Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3132382e302f32342d3234203d3e2034383131.roa
File:                     3137352e3130322e3132382e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier:          Qt5jrE60b7fo8GDT10w7aTd7pbuaVwzfDBBx+iLi9OY=
Subject key identifier:   D3:8F:79:15:51:A7:B8:B0:AC:0C:3D:67:11:B5:18:47:CC:12:C7:63
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       7862BC43D42EB90C1B8CF9013E63E2ADDC59E39A
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3132382e302f32342d3234203d3e2034383131.roa
Signing time:             Thu 07 May 2026 01:44:18 +0000
ROA not before:           Thu 07 May 2026 01:39:18 +0000
ROA not after:            Thu 06 May 2027 01:44:18 +0000
asID:                     4811
IP address blocks:        175.102.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:62:bc:43:d4:2e:b9:0c:1b:8c:f9:01:3e:63:e2:ad:dc:59:e3:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: May  7 01:39:18 2026 GMT
            Not After : May  6 01:44:18 2027 GMT
        Subject: CN=D38F791551A7B8B0AC0C3D6711B51847CC12C763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ad:3a:c3:fa:9d:f6:03:0a:28:78:9b:2b:f4:
                    f2:80:8f:9d:10:61:07:3f:91:a5:83:9c:ab:65:53:
                    d3:68:df:9f:9c:69:52:54:77:2c:9a:16:e6:cf:7b:
                    78:63:8d:a0:36:7f:fd:f3:d1:16:df:f3:8c:5a:32:
                    49:2c:34:f6:24:54:91:4c:9e:58:ba:58:ff:4a:b0:
                    dd:77:c5:06:d1:b9:c4:00:af:69:3b:c9:96:b3:8f:
                    c3:9c:64:10:ff:eb:2b:95:ea:a9:24:ec:fd:85:42:
                    e9:fd:48:1e:50:81:cf:d7:84:5a:56:a0:d7:01:43:
                    7e:be:c1:25:47:43:e4:81:89:b7:14:a7:4c:c9:48:
                    ad:5a:cf:81:e2:7b:3b:d8:29:0e:0f:06:6b:d0:27:
                    f1:b7:9a:ed:e8:e3:0d:23:61:4d:e5:46:d8:5f:65:
                    98:e5:64:5c:fe:97:42:1c:58:82:1c:24:d5:ad:cf:
                    77:78:ec:ef:27:30:68:5c:9f:e8:42:78:93:6b:ac:
                    b0:3a:4b:f5:6a:d6:50:30:82:7d:8c:e7:82:bb:21:
                    f4:25:b8:55:94:ad:d5:f1:33:45:70:a7:34:e5:d7:
                    23:f3:56:0d:05:56:b9:0b:02:2e:01:e0:be:c9:68:
                    58:af:de:7b:ff:8e:3b:4b:42:9c:27:d5:df:f0:d9:
                    ae:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:8F:79:15:51:A7:B8:B0:AC:0C:3D:67:11:B5:18:47:CC:12:C7:63
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3132382e302f32342d3234203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:56:31:35:37:96:79:ae:de:56:5d:68:a1:fe:4c:37:99:77:
         f3:c8:6a:97:17:a1:1b:cf:3a:1e:fb:40:df:0e:ca:62:68:0e:
         5a:aa:b4:11:e7:14:98:0c:91:1b:0f:e8:e1:15:53:83:00:ea:
         0c:d5:43:9d:bd:0b:df:0f:78:e6:43:2b:e8:6f:1a:98:29:7c:
         91:2e:a3:e9:bd:b8:d2:5b:10:b9:a9:b1:39:75:3e:c8:45:9a:
         37:7f:e6:3a:2d:ac:d0:31:0c:41:25:9c:83:b8:62:d4:d2:27:
         3f:79:87:69:25:b1:bf:9c:b6:71:59:52:ce:ba:53:70:74:1f:
         81:46:9f:95:54:c3:bf:3b:61:2a:1f:2c:6a:e1:81:5d:a8:ed:
         0f:90:cf:3a:9a:8c:f0:1a:50:18:aa:8c:25:77:11:0a:c6:0a:
         16:8d:4c:a0:f1:b8:6d:b9:e1:f8:4c:89:ab:b1:38:3b:a8:1f:
         30:84:d8:16:31:ca:fa:55:93:16:a9:fd:61:50:7c:b6:f4:87:
         bc:32:98:09:99:ab:67:bd:25:9c:e1:a1:59:27:7d:b8:b3:ff:
         55:90:37:d6:6d:c7:12:62:70:e0:20:39:01:b4:1a:28:4a:13:
         1d:e9:fa:79:3d:c6:38:ac:ee:e0:f6:2a:2e:fb:35:72:1c:0d:
         63:92:68:34
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 16:36:31 2026 by rpki-client