Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133322e302f32342d3234203d3e203435303836.roa
File:                     3137352e3130322e3133322e302f32342d3234203d3e203435303836.roa (raw, json)
Hash identifier:          Mxuh4MxMoxxbkwoC1TcW2PT9yCX3m5JYamS7JySXVSo=
Subject key identifier:   9C:94:4D:71:8C:0A:C8:ED:7E:08:BB:78:EB:10:0D:D6:B9:86:B2:1F
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       0EA235384CA05F470EE848396DD05603A40D9496
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133322e302f32342d3234203d3e203435303836.roa
Signing time:             Thu 07 May 2026 01:47:46 +0000
ROA not before:           Thu 07 May 2026 01:42:46 +0000
ROA not after:            Thu 06 May 2027 01:47:46 +0000
asID:                     45086
IP address blocks:        175.102.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:a2:35:38:4c:a0:5f:47:0e:e8:48:39:6d:d0:56:03:a4:0d:94:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: May  7 01:42:46 2026 GMT
            Not After : May  6 01:47:46 2027 GMT
        Subject: CN=9C944D718C0AC8ED7E08BB78EB100DD6B986B21F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:70:1d:88:cf:4c:72:ea:13:71:4f:ae:ac:70:
                    3d:31:a0:51:32:d7:2c:f0:d9:2d:75:a1:34:16:4f:
                    78:d1:8b:af:d0:60:0b:74:db:48:50:86:2f:25:e8:
                    39:04:37:5c:1a:f8:af:dc:f6:2a:8b:b0:53:6f:21:
                    5b:da:fc:f6:2f:10:82:bf:84:ec:68:07:20:26:dd:
                    46:4f:c6:04:d3:59:ff:4e:84:5d:3c:6c:ba:15:90:
                    26:15:d0:a1:b7:79:53:2e:7e:11:de:86:aa:ff:86:
                    c1:0f:ab:38:84:8a:e4:de:d2:bb:72:d9:e6:38:03:
                    c9:b4:5c:9c:b2:20:dd:dd:7f:3d:48:02:07:a6:aa:
                    ba:40:84:b0:98:2d:89:25:71:9e:df:68:87:77:dd:
                    bb:9d:87:1e:ec:60:86:79:89:4b:13:39:60:ac:25:
                    52:e3:ee:15:59:dc:7e:66:9b:0d:d5:41:46:a8:ed:
                    d4:0d:c5:7e:a3:13:10:59:9d:ee:7a:f0:25:9d:d5:
                    32:49:2e:40:0c:fe:99:7e:0c:fc:66:92:48:61:1c:
                    e2:2a:a0:06:2c:2b:7f:d7:e2:69:a8:c9:c3:40:fb:
                    2c:1d:f2:4a:4d:f6:dc:e3:e8:30:d7:0a:3b:83:9e:
                    7a:9c:3a:a7:f1:5f:2f:b0:91:5d:88:fd:b3:d9:eb:
                    f9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:94:4D:71:8C:0A:C8:ED:7E:08:BB:78:EB:10:0D:D6:B9:86:B2:1F
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133322e302f32342d3234203d3e203435303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:b3:a9:9e:83:5f:dd:74:17:ec:f0:52:7f:79:a2:61:50:9f:
         e0:be:e3:cb:f4:bf:61:8f:d6:2a:de:9c:21:19:0c:60:6e:33:
         97:e4:f8:49:2c:e4:ab:05:91:ed:34:50:88:f6:e7:91:96:6f:
         09:29:f2:dd:aa:13:b9:76:7b:c4:a3:13:67:c1:e9:1e:2c:64:
         e0:05:68:89:e9:eb:42:21:e0:38:31:80:62:cb:b8:ad:63:a5:
         6e:30:4f:13:e9:b8:e0:ed:af:ae:ce:86:41:17:9d:26:4f:e6:
         74:d7:ed:b4:53:67:46:21:84:f6:5c:27:35:5c:9a:b6:ad:57:
         7f:5f:0f:ac:cb:6b:8c:dd:72:0c:b4:e8:a2:33:c0:40:e5:73:
         54:65:78:2f:d7:1e:64:54:00:09:1c:82:e8:32:5b:d1:99:8c:
         ac:fe:3f:21:fa:5d:09:3f:ee:42:8b:fa:b8:3e:1c:55:f5:bc:
         9c:88:dd:d0:5c:ce:45:b3:b2:17:58:e3:51:df:6e:f3:8b:36:
         6b:14:36:d6:de:f8:84:3b:46:20:32:25:bc:20:76:53:f1:bc:
         b1:31:8a:5e:c3:e4:1b:21:ed:c2:86:e6:7a:60:75:63:a8:b4:
         8b:8c:c4:03:44:98:28:ca:87:ea:1d:62:d9:00:76:00:9e:fe:
         f9:81:0b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:36:27 2026 by rpki-client