:4f:52:d7:
         5b:64:55:0d:e3:cc:e8:70:7f:70:b8:af:8b:b6:68:3b:1f:a6:
         41:93:c2:54:25:ca:80:a7:c6:57:94:4d:e0:3f:93:8b:b7:26:
         0d:ae:5b:e7:f8:3e:cc:c9:e0:81:00:a4:d2:56:66:e7:12:04:
         b8:71:6f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:39:04 2026 by rpki-client