Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e31382e302f32342d3234203d3e203435303836.roa
File:                     3137352e3130322e31382e302f32342d3234203d3e203435303836.roa (raw, json)
Hash identifier:          ChyQB6+Jy/gGmNn/CVKghDSJTYSUcAvVRUGWrMF4REY=
Subject key identifier:   ED:9A:D9:88:9D:D9:ED:67:CF:69:FA:3B:1F:29:F7:89:EA:23:44:6F
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       450D09DA334A329794B69F50E5363E13794BAD26
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e31382e302f32342d3234203d3e203435303836.roa
Signing time:             Thu 07 May 2026 01:42:34 +0000
ROA not before:           Thu 07 May 2026 01:37:34 +0000
ROA not after:            Thu 06 May 2027 01:42:34 +0000
asID:                     45086
IP address blocks:        175.102.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:0d:09:da:33:4a:32:97:94:b6:9f:50:e5:36:3e:13:79:4b:ad:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: May  7 01:37:34 2026 GMT
            Not After : May  6 01:42:34 2027 GMT
        Subject: CN=ED9AD9889DD9ED67CF69FA3B1F29F789EA23446F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ec:b5:8b:cc:4e:bc:5a:09:28:7e:7c:41:b7:
                    44:08:d1:80:4e:89:6d:55:73:39:2b:6b:7a:19:48:
                    99:c1:29:60:e9:a8:8e:1d:78:71:8f:1e:76:e8:17:
                    60:f6:ec:1c:ab:a7:87:38:45:c2:9b:f1:a0:46:78:
                    0b:f0:1e:0a:64:37:88:63:1e:08:22:bf:a3:b3:b1:
                    d6:fd:16:64:aa:48:29:f3:85:b6:70:3a:35:9d:19:
                    79:63:bb:56:73:41:b9:6b:16:45:da:05:a4:68:b2:
                    b4:93:fd:6e:c9:a5:02:ca:e0:5a:b3:a8:79:95:81:
                    cd:e8:84:51:2f:72:f9:79:ee:b8:29:1c:10:31:7d:
                    7f:65:d5:95:77:f6:b0:e5:db:b3:92:91:e8:3c:6b:
                    7c:19:c3:53:35:9d:33:c6:e9:7e:eb:b3:c8:1e:63:
                    c1:52:85:5e:d1:fd:fa:0d:fd:b5:d8:07:54:9e:0c:
                    9c:24:e2:c2:82:68:6c:e2:2e:2e:c3:3f:16:eb:d5:
                    d9:f1:89:cf:f4:11:7d:b7:1d:00:64:82:66:4f:c7:
                    76:c7:2f:44:b4:79:fc:e9:57:60:7d:9a:53:3c:32:
                    43:64:af:4d:30:c0:00:f8:37:e5:d1:e0:8e:56:27:
                    52:53:29:3d:5d:ce:ed:d0:a1:b7:fe:c5:3d:ab:74:
                    c1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:9A:D9:88:9D:D9:ED:67:CF:69:FA:3B:1F:29:F7:89:EA:23:44:6F
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e31382e302f32342d3234203d3e203435303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:7f:2e:05:2c:d5:15:ea:2a:e8:78:8b:05:08:2e:4f:a2:46:
         46:d6:fe:e3:f6:b4:96:ec:2c:fb:61:58:cb:87:58:01:d6:ee:
         80:65:2b:d3:c8:2a:9a:3b:e4:e9:be:13:a1:7e:e9:da:ac:40:
         e8:03:38:7f:13:4e:6a:c4:d4:84:42:12:64:4f:28:93:cc:18:
         db:45:9a:96:cf:5e:c5:93:d9:76:a1:b0:22:9a:39:77:7c:04:
         a9:30:b2:f1:e2:56:ee:be:21:e4:0a:7f:3d:be:3c:62:63:f6:
         db:99:73:ac:f0:71:4f:36:a6:c7:11:12:ff:e2:aa:f8:42:47:
         6a:c9:44:18:f6:34:9d:33:1d:7b:88:27:00:80:90:66:8d:0f:
         bb:ed:2d:9c:f0:8c:79:a8:b7:3d:40:33:7f:46:ae:be:12:bf:
         9b:4f:56:0b:7c:42:16:83:2f:b2:a8:71:68:5b:4e:21:ba:a3:
         dd:4d:89:80:39:8f:dc:3a:8e:32:df:17:e4:b8:42:3f:00:9d:
         ae:5e:68:a4:85:9c:49:74:27:11:e9:3c:65:f8:a4:79:e4:70:
         bb:bc:8c:6b:16:e2:5e:46:75:10:dd:93:9e:65:d6:fd:4b:e7:
         ac:01:16:28:cd:cc:05:f4:6b:f8:47:da:e4:9e:af:6c:86:77:
         39:85:5e:fb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 17:37:11 2026 by rpki-client