Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e31372e302f32342d3234203d3e203435303836.roa
File:                     3137352e3130322e31372e302f32342d3234203d3e203435303836.roa (raw, json)
Hash identifier:          6xfQA8C2e3mJMmlre5nxCZtnQ1lF0lrItrZ4vz9uvow=
Subject key identifier:   25:E2:61:05:BE:63:34:35:32:D8:14:5C:0D:9B:E5:1F:51:F6:E9:5F
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       067F728D23DE05DF93AABE441C92FB7055CF9579
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e31372e302f32342d3234203d3e203435303836.roa
Signing time:             Thu 07 May 2026 01:42:34 +0000
ROA not before:           Thu 07 May 2026 01:37:34 +0000
ROA not after:            Thu 06 May 2027 01:42:34 +0000
asID:                     45086
IP address blocks:        175.102.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7f:72:8d:23:de:05:df:93:aa:be:44:1c:92:fb:70:55:cf:95:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: May  7 01:37:34 2026 GMT
            Not After : May  6 01:42:34 2027 GMT
        Subject: CN=25E26105BE63343532D8145C0D9BE51F51F6E95F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:90:8b:a6:1d:ff:4e:bd:86:c1:fe:09:12:f3:
                    0d:86:ed:48:ac:65:ee:db:e6:7e:e9:60:55:af:58:
                    2a:c8:54:36:ad:a8:a0:f3:a4:8e:4e:7f:f8:80:fb:
                    7e:38:45:15:fa:60:2f:59:86:c3:2c:7c:79:44:68:
                    1a:fb:18:94:44:98:74:03:7e:95:e6:27:3b:28:a8:
                    57:ae:73:44:b7:4b:67:67:29:a4:56:2b:49:31:56:
                    5e:ff:f0:71:21:02:89:6d:57:99:ae:56:d0:8f:e0:
                    b8:6f:d0:b6:9d:08:e6:d4:7c:14:3a:3a:02:f0:24:
                    70:e3:9f:13:64:aa:c3:d4:60:7d:19:47:2c:78:b2:
                    40:3c:60:73:45:18:c2:d9:34:61:0f:f4:bb:46:a3:
                    d5:a1:e2:9a:d2:18:91:a5:93:b2:54:e6:8f:b5:81:
                    14:5a:0b:94:1e:a2:f5:51:61:c5:fd:39:1a:73:69:
                    a8:f4:b5:9e:00:b1:72:1b:59:54:94:dc:48:12:6f:
                    4a:b4:66:13:81:ab:54:b3:7c:61:ad:a2:ec:f3:f1:
                    2c:c3:90:53:4b:d4:a4:a8:af:a6:aa:a2:69:c6:d7:
                    f3:59:54:3c:ba:b8:59:07:1b:e5:a3:98:3d:18:d7:
                    2f:e6:ce:da:f7:ba:91:ef:67:7a:20:f7:94:f6:77:
                    03:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E2:61:05:BE:63:34:35:32:D8:14:5C:0D:9B:E5:1F:51:F6:E9:5F
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e31372e302f32342d3234203d3e203435303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:a2:23:48:80:98:29:4d:61:4d:5d:3e:d1:6b:1a:40:56:0a:
         38:63:4f:dc:20:09:a9:48:b7:ab:88:53:25:04:99:06:fc:a8:
         ba:30:aa:84:58:d6:04:f7:da:5c:25:11:1d:49:f1:8a:2e:0c:
         81:82:7d:8a:6d:06:42:41:81:3a:e4:aa:88:e3:a0:f8:59:e3:
         53:af:53:30:13:96:e5:18:51:aa:70:b2:cb:79:a5:7e:1e:92:
         f7:73:91:aa:66:0e:3a:a6:37:a3:31:9c:fd:ad:49:cd:e3:6c:
         36:34:13:30:77:87:6b:33:1c:23:1b:7f:22:54:8d:9b:80:19:
         a4:1b:d1:5b:7e:aa:1b:22:12:25:fd:15:41:4b:bd:ab:59:be:
         77:21:21:b2:c7:99:2d:48:01:0d:54:ef:0b:81:fd:30:3f:b8:
         67:e4:e0:34:09:94:4a:a3:b4:c8:8f:c8:5e:c9:3d:df:4c:57:
         67:c4:b3:a2:56:af:c6:c9:6a:82:df:cd:50:6a:5d:4b:87:f2:
         20:69:52:a7:be:89:92:39:97:c9:b2:27:39:2d:bd:f3:1b:c9:
         cf:e8:f0:20:77:49:4e:94:4a:5a:bb:9d:84:0d:f0:6d:39:5d:
         24:db:be:a6:41:36:ff:cd:1f:ed:98:a6:21:5d:dd:86:e5:f8:
         09:0e:ee:8e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 17:44:55 2026 by rpki-client