Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133332e302f32342d3234203d3e203137363231.roa
File:                     3137352e3130322e3133332e302f32342d3234203d3e203137363231.roa (raw, json)
Hash identifier:          DGyGYbkzLwsY+R69VrcxqZ07VQl53qB9CB4n3duXxDA=
Subject key identifier:   B1:4B:0E:A5:30:5B:6B:00:66:F0:7C:55:6B:D8:77:8B:6C:83:1E:0F
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       4925961219FF0A2C24A4ADA91E723AA4EBFBA9E4
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133332e302f32342d3234203d3e203137363231.roa
Signing time:             Thu 07 May 2026 01:47:46 +0000
ROA not before:           Thu 07 May 2026 01:42:46 +0000
ROA not after:            Thu 06 May 2027 01:47:46 +0000
asID:                     17621
IP address blocks:        175.102.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:25:96:12:19:ff:0a:2c:24:a4:ad:a9:1e:72:3a:a4:eb:fb:a9:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: May  7 01:42:46 2026 GMT
            Not After : May  6 01:47:46 2027 GMT
        Subject: CN=B14B0EA5305B6B0066F07C556BD8778B6C831E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d9:f4:85:0d:f5:17:90:6e:83:74:da:91:db:
                    02:8a:c7:ab:18:65:93:ad:af:ce:84:d8:b1:5e:10:
                    a8:a8:dd:31:9b:f8:8d:80:4c:90:92:41:24:a7:00:
                    52:ad:ef:5d:aa:cd:5f:4b:e9:dd:3b:be:1b:96:92:
                    86:ee:71:14:c2:06:c9:64:c2:a0:f2:06:b2:4b:a6:
                    d5:b0:6d:6a:fa:9a:d5:a2:38:53:37:3f:5a:11:9a:
                    6a:d5:0a:5d:18:f6:a0:35:33:ce:30:aa:b1:63:c1:
                    b9:21:1e:0c:fb:92:1b:7a:62:1a:8f:3e:cd:b5:59:
                    2b:bf:2a:ea:67:d9:52:9f:ea:12:07:09:aa:6f:df:
                    73:49:5e:64:f3:11:03:7a:3c:ac:36:0b:5e:1e:f1:
                    84:35:92:98:b5:ef:01:cd:27:f5:f4:48:73:b9:f9:
                    3d:2d:db:a1:2d:d0:be:d1:03:57:21:67:16:46:ff:
                    de:24:7b:36:d3:c8:6d:33:12:42:fa:63:60:a1:65:
                    26:8f:28:e8:e0:c7:af:bd:f3:9f:3d:d0:e1:b1:51:
                    20:b5:6f:13:16:ff:1e:b6:50:4d:32:a6:d5:ad:85:
                    99:21:81:da:a4:79:4f:ce:3f:98:c5:c2:bf:20:5f:
                    25:92:85:31:d9:d2:b7:b2:eb:db:d4:3c:bc:37:09:
                    38:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4B:0E:A5:30:5B:6B:00:66:F0:7C:55:6B:D8:77:8B:6C:83:1E:0F
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133332e302f32342d3234203d3e203137363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:ee:4c:02:4b:04:6b:17:f5:ce:92:fd:72:1b:9c:38:f8:3e:
         75:4d:61:26:68:36:94:b4:b8:8c:e4:d0:09:ca:d7:f7:25:37:
         de:8b:54:16:3c:60:48:b9:66:d9:c0:a6:f2:05:93:cd:39:38:
         53:bf:fa:6d:1c:d0:88:28:c1:8c:59:d8:ce:9c:da:11:00:3c:
         22:cb:b5:77:11:b8:f5:79:81:4c:b7:ad:bd:79:c6:42:56:48:
         c2:8d:18:ec:98:68:0a:c8:bf:66:bb:5e:0d:c7:8d:3b:b7:d7:
         09:42:d9:4f:d5:0c:97:db:26:5c:8e:74:a6:fa:77:38:b7:17:
         c3:c7:78:81:92:35:4e:26:bd:df:75:63:17:a8:42:16:96:d2:
         bf:1e:04:8b:a9:42:4f:70:67:f7:4a:78:ed:d6:79:c6:74:e4:
         c5:a5:30:bd:86:fa:20:89:b4:6c:ea:45:fc:0c:9e:e6:24:5c:
         ec:96:34:7f:5f:26:36:91:de:26:02:e6:f8:9e:b3:ba:69:cd:
         e9:79:28:57:b0:3a:65:27:62:ef:cd:3e:e5:b8:27:b1:d4:71:
         84:b8:50:e6:1d:e1:b1:92:91:74:ae:22:70:ac:21:1b:8f:ff:
         e6:28:e2:55:09:36:70:86:4d:61:c4:38:7b:50:bc:b2:84:c3:
         ce:ed:b8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:11:22 2026 by rpki-client