Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3132382e302f32332d3233203d3e2034383131.roa
File:                     3137352e3130322e3132382e302f32332d3233203d3e2034383131.roa (raw, json)
Hash identifier:          5P12tAZUripv/MddiyfVUAm+gHVcJFZd+LLSjQYX8H8=
Subject key identifier:   4D:C4:71:C8:D8:69:44:81:FB:45:C7:BD:FE:FA:E2:9A:B2:9D:EE:14
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       427D8CBDAF892E7BF35EF089A22926665BBE401A
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3132382e302f32332d3233203d3e2034383131.roa
Signing time:             Thu 07 May 2026 01:44:54 +0000
ROA not before:           Thu 07 May 2026 01:39:54 +0000
ROA not after:            Thu 06 May 2027 01:44:54 +0000
asID:                     4811
IP address blocks:        175.102.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:7d:8c:bd:af:89:2e:7b:f3:5e:f0:89:a2:29:26:66:5b:be:40:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: May  7 01:39:54 2026 GMT
            Not After : May  6 01:44:54 2027 GMT
        Subject: CN=4DC471C8D8694481FB45C7BDFEFAE29AB29DEE14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:08:66:aa:05:0a:80:26:c5:31:7a:85:b7:10:
                    b4:02:50:27:18:44:58:a6:d9:55:64:c8:18:9a:2d:
                    aa:9a:09:ff:b8:f7:06:b2:75:a5:69:24:cd:fa:49:
                    26:18:d1:f2:78:26:03:0d:a5:01:b4:36:1d:18:e2:
                    a2:38:82:32:5a:02:42:6a:e8:2b:64:3e:8b:bb:a8:
                    b8:18:45:68:94:c5:2a:22:8c:67:bb:3c:6a:47:57:
                    26:c3:2e:59:3d:5f:2e:66:e2:9b:99:f0:cf:2a:98:
                    e7:3d:2e:73:7b:4e:e5:42:60:a5:07:fd:a4:48:64:
                    f3:50:22:64:16:4c:15:16:3f:1c:a7:f5:74:4f:11:
                    6e:b0:da:8d:b3:36:a1:4c:29:d2:fd:08:c9:43:93:
                    0b:8c:99:9e:d0:bf:18:43:6d:14:9a:3c:09:f7:74:
                    35:8b:51:9a:c8:21:d4:49:63:88:a2:fe:f6:db:cd:
                    b4:e2:3e:e0:54:e5:d7:94:af:4b:5f:73:99:d3:e7:
                    bb:f8:e4:c4:74:3b:d4:d5:97:af:b9:4e:88:56:29:
                    68:cb:ac:43:36:76:62:34:b4:28:19:dc:53:f5:a4:
                    3f:eb:01:d0:3f:a1:a5:b8:63:09:79:35:2d:4e:ec:
                    72:2f:45:be:15:b0:c8:33:82:1b:ad:7a:19:07:90:
                    e7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C4:71:C8:D8:69:44:81:FB:45:C7:BD:FE:FA:E2:9A:B2:9D:EE:14
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3132382e302f32332d3233203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:2c:50:97:e6:b9:d3:3f:ce:e4:15:38:e3:98:46:8b:d0:94:
         ec:cf:1e:40:cb:92:9c:ac:e6:22:51:bf:ff:47:43:f0:df:92:
         9b:1b:5a:98:da:83:5b:62:b5:17:57:69:88:3d:d8:a9:8b:12:
         70:a3:dd:21:3a:f9:ff:d3:f3:b2:e1:9d:3c:eb:ef:47:02:e1:
         77:8c:a5:00:9c:24:13:14:e0:91:1d:df:98:20:e3:57:df:a4:
         e9:cf:9e:5c:dd:45:a7:2d:54:76:9e:49:c8:57:86:67:43:59:
         8b:97:11:dd:27:5d:54:98:c6:4e:9c:1d:8c:ff:48:f9:b2:c2:
         1d:67:e6:66:c1:bd:f9:05:24:12:bb:47:00:a3:bd:e7:5f:58:
         07:1a:e2:40:26:7b:95:05:f1:f7:36:c5:97:31:07:b9:87:59:
         7e:2c:b3:97:4b:e9:1d:ad:98:c7:5d:ee:3c:44:8c:ea:83:e2:
         61:34:91:f1:a4:84:9e:f3:cc:80:1c:60:6d:5e:99:03:76:aa:
         38:e4:68:28:bc:f8:c9:85:55:8c:01:ae:62:0a:6a:0e:2f:bb:
         1a:7f:1b:e0:93:fc:56:87:5f:d7:57:d5:8f:1d:f3:e1:eb:c2:
         ab:96:a3:28:48:d4:90:47:27:3f:16:ba:a5:a7:45:c3:9b:d9:
         4e:96:5e:38
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 15:24:23 2026 by rpki-client