Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133322e302f32342d3234203d3e2034383131.roa
File:                     3137352e3130322e3133322e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier:          4kAwMxwG3Q15CyGzgTnKd9gUXEBiIdTtWTDjsITzm6E=
Subject key identifier:   41:52:22:97:AB:3A:43:CC:D5:A7:44:3A:2A:76:A5:86:98:59:4E:40
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       343FA238E003375EE606861200D8AE788E26EFCA
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133322e302f32342d3234203d3e2034383131.roa
Signing time:             Thu 07 May 2026 01:47:47 +0000
ROA not before:           Thu 07 May 2026 01:42:47 +0000
ROA not after:            Thu 06 May 2027 01:47:47 +0000
asID:                     4811
IP address blocks:        175.102.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:3f:a2:38:e0:03:37:5e:e6:06:86:12:00:d8:ae:78:8e:26:ef:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: May  7 01:42:47 2026 GMT
            Not After : May  6 01:47:47 2027 GMT
        Subject: CN=41522297AB3A43CCD5A7443A2A76A58698594E40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:71:19:f6:c0:26:51:4c:fc:4a:7f:69:a2:2e:
                    0d:4a:37:4e:23:64:d4:71:69:13:d7:28:94:55:24:
                    08:e8:49:91:db:87:3c:51:14:51:15:6d:e1:71:ab:
                    eb:90:5e:10:53:6f:d8:1a:ec:4d:bc:45:38:e4:3e:
                    04:03:40:cc:61:53:65:2d:14:3f:0d:b5:f2:ba:6d:
                    63:c0:e8:63:8c:12:9a:39:02:04:81:d3:bc:ee:2c:
                    7d:0f:c0:fc:e0:0a:6e:36:48:c9:c2:3e:75:2d:67:
                    8c:36:72:a7:c2:3c:b6:e5:8f:37:60:03:f8:6a:b5:
                    5c:38:c5:d5:67:b4:cc:dd:7e:93:4f:74:65:af:07:
                    08:9b:2f:1d:a8:b2:06:e2:47:0c:52:fe:34:f5:8d:
                    b2:60:be:1a:d2:1b:a1:8a:cc:d4:91:18:6a:26:08:
                    e0:39:64:26:e3:de:0f:94:11:64:0b:1b:02:2a:cd:
                    fb:8a:78:73:da:f5:8c:ea:34:4c:a4:6a:57:bb:bf:
                    35:b2:11:a6:43:86:e6:13:ee:a5:18:67:93:a3:df:
                    a6:53:d8:70:95:76:c4:a1:94:6b:2d:75:e3:96:2d:
                    68:74:2c:22:6e:2c:a7:7b:26:37:a8:96:ae:11:42:
                    b9:2f:7b:b8:0c:4f:da:54:af:5b:80:c3:40:35:40:
                    80:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:52:22:97:AB:3A:43:CC:D5:A7:44:3A:2A:76:A5:86:98:59:4E:40
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133322e302f32342d3234203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:4a:63:0a:4f:54:2a:7b:29:2c:c6:1a:05:a5:a3:32:84:d9:
         b2:c3:7e:43:1d:e9:a3:05:05:c0:bc:55:2b:99:8b:04:7f:37:
         43:59:cb:dd:1c:f4:37:3e:eb:d4:6b:23:27:9c:40:0c:3d:24:
         4c:57:93:60:9f:75:89:6a:44:63:ee:7b:65:2a:d1:02:aa:f3:
         ab:a2:d6:e3:e2:ca:b1:7d:17:69:7a:34:c0:10:3e:18:33:03:
         85:95:96:58:6b:98:39:fe:4d:93:79:6a:8a:d8:66:ae:be:26:
         17:5d:21:36:42:8b:ba:2e:80:75:a4:cb:62:42:12:7f:c4:5f:
         8a:0f:1f:36:2a:cb:cc:24:25:74:e9:d3:37:69:37:54:2e:e2:
         bb:d7:77:56:dc:df:84:b6:03:63:09:d3:52:9a:3c:1c:ba:de:
         37:2f:2a:a8:36:a9:0b:5f:81:04:06:0f:8c:f5:27:c4:35:47:
         2b:6d:41:cc:44:91:17:71:d2:00:31:8e:19:ae:24:8c:de:be:
         49:41:38:f8:f7:4a:e0:b4:0c:b0:83:84:1a:07:0e:19:52:82:
         c6:9e:85:9e:fa:d0:56:cc:d1:2b:cc:60:9a:77:6f:e7:31:e4:
         5d:66:ce:8f:fd:40:e3:8a:a4:6a:18:eb:cc:f3:0f:7c:b1:cb:
         04:13:21:c3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 16:36:14 2026 by rpki-client