Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133352e302f32342d3234203d3e2034383131.roa
File:                     3137352e3130322e3133352e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier:          VtfuRp1AMMzvn4DxRChrOHbBlwqAUOvWvN/qme1tKqE=
Subject key identifier:   C0:83:2F:3F:79:C5:D6:8C:2A:08:ED:71:C2:C7:C1:39:45:4C:6F:81
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       6D3A66F0E74677E9CC037B8C2247D82A43FFC0C6
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133352e302f32342d3234203d3e2034383131.roa
Signing time:             Thu 07 May 2026 01:49:11 +0000
ROA not before:           Thu 07 May 2026 01:44:11 +0000
ROA not after:            Thu 06 May 2027 01:49:11 +0000
asID:                     4811
IP address blocks:        175.102.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:3a:66:f0:e7:46:77:e9:cc:03:7b:8c:22:47:d8:2a:43:ff:c0:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: May  7 01:44:11 2026 GMT
            Not After : May  6 01:49:11 2027 GMT
        Subject: CN=C0832F3F79C5D68C2A08ED71C2C7C139454C6F81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d7:1c:7b:02:82:85:e0:fa:f7:b9:cd:ff:7b:
                    51:05:42:61:26:b4:08:fb:95:5a:84:de:34:ce:30:
                    d3:3c:65:ff:a8:73:f9:e5:a5:78:af:fa:b1:9b:49:
                    cd:d1:55:be:9a:cb:02:f9:a0:89:e6:75:88:df:89:
                    28:d7:8f:e5:bd:c5:c9:64:1b:dd:b8:32:d8:62:3c:
                    62:2c:6d:98:65:20:28:f4:26:8d:8e:fd:18:6e:60:
                    86:93:80:93:4a:db:b9:2f:8b:ef:f7:ee:c5:3e:ec:
                    38:03:5f:17:4b:9c:c3:f2:2c:23:a1:e0:91:09:71:
                    69:7a:e9:fe:de:98:c5:40:fe:42:75:50:f4:f0:c6:
                    57:0f:e8:53:9e:4d:d5:04:d9:51:fc:55:d4:d5:18:
                    77:f2:63:f4:31:8c:71:e5:e5:38:e4:d9:a9:d9:37:
                    03:3e:7a:9c:81:e2:ae:e1:8c:89:a9:15:80:e1:24:
                    32:43:3a:54:ae:c1:18:b0:3b:d4:a0:81:1a:26:3e:
                    e5:94:f4:11:ab:ac:7e:a7:75:88:8f:c2:1a:8d:d8:
                    ce:1b:36:47:29:6d:ca:02:43:5e:83:22:68:cb:d5:
                    31:69:21:86:c6:00:8b:48:13:b8:4a:2a:ec:ed:86:
                    5b:8b:65:5b:3f:b5:47:6f:5d:57:6a:5a:aa:57:32:
                    1e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:83:2F:3F:79:C5:D6:8C:2A:08:ED:71:C2:C7:C1:39:45:4C:6F:81
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133352e302f32342d3234203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:99:8e:99:a8:6a:24:53:10:be:ad:b7:45:19:24:4f:13:d1:
         52:5d:92:29:ae:e2:ac:7b:09:2e:84:cb:2f:af:73:93:0b:66:
         72:23:a3:b4:02:88:d2:94:a1:20:51:fc:1f:3c:64:cc:5d:11:
         26:80:d1:c3:81:31:72:27:40:4d:7f:e6:97:36:29:80:5f:44:
         c4:36:9d:af:79:05:85:80:8f:ef:55:eb:59:d8:30:fc:d3:30:
         49:c0:3a:49:4c:a7:a3:01:2d:6d:d2:6e:2d:10:9f:90:e1:72:
         0e:fe:b9:7d:5c:3e:32:d0:e6:32:2d:f7:2a:42:df:bb:fc:06:
         aa:70:f8:0a:4e:8e:42:fe:8e:fa:a0:a5:bd:56:2e:04:08:96:
         ee:94:92:64:49:d1:09:31:8f:ef:d4:b7:89:d5:70:15:e9:4f:
         3a:1f:d0:71:17:4a:77:e0:85:63:4b:27:80:b0:cd:e2:16:54:
         70:44:0d:c6:35:1c:9d:6c:62:3f:1d:ba:c6:9c:bf:52:db:9f:
         43:43:3d:60:79:55:bc:ce:c6:a6:f0:2d:1d:25:2d:3b:f6:0c:
         7b:39:19:46:60:94:ae:43:6d:77:4a:39:98:86:dd:fc:c7:c2:
         e3:45:64:cd:a8:0e:e9:a6:0f:ba:9f:02:f1:0c:e4:e3:e3:65:
         ce:65:11:14
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 15:45:05 2026 by rpki-client