Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133342e302f32332d3233203d3e2034383131.roa
File:                     3137352e3130322e3133342e302f32332d3233203d3e2034383131.roa (raw, json)
Hash identifier:          q2jBiKi3B6gE56tu3YSIdwEAAMgHoXGdRV6isO3ywiE=
Subject key identifier:   49:53:97:A1:A5:EE:FB:E4:AA:53:0E:C6:9E:94:4E:F4:C3:6D:F1:F5
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       54FECE27EDD7FD902AB1649D43031B883BE95448
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133342e302f32332d3233203d3e2034383131.roa
Signing time:             Thu 07 May 2026 01:49:43 +0000
ROA not before:           Thu 07 May 2026 01:44:43 +0000
ROA not after:            Thu 06 May 2027 01:49:43 +0000
asID:                     4811
IP address blocks:        175.102.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:fe:ce:27:ed:d7:fd:90:2a:b1:64:9d:43:03:1b:88:3b:e9:54:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: May  7 01:44:43 2026 GMT
            Not After : May  6 01:49:43 2027 GMT
        Subject: CN=495397A1A5EEFBE4AA530EC69E944EF4C36DF1F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:8d:1e:95:73:7f:c2:ce:34:c6:d9:92:b4:41:
                    3d:6e:08:d4:69:2c:f3:c3:85:ad:e0:73:c6:ad:6a:
                    f6:c2:d9:61:29:4c:b1:77:ec:30:24:db:91:d6:43:
                    a7:08:e1:d4:45:ff:8b:a9:60:5f:e6:28:f2:59:7a:
                    9e:32:c0:46:32:1b:e7:84:ea:c5:e2:7e:75:4a:d7:
                    e9:e5:6e:c8:12:d6:a8:a8:85:6f:b2:7f:55:a4:b3:
                    7e:29:dd:01:cc:27:34:ef:ae:6c:55:a3:e7:3b:91:
                    7b:6e:97:3e:66:ed:41:26:7f:e4:9c:f4:14:2b:af:
                    1e:c0:38:2d:9d:cb:b4:2b:9d:61:40:21:71:22:ed:
                    d1:33:89:0e:aa:d7:27:7b:ca:2c:a0:df:4f:96:74:
                    9b:37:db:29:fb:37:31:27:05:07:4e:2a:47:af:9d:
                    8e:af:c6:04:1e:a6:1f:bd:53:c8:4f:19:eb:c7:44:
                    a1:aa:7a:9b:bf:23:b8:19:fa:58:12:35:6d:49:44:
                    60:fc:b4:44:6e:a8:4c:53:76:44:13:36:bf:96:16:
                    30:86:8e:36:81:ee:9c:c9:27:a4:0e:d1:65:8e:5c:
                    7d:05:b4:4c:a6:41:e3:c2:59:4c:fa:25:0d:41:48:
                    ef:9f:fb:a8:4b:f0:47:45:5f:48:fc:a1:85:1f:37:
                    91:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:53:97:A1:A5:EE:FB:E4:AA:53:0E:C6:9E:94:4E:F4:C3:6D:F1:F5
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133342e302f32332d3233203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:c5:2f:d3:ab:90:e1:f4:98:c9:14:37:d3:8e:1d:a3:f8:ea:
         13:9f:c2:14:7a:32:83:7e:19:51:83:57:52:ee:52:d7:24:f1:
         92:cb:b8:2c:9e:7a:87:11:00:fe:dd:0c:fa:4f:c4:97:e2:1d:
         7b:4c:28:db:ca:26:2b:b0:96:dd:5c:92:ad:75:5c:94:b1:d8:
         b3:6f:92:91:19:72:88:ad:ec:fb:f0:45:07:93:6d:ba:85:5b:
         14:35:2d:d4:0e:63:9a:c8:0d:ce:89:25:fa:96:9c:fd:a3:d6:
         09:ff:19:42:8c:80:55:55:c8:e3:5f:00:7c:eb:53:99:cd:0c:
         9d:49:69:17:5b:50:26:96:4f:9b:65:5e:b8:f5:70:b3:7c:29:
         cf:66:96:95:b4:07:63:5d:bf:b3:e4:ca:06:6a:37:d9:46:5b:
         27:5a:5d:2b:23:e0:c1:9c:ef:2b:ce:64:b1:eb:ba:d9:5d:94:
         ec:07:80:52:a3:cc:e6:6d:be:bc:95:d4:e6:2d:2d:d8:d4:ec:
         b6:9e:e7:a6:18:6f:f4:d8:af:a2:85:cd:80:ef:c2:3a:ea:ef:
         f7:ef:55:7c:b0:b7:72:ae:ba:98:d8:17:27:2a:f1:94:b8:a3:
         d6:3b:a4:c9:57:34:0e:04:5c:e4:19:f7:73:7a:2f:56:1b:e6:
         71:11:27:2e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 11:34:51 2026 by rpki-client