Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133352e302f32342d3234203d3e203137363231.roa
File:                     3137352e3130322e3133352e302f32342d3234203d3e203137363231.roa (raw, json)
Hash identifier:          xGt75I5gVFijrsjLfu0SePD2Vrx1/3Ta2lCI/tFc9B8=
Subject key identifier:   BF:8A:45:B0:EA:12:7B:A1:75:B0:85:A0:98:18:6B:56:83:9A:11:B7
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       38AF7437A914A248805AADDDB734DF340278CA83
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133352e302f32342d3234203d3e203137363231.roa
Signing time:             Thu 07 May 2026 01:49:10 +0000
ROA not before:           Thu 07 May 2026 01:44:10 +0000
ROA not after:            Thu 06 May 2027 01:49:10 +0000
asID:                     17621
IP address blocks:        175.102.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:af:74:37:a9:14:a2:48:80:5a:ad:dd:b7:34:df:34:02:78:ca:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: May  7 01:44:10 2026 GMT
            Not After : May  6 01:49:10 2027 GMT
        Subject: CN=BF8A45B0EA127BA175B085A098186B56839A11B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2f:e8:48:01:28:96:ce:62:3a:b6:fc:09:6f:
                    25:1e:93:88:84:76:3e:6b:5f:16:ac:e1:b1:1c:28:
                    09:37:80:12:c3:3f:61:8b:39:56:bc:f9:32:66:c6:
                    74:a0:cf:b6:ee:68:43:91:43:5d:a9:78:c4:be:9d:
                    19:66:4d:21:5a:26:77:d7:68:c3:bd:8f:f4:03:90:
                    66:a9:b1:ec:3b:d1:cc:8c:25:90:4d:c8:bf:75:51:
                    bd:17:2f:f9:10:29:5a:62:e4:01:f7:b0:6f:f2:7f:
                    96:d0:42:3c:e9:4d:97:7d:58:8b:6d:46:03:e8:65:
                    4b:53:31:5e:e9:e2:4f:58:b7:ea:43:63:c7:7a:99:
                    43:3b:b2:c1:3c:8b:a0:b2:1e:8c:10:9a:81:d9:dd:
                    42:1e:4b:0a:5c:f1:25:c2:23:ea:b4:3c:6b:f0:58:
                    d6:a2:35:43:36:0c:a8:df:b2:21:b2:48:2b:65:ab:
                    ae:f0:af:0e:84:d7:5e:4f:5c:6a:4f:cc:8e:ce:8d:
                    51:24:02:1d:5c:7b:2d:75:5b:c0:9e:34:ff:58:cf:
                    ca:97:a1:15:45:61:54:a2:c0:16:1b:4f:dd:57:fe:
                    fc:34:90:a4:c0:01:c0:0a:1c:9b:ec:33:7a:04:50:
                    57:1d:8e:a6:e4:03:47:08:5e:8a:62:58:28:e4:3e:
                    68:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8A:45:B0:EA:12:7B:A1:75:B0:85:A0:98:18:6B:56:83:9A:11:B7
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133352e302f32342d3234203d3e203137363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:39:3a:c6:d7:2c:e9:23:a4:a0:bd:06:32:c7:aa:29:ac:8f:
         c3:99:61:47:34:2f:10:4e:30:80:bd:4a:c1:1c:6e:ce:be:1a:
         32:3f:9b:73:2e:d3:a2:2a:f2:9c:72:12:d7:c5:de:4a:73:3d:
         fa:28:67:f5:a3:0d:0c:4c:2d:6b:6a:70:35:06:51:11:a5:3c:
         48:31:b1:6b:e5:d2:c8:ee:68:ff:18:fc:6d:09:51:e6:46:b8:
         c3:e3:e6:ee:33:90:e8:bf:15:3a:f3:da:90:c8:51:b8:a3:50:
         0e:47:a3:f8:71:d4:dd:bf:fc:09:49:f8:5e:65:ea:d1:b1:14:
         e0:05:92:05:c6:b4:94:3e:93:27:f0:76:b9:d7:c1:de:18:ff:
         e1:d0:78:81:d2:64:82:4d:48:7f:16:a8:0f:46:6e:7e:b8:66:
         38:01:02:12:0b:a5:39:16:23:91:c5:a7:db:a7:33:e3:11:fb:
         1e:8e:10:13:59:46:7f:a3:ef:a7:cf:76:d1:32:ef:f6:c6:b6:
         d1:f7:0c:54:e2:8d:86:cc:4b:df:b8:9e:b2:6e:d3:9f:09:5e:
         ab:9b:fb:9a:3c:8e:ba:c6:0c:f2:22:73:af:d0:b8:a7:ba:aa:
         ce:17:d1:80:b4:11:c7:14:b4:4f:35:8b:2f:fe:03:f7:cb:d2:
         49:91:5d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:41:35 2026 by rpki-client