Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133302e302f32332d3233203d3e2034383131.roa
File:                     3137352e3130322e3133302e302f32332d3233203d3e2034383131.roa (raw, json)
Hash identifier:          hLWoLoV7dYErE30VsxNeh+RjRKHQ26dbKTI+YYwEE5A=
Subject key identifier:   37:19:31:54:A5:D2:AA:A7:E9:D7:07:37:DA:94:52:40:D7:2D:D2:DF
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       1605CD395D28C73C6CD4A5D11FCBD88FABE1378C
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133302e302f32332d3233203d3e2034383131.roa
Signing time:             Thu 07 May 2026 01:45:59 +0000
ROA not before:           Thu 07 May 2026 01:40:59 +0000
ROA not after:            Thu 06 May 2027 01:45:59 +0000
asID:                     4811
IP address blocks:        175.102.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:05:cd:39:5d:28:c7:3c:6c:d4:a5:d1:1f:cb:d8:8f:ab:e1:37:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: May  7 01:40:59 2026 GMT
            Not After : May  6 01:45:59 2027 GMT
        Subject: CN=37193154A5D2AAA7E9D70737DA945240D72DD2DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:50:3d:4a:f8:8b:c4:12:45:3c:5a:63:9b:99:
                    20:a1:6a:5e:a0:7c:c0:32:07:6d:96:79:09:aa:99:
                    34:f8:6e:cd:38:fd:73:11:66:86:63:1e:42:4e:6a:
                    85:28:9b:79:12:7d:6c:a5:22:8d:4c:b2:f0:52:89:
                    0d:16:98:cc:02:d2:75:13:6d:71:28:ee:4c:e3:16:
                    d8:ae:e1:05:0d:b2:06:19:f0:46:7e:5a:70:ae:93:
                    9a:96:81:52:c3:d5:05:9a:7a:96:ea:1c:e3:d7:c3:
                    24:e0:26:9e:2b:88:3b:f0:e8:13:44:b3:1f:2f:9b:
                    d4:ad:3a:e0:4a:c1:6f:d7:bf:d4:9e:29:c6:ca:91:
                    96:42:00:04:da:58:f9:d8:9c:a3:39:d5:53:95:1d:
                    10:cb:70:0c:7a:49:f0:4c:25:45:88:b0:f3:8a:de:
                    ca:ad:f9:1b:85:5d:90:c8:e8:ae:f7:2c:fe:66:df:
                    78:67:f3:e4:44:a3:72:e6:d8:5a:2b:e9:36:6d:f1:
                    fa:7e:49:15:47:36:47:40:c5:f3:50:bb:3a:cc:3c:
                    a9:21:8a:ad:32:55:39:39:11:02:44:29:d3:2c:e2:
                    69:d1:c6:86:91:5b:3c:eb:b0:a2:c3:f9:75:37:be:
                    be:3b:af:a9:16:9e:ba:98:9d:02:81:17:1c:ee:9b:
                    1a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:19:31:54:A5:D2:AA:A7:E9:D7:07:37:DA:94:52:40:D7:2D:D2:DF
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133302e302f32332d3233203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:08:76:84:54:53:7b:18:40:2f:d7:95:b3:92:2b:0b:37:40:
         80:e1:19:c5:9f:01:15:ec:e0:3e:d4:e1:4d:9f:87:be:a9:cb:
         b2:7e:6e:1d:e6:b6:b8:22:ad:2f:e1:97:9c:c8:b2:0c:f3:41:
         06:79:64:62:6a:5b:c4:56:da:48:cd:6b:8c:fa:f5:9c:8a:8d:
         91:1c:de:0c:31:29:f7:6d:3c:3f:3c:a5:03:f7:52:11:61:db:
         61:c3:4d:1e:b4:5e:d5:db:11:68:82:97:c8:e8:8a:fc:5f:08:
         dd:ab:9f:a2:c7:14:95:9a:62:71:19:20:4d:25:ff:76:10:c0:
         88:b9:a5:a4:1b:31:d6:41:97:78:71:9b:d2:89:88:89:96:44:
         3c:99:a1:43:1a:25:f5:8f:1e:ea:b5:a7:b8:d9:9e:06:d6:9c:
         c2:65:a8:0c:c8:81:3b:c5:42:f0:fd:4c:ed:af:eb:15:53:65:
         6e:5a:51:ad:34:a6:f4:16:86:2b:34:c5:f8:c1:8a:7f:15:72:
         43:03:2a:f3:29:f2:aa:7d:ab:cf:cf:fe:7d:b0:4c:88:35:70:
         72:e7:88:06:60:a5:ad:07:9a:dc:f4:0d:2f:a8:25:ba:6d:ee:
         15:24:5d:89:b8:82:09:e6:70:95:02:51:e4:be:48:79:68:d0:
         8d:01:5b:74
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 15:26:25 2026 by rpki-client