Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3134342e302f32312d3231203d3e203435303836.roa
File:                     3137352e3130322e3134342e302f32312d3231203d3e203435303836.roa (raw, json)
Hash identifier:          xZH+TT7ub3dbtsBQIfqqWu1aQ/Ux+vZdD88hzyBQC2s=
Subject key identifier:   28:3A:A5:49:0B:0E:68:CF:28:AA:C7:81:5F:D8:04:9B:83:33:71:F9
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       039038134B52203446CCFE3582565445F27D8F41
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3134342e302f32312d3231203d3e203435303836.roa
Signing time:             Tue 28 Apr 2026 03:02:33 +0000
ROA not before:           Tue 28 Apr 2026 02:57:33 +0000
ROA not after:            Tue 27 Apr 2027 03:02:33 +0000
asID:                     45086
IP address blocks:        175.102.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:90:38:13:4b:52:20:34:46:cc:fe:35:82:56:54:45:f2:7d:8f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: Apr 28 02:57:33 2026 GMT
            Not After : Apr 27 03:02:33 2027 GMT
        Subject: CN=283AA5490B0E68CF28AAC7815FD8049B833371F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:58:05:c2:5b:56:46:ba:a0:84:6f:2f:b3:67:
                    1e:cd:3f:ad:39:c3:eb:44:33:67:4a:de:56:2c:0a:
                    9d:fa:81:15:f1:b0:21:db:93:16:05:49:b9:ad:60:
                    59:c9:7d:5c:56:0b:25:2d:f1:b4:80:ed:33:6e:17:
                    61:d8:cc:6f:cb:1b:f6:81:0c:cf:15:a2:1d:b0:1e:
                    7c:70:57:a3:a0:4b:83:d3:2a:a8:0e:18:03:48:9f:
                    7d:1b:bf:c8:64:dc:16:cd:29:d2:92:68:f2:5d:cf:
                    ab:df:9c:3c:03:f7:a6:c1:81:17:80:56:e0:15:f4:
                    ed:37:5c:ed:c8:c7:6e:80:3e:15:6b:e4:9c:46:f6:
                    59:e1:52:8b:6f:79:33:df:86:38:2b:fd:19:bf:72:
                    3f:b2:2d:25:37:36:b7:7d:99:4d:37:e3:3b:39:99:
                    b0:ec:8b:d1:03:f3:9e:0d:a2:dc:68:84:63:d3:37:
                    8f:66:0a:2e:f6:61:18:1c:e1:03:32:e8:24:05:00:
                    b9:e5:57:e7:b2:89:26:b2:77:65:b7:a0:ea:0e:92:
                    5c:de:92:7f:15:93:a5:fe:9d:82:03:b9:f7:5f:ca:
                    c4:ae:30:96:c0:73:94:c4:eb:38:ff:f6:5e:b9:35:
                    d7:dc:e1:0e:0b:88:40:b8:58:e0:28:70:f4:13:f1:
                    ab:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:3A:A5:49:0B:0E:68:CF:28:AA:C7:81:5F:D8:04:9B:83:33:71:F9
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3134342e302f32312d3231203d3e203435303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         31:b9:dd:46:96:d0:2e:a0:07:ad:d0:41:00:dd:c7:52:f0:d1:
         7f:01:21:b7:77:32:2e:d1:27:d0:9f:11:19:31:0e:fd:94:31:
         ee:6e:89:a0:fb:a8:c1:29:86:c3:0a:fa:0f:5a:b8:fb:14:bb:
         6f:7e:3c:11:28:8c:79:f6:0f:95:b2:d3:f5:64:fe:8b:e8:28:
         fe:9a:12:d9:9d:d2:d0:f3:8d:2f:de:3d:47:95:1e:35:d0:75:
         84:0c:7c:f2:89:53:af:2e:7f:f7:79:1a:9c:5a:48:e4:d9:4b:
         18:99:f7:84:34:e4:ff:25:6f:fd:00:ff:7e:e4:78:ff:8a:2a:
         3e:ed:68:37:b1:05:8b:f4:20:67:d0:7a:cc:24:28:1a:c6:7e:
         aa:2c:fb:22:c0:57:2d:c3:87:7d:77:03:3b:4b:26:5f:84:04:
         d2:8c:4a:ea:e8:9f:4b:45:aa:7f:55:28:a6:2a:b6:86:f7:3d:
         0b:20:7e:c1:26:65:0e:3c:e4:5c:b3:a3:4c:65:38:69:c7:23:
         93:49:b2:46:7e:14:ce:2c:e3:d9:8b:b9:40:b5:6b:d9:a6:9b:
         22:fe:76:08:ac:11:73:49:72:16:40:65:14:69:a0:22:7f:b3:
         59:ff:e8:1d:5c:4a:85:09:af:2a:0d:40:a7:8f:d0:70:89:33:
         7d:d4:01:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:45:00 2026 by rpki-client