Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e31332e302f32342d3234203d3e2034383131.roa
File:                     3137352e3130322e31332e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier:          JGykiNZcA/cCATi4T/LozrPjllSxbagIoio8DXUjpKI=
Subject key identifier:   21:18:07:79:CF:3F:2A:43:FF:84:1B:A1:B1:18:10:13:C6:39:CF:85
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       049A33C96C17E17A924207F03FDC9BDE438B1EB9
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e31332e302f32342d3234203d3e2034383131.roa
Signing time:             Thu 07 May 2026 01:38:40 +0000
ROA not before:           Thu 07 May 2026 01:33:40 +0000
ROA not after:            Thu 06 May 2027 01:38:40 +0000
asID:                     4811
IP address blocks:        175.102.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:9a:33:c9:6c:17:e1:7a:92:42:07:f0:3f:dc:9b:de:43:8b:1e:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: May  7 01:33:40 2026 GMT
            Not After : May  6 01:38:40 2027 GMT
        Subject: CN=21180779CF3F2A43FF841BA1B1181013C639CF85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3b:7b:9f:a3:97:f7:7b:fa:c8:2b:60:97:12:
                    8e:ba:ca:47:34:43:05:f0:a7:ba:81:88:ac:1f:41:
                    db:b1:ce:b5:3b:2d:e0:66:b3:e6:40:87:0a:ab:52:
                    9f:96:a3:d8:f5:11:ff:76:63:72:ec:bd:64:b6:f1:
                    b9:ef:1d:ef:8a:1e:9a:68:78:f0:09:b5:49:f2:96:
                    5b:23:85:ab:22:40:bd:84:73:09:99:03:a7:70:de:
                    c8:29:7b:4b:8c:f2:2b:f3:87:17:f7:b7:eb:58:f4:
                    e5:fa:1b:06:12:6f:c0:f6:63:65:96:7e:d1:97:f5:
                    7a:de:e4:92:2f:7b:10:36:c6:f2:cc:9e:eb:dd:74:
                    89:c7:b8:da:a2:c1:9d:a5:ba:36:65:29:cd:e7:00:
                    aa:c0:96:46:1e:9a:86:d8:7d:3c:40:cd:83:3f:ca:
                    5c:37:dc:75:7d:b2:90:c0:79:b6:c6:ce:0d:ec:d0:
                    52:25:e7:13:b4:cf:a9:2c:d2:7c:aa:f4:e1:65:2a:
                    89:73:cd:3b:76:bb:9e:94:13:9d:02:d6:aa:9b:59:
                    46:ed:1e:2a:53:4a:9b:11:86:0a:86:e9:cb:0a:33:
                    10:1b:39:36:27:7d:5a:c7:3a:a2:c0:54:4a:68:3c:
                    bb:a8:55:1f:eb:46:c9:46:e4:b2:b2:b8:a1:4a:79:
                    1b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:18:07:79:CF:3F:2A:43:FF:84:1B:A1:B1:18:10:13:C6:39:CF:85
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e31332e302f32342d3234203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:cf:54:4f:58:07:cd:d0:cd:5f:f3:3f:ee:74:c1:61:e8:e0:
         5a:57:4f:5e:56:c9:1e:0e:6a:8e:93:ca:e2:4d:eb:21:97:1a:
         1a:c9:d2:82:70:a6:5b:64:06:e8:bb:57:bc:d9:75:9c:2a:9e:
         a5:61:79:69:59:01:9c:f4:61:84:d7:29:86:7c:00:df:72:7e:
         c1:0b:3e:02:36:73:98:d0:28:17:08:8f:61:6a:bf:b9:3f:4c:
         e4:bb:d1:e2:8e:89:a6:e0:9d:ba:8f:cf:d9:7e:6b:dd:75:c6:
         2d:c6:15:ce:a1:b9:55:67:ee:07:19:70:15:ee:b0:5d:9e:81:
         9c:04:b4:b0:cc:e2:b0:25:ea:22:74:74:f9:51:f8:a5:4d:8f:
         2c:aa:ce:35:3c:8e:e7:b0:22:8b:f4:9a:eb:39:97:8f:8b:06:
         e0:38:30:93:79:6f:03:ff:a3:c1:22:be:dd:dc:a7:8d:3b:dd:
         0c:d8:4e:9c:a7:95:86:76:07:a5:15:a9:a6:44:43:96:3c:87:
         18:c9:c8:99:73:40:47:3d:2b:8d:9b:34:ef:c3:42:a8:54:88:
         2e:bd:d0:c8:3c:c4:80:ed:e0:1c:b5:27:c0:39:20:64:3a:b6:
         e3:6a:41:cc:4f:d1:0c:c4:cf:11:10:dd:6f:b3:fd:ce:47:45:
         a5:f1:93:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:14:58 2026 by rpki-client