Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e31382e302f32342d3234203d3e2034383131.roa
File:                     3137352e3130322e31382e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier:          8eTgp0lyr6mXUL0Zn6lsnrKEnACAoQxJwEcFFL7IsNA=
Subject key identifier:   0A:BF:8C:8E:8B:D9:15:F2:88:D3:94:3E:B5:04:4C:DC:E0:86:DA:B8
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       3711F18AFB4A1898D2EA86E7F4EC1AD4ED501096
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e31382e302f32342d3234203d3e2034383131.roa
Signing time:             Thu 07 May 2026 01:42:34 +0000
ROA not before:           Thu 07 May 2026 01:37:34 +0000
ROA not after:            Thu 06 May 2027 01:42:34 +0000
asID:                     4811
IP address blocks:        175.102.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:11:f1:8a:fb:4a:18:98:d2:ea:86:e7:f4:ec:1a:d4:ed:50:10:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: May  7 01:37:34 2026 GMT
            Not After : May  6 01:42:34 2027 GMT
        Subject: CN=0ABF8C8E8BD915F288D3943EB5044CDCE086DAB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:58:67:83:8a:f7:81:43:e7:ea:75:46:4a:d0:
                    ae:2f:4d:f2:88:f0:b1:60:05:cc:72:a4:9a:61:84:
                    4a:23:92:ce:9e:94:64:0c:fd:e3:5c:4b:cb:d3:b9:
                    70:e0:49:e1:a9:b9:d2:77:39:a8:ae:06:c5:1a:8e:
                    66:f8:8e:83:c0:9d:b6:11:68:68:ee:a5:12:a9:d7:
                    cd:31:b9:57:4a:52:a5:e4:fa:51:b9:7c:bd:15:bb:
                    40:18:1d:1b:fd:64:14:e1:c3:47:d5:43:5a:5e:4b:
                    e0:99:86:a8:d6:fa:8d:d9:54:41:ac:ae:f9:05:2b:
                    e6:c5:c2:b9:2b:10:d9:eb:64:44:6f:f8:cb:a1:9d:
                    8d:a0:aa:4f:5a:a9:8c:88:96:46:c7:c7:14:58:bf:
                    5b:2c:c7:e3:64:cb:74:2f:17:39:06:ed:35:88:41:
                    31:c2:b5:20:a9:ea:f0:ad:a0:b6:db:33:8b:58:5d:
                    ac:5c:71:1c:fc:97:99:d6:d3:1c:de:51:9e:a2:f6:
                    57:dd:40:d1:74:9c:db:4a:7a:da:f9:9d:6b:7f:4d:
                    da:c6:02:5e:d3:2f:b3:ed:88:c7:4d:fe:3a:30:ed:
                    95:75:70:50:82:fa:33:1e:01:ad:95:54:63:c5:f5:
                    d7:ad:5c:e2:1d:59:b0:ad:36:df:66:3a:c7:c3:83:
                    c6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BF:8C:8E:8B:D9:15:F2:88:D3:94:3E:B5:04:4C:DC:E0:86:DA:B8
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e31382e302f32342d3234203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:0c:89:24:96:b7:8e:30:71:09:59:62:1f:0e:93:df:59:7f:
         eb:3a:34:21:7a:f6:87:ca:0d:6d:65:1e:f3:5d:dd:39:b7:f3:
         87:3c:9a:5d:e6:42:ec:ee:f5:99:e4:13:11:61:fc:12:8b:0e:
         3c:9a:07:78:85:33:34:28:c3:6b:9f:10:5f:6e:74:e5:77:57:
         34:69:74:3f:15:2c:8a:ac:ee:42:a2:b9:e3:ad:67:dd:99:b9:
         18:20:a2:e9:2a:f7:12:6f:c7:ce:3d:ee:ab:fa:8f:65:85:fd:
         f3:7d:49:11:f7:e2:f8:e1:e7:db:cc:f5:8a:34:65:58:fc:7c:
         33:fc:c0:0b:ac:92:a5:9e:75:12:e0:44:2a:61:73:1d:cc:74:
         a2:f3:bd:b2:a5:98:3d:9e:75:e0:a5:b0:77:f8:b3:df:89:0b:
         e4:4e:97:ff:93:ab:36:78:db:3f:d1:bf:39:a9:1e:24:c7:7e:
         81:91:c5:1d:95:39:28:e3:bc:67:c2:da:39:34:e7:fd:18:97:
         56:cd:95:6b:df:16:1f:1c:fa:c9:e0:1c:33:58:3d:cb:91:ea:
         20:3e:9f:bb:93:87:7b:99:ed:d3:9c:7b:0d:15:43:8a:ee:fb:
         02:9e:55:a9:fd:ed:b7:86:f7:54:c7:65:23:cc:a4:fb:23:3c:
         48:b9:fd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:12:03 2026 by rpki-client