Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e31342e302f32332d3233203d3e2034383131.roa
File:                     3137352e3130322e31342e302f32332d3233203d3e2034383131.roa (raw, json)
Hash identifier:          BC9gqxdroZE1+IMvZdmg63aA3tvH64bl5/XoQ42/qfw=
Subject key identifier:   DE:4B:AB:53:D8:5F:52:26:5A:B2:48:55:60:AE:FA:93:FE:D8:F7:A1
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       341F9D312C684D961315A72BF597A8733604EF85
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e31342e302f32332d3233203d3e2034383131.roa
Signing time:             Thu 07 May 2026 01:40:09 +0000
ROA not before:           Thu 07 May 2026 01:35:09 +0000
ROA not after:            Thu 06 May 2027 01:40:09 +0000
asID:                     4811
IP address blocks:        175.102.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:1f:9d:31:2c:68:4d:96:13:15:a7:2b:f5:97:a8:73:36:04:ef:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: May  7 01:35:09 2026 GMT
            Not After : May  6 01:40:09 2027 GMT
        Subject: CN=DE4BAB53D85F52265AB2485560AEFA93FED8F7A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:42:9a:77:e3:73:30:a1:02:23:1c:ed:e4:7e:
                    c0:0f:27:34:3c:da:c1:19:53:27:ba:6e:84:a9:53:
                    6c:3a:5b:99:33:68:61:04:d0:96:40:bc:86:14:22:
                    62:76:04:39:e0:2d:46:e3:33:4e:46:27:0f:71:9b:
                    65:6e:4e:ea:e7:a0:18:d2:73:7b:dd:cc:18:19:e3:
                    ed:67:c6:0b:30:07:12:80:89:2c:2b:5e:9c:70:e3:
                    c8:0b:4b:59:bd:b1:fb:fd:b4:62:e5:67:d1:3c:03:
                    ce:3e:1a:34:48:0a:6b:d6:25:f3:16:74:33:75:11:
                    55:b3:15:49:cf:26:48:95:a6:9f:9c:d7:ec:58:b6:
                    2a:e9:0f:e5:dc:c3:eb:94:ae:fa:b0:48:89:31:54:
                    48:c6:d8:5a:c9:d2:5f:cb:31:97:5f:7f:21:bd:ec:
                    37:4f:0e:a4:7f:3a:da:09:46:e6:7d:ba:84:ee:bc:
                    e1:36:f6:8f:82:e7:82:59:87:4d:d6:a5:89:31:75:
                    b8:93:bb:db:15:e6:08:14:c6:37:2f:a2:71:88:70:
                    9d:e6:e7:92:8e:0b:39:21:05:2b:1e:e0:e2:e9:f5:
                    8b:6c:98:f9:25:69:10:8d:be:90:bf:7b:f5:82:b3:
                    2a:8c:3b:6c:32:31:4d:61:33:00:10:28:fc:d6:fd:
                    0e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4B:AB:53:D8:5F:52:26:5A:B2:48:55:60:AE:FA:93:FE:D8:F7:A1
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e31342e302f32332d3233203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:1b:14:09:70:60:81:39:fd:3b:a6:40:a3:8a:94:a6:94:17:
         3a:da:d2:01:cd:6c:ad:ff:91:cf:ed:66:42:a6:82:49:5a:c4:
         13:ac:a7:63:ea:17:3b:77:d1:da:fb:6d:24:2b:1e:55:6e:e1:
         02:45:a8:c9:34:c8:76:52:a1:49:a3:6c:cc:71:66:74:e6:ab:
         ab:0a:77:bf:ae:a8:ad:7e:92:17:a8:54:02:2c:b9:3f:6c:36:
         ec:0d:28:51:a0:c6:55:54:b5:be:3a:b5:75:56:9d:c0:3a:b3:
         d6:c6:da:df:78:f9:62:e9:af:9e:10:fc:dc:0c:b8:e1:00:bd:
         50:50:c9:f8:11:43:26:5d:5f:96:8a:10:2b:a1:bd:87:fb:b3:
         78:9e:fb:46:c4:3f:fd:21:72:e7:9b:0d:c2:78:94:fc:c4:9b:
         83:6c:09:15:e2:8f:2b:e1:e5:b9:44:44:53:d9:56:a9:c8:65:
         c7:4c:ca:e8:e4:62:94:f1:ea:dc:61:1e:ca:86:61:c8:70:9a:
         2a:d9:a9:1a:8a:13:83:a6:9f:fc:40:31:eb:bb:be:05:5c:10:
         d7:14:1d:76:d2:ec:d6:d8:85:1c:dd:eb:34:e0:d2:57:6e:02:
         3f:6b:47:1b:b9:c2:7c:d4:01:d3:a8:3c:17:1b:ad:43:43:fc:
         f8:53:5e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:00:49 2026 by rpki-client