Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e31392e302f32342d3234203d3e203137363231.roa
File:                     3137352e3130322e31392e302f32342d3234203d3e203137363231.roa (raw, json)
Hash identifier:          EaUaICA6HoosaSa+lmieSw02T40aHhK75lj/2P0Ipfg=
Subject key identifier:   3C:78:88:5A:27:A6:45:D7:42:77:B2:00:6F:3C:80:E4:22:C2:49:0D
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       7441D4624E0F13458AA81F91BB66D9A91D206155
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e31392e302f32342d3234203d3e203137363231.roa
Signing time:             Thu 07 May 2026 01:42:34 +0000
ROA not before:           Thu 07 May 2026 01:37:34 +0000
ROA not after:            Thu 06 May 2027 01:42:34 +0000
asID:                     17621
IP address blocks:        175.102.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:41:d4:62:4e:0f:13:45:8a:a8:1f:91:bb:66:d9:a9:1d:20:61:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: May  7 01:37:34 2026 GMT
            Not After : May  6 01:42:34 2027 GMT
        Subject: CN=3C78885A27A645D74277B2006F3C80E422C2490D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b3:3f:e1:9a:41:de:85:42:c3:fa:6b:39:62:
                    9f:0b:ac:02:e8:bb:98:1c:b5:b7:bb:51:2a:81:16:
                    75:4f:57:33:ab:61:c6:61:59:6d:73:d1:8f:0c:53:
                    51:b3:cd:7b:a2:b9:c0:24:de:14:7a:d0:7d:ca:a1:
                    52:92:f7:0e:d2:55:92:fc:e9:71:93:a4:7b:36:f8:
                    93:82:75:65:6a:6d:19:f3:df:e7:65:9d:19:5b:62:
                    65:87:74:4a:0d:a5:42:c8:71:d8:7b:2b:8d:25:82:
                    6f:27:05:49:14:51:ed:0e:41:24:9f:fd:cc:a2:fa:
                    1d:ea:55:6e:8d:ac:57:35:04:f3:18:c9:de:e2:bf:
                    e8:75:ba:38:9f:ae:fa:1f:f5:02:01:f5:24:08:80:
                    0c:da:f3:56:58:39:41:dc:ba:66:26:a3:10:44:12:
                    51:00:20:a1:1a:69:3d:aa:62:9d:a3:2f:ec:9f:df:
                    e3:4d:28:b1:8d:19:b2:eb:c8:f9:80:5a:c0:0a:4f:
                    49:d7:a7:7f:84:a7:a7:e4:3a:91:e2:3e:7b:98:0a:
                    35:14:04:14:ab:fc:07:19:5a:37:39:61:f8:5f:b6:
                    13:0a:24:a3:2b:fc:33:f3:c0:bb:8f:f0:34:c8:c2:
                    7f:a2:76:e8:11:73:1a:44:be:47:20:e9:51:68:3f:
                    de:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:78:88:5A:27:A6:45:D7:42:77:B2:00:6F:3C:80:E4:22:C2:49:0D
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e31392e302f32342d3234203d3e203137363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:0e:80:7e:fb:94:8c:4c:41:28:93:04:a0:83:b0:e1:c3:3c:
         2a:92:ca:4d:4f:82:db:1f:b1:23:37:ed:cc:9f:e4:d8:93:fe:
         56:a4:17:8e:8b:66:87:7f:ca:26:eb:0f:c5:20:3d:2b:96:cc:
         11:d9:e8:b7:6e:76:16:a5:8f:ca:50:cf:c5:48:fe:e5:74:45:
         7c:74:97:53:1c:8e:35:c7:22:8d:16:ee:36:36:e1:fd:73:bc:
         d3:c2:1d:b8:36:44:05:f4:f0:68:61:3f:8b:21:19:3e:c0:66:
         e1:6e:5b:6e:e3:56:e5:b0:46:c1:fc:95:87:8c:b7:2f:40:1b:
         7f:45:27:f3:99:93:53:89:f8:01:28:4d:8e:5c:98:c3:51:f8:
         0e:83:8a:6c:a3:74:3e:7b:7d:85:19:3e:3d:b6:34:62:54:ee:
         9b:c7:c4:05:83:fd:0f:95:a0:0a:01:38:63:b1:ed:55:75:8a:
         d4:cd:51:ba:54:8f:51:46:51:59:73:ab:16:6e:72:37:a3:ea:
         12:f2:86:d5:2b:5e:ca:2d:be:1f:6e:36:67:4b:24:7c:f4:6f:
         40:3c:50:c9:95:bc:7f:ca:e2:97:a6:8d:77:43:f0:37:75:19:
         aa:10:8b:7f:81:10:8e:74:98:3d:29:78:68:84:ca:82:3b:0f:
         bd:54:30:61
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 16:11:45 2026 by rpki-client