Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e31392e302f32342d3234203d3e203435303836.roa
File:                     3137352e3130322e31392e302f32342d3234203d3e203435303836.roa (raw, json)
Hash identifier:          JZmMGmz+PtRUXtzwtuk+X9KJ0H0X8bsvtk3tWUhdpCU=
Subject key identifier:   3B:0D:F0:C0:CB:F1:35:43:69:53:64:3A:DE:2A:0A:7B:E0:D1:34:65
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       70CCD4D07F418D16CE4A1002880B1F44C9D48415
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e31392e302f32342d3234203d3e203435303836.roa
Signing time:             Thu 07 May 2026 01:42:34 +0000
ROA not before:           Thu 07 May 2026 01:37:34 +0000
ROA not after:            Thu 06 May 2027 01:42:34 +0000
asID:                     45086
IP address blocks:        175.102.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:cc:d4:d0:7f:41:8d:16:ce:4a:10:02:88:0b:1f:44:c9:d4:84:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: May  7 01:37:34 2026 GMT
            Not After : May  6 01:42:34 2027 GMT
        Subject: CN=3B0DF0C0CBF135436953643ADE2A0A7BE0D13465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:02:43:f4:52:46:18:fd:80:9f:4c:2f:10:62:
                    00:76:2c:fa:09:56:ff:0f:0f:83:2d:49:14:b2:ba:
                    8f:88:2d:f4:b6:d0:17:16:57:32:f8:fb:1f:11:b5:
                    fc:b0:08:65:ac:30:c7:d7:75:d1:a1:eb:1b:ad:36:
                    03:97:1c:60:55:a7:4f:d0:1b:9d:a9:3d:32:a5:0a:
                    69:15:e3:14:08:7c:82:74:66:e8:64:68:1c:b9:0c:
                    a1:18:f6:73:82:7d:f3:9e:2a:ed:63:dc:8c:e8:55:
                    68:64:31:55:2f:ec:41:82:98:14:1e:65:5a:c1:8c:
                    95:f9:00:b7:b3:cb:a3:17:a5:72:60:2a:5e:99:67:
                    e2:1b:bd:68:4e:e6:90:e5:13:24:ad:21:ec:98:ab:
                    4d:21:f6:8a:0d:64:5d:fb:e2:c0:9f:bf:c4:91:e0:
                    6e:c7:dc:35:72:b7:e0:2d:c0:07:de:63:46:68:c1:
                    8b:08:ba:bd:47:fe:a2:96:25:36:c5:6a:31:00:f2:
                    b4:df:b9:62:ab:68:4d:89:a3:9b:9d:ff:fa:e5:ee:
                    10:11:a1:a0:b0:25:01:35:84:74:60:fb:b6:b5:63:
                    f1:9c:7c:22:4f:cc:cb:6d:b1:77:ad:02:b8:e7:a1:
                    f2:41:19:5b:1d:bc:d7:93:e0:08:6a:2a:6c:ae:5b:
                    cf:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0D:F0:C0:CB:F1:35:43:69:53:64:3A:DE:2A:0A:7B:E0:D1:34:65
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e31392e302f32342d3234203d3e203435303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:b9:d6:96:89:53:80:b6:07:bb:49:cd:b0:63:26:3f:92:09:
         87:35:0d:ce:0a:8a:cf:0f:4d:ef:4b:92:c1:06:8c:7d:5f:62:
         0e:36:25:c2:3c:7f:72:26:23:a3:9c:b1:d1:44:fe:a1:62:ec:
         1b:48:18:e6:24:f0:bb:b3:ad:c0:c6:70:6c:a6:e1:98:2f:15:
         f8:04:cd:85:bd:43:f7:b4:55:47:92:18:01:b9:47:44:5a:a9:
         fc:08:50:29:76:6a:3b:64:c8:16:a6:5f:5f:57:b2:f3:52:79:
         28:4f:93:e7:2a:19:38:04:37:52:d5:f7:f8:19:e5:2a:a5:39:
         e6:2c:92:6c:90:88:32:03:c6:0a:04:b8:09:fb:77:25:0d:c3:
         6a:35:ed:a9:3c:3d:55:aa:1e:36:ad:1b:f7:94:67:a5:79:b1:
         c8:14:5c:be:02:77:d7:95:ed:4e:15:d7:00:e7:03:aa:f5:05:
         32:20:ca:d3:e8:b0:9a:4b:bc:ed:4d:35:ad:8c:a9:a6:86:86:
         c9:0a:01:8f:25:4d:01:f5:34:5a:f6:48:8e:ba:b1:38:a0:9d:
         fb:9a:d2:b9:8b:27:37:27:29:78:74:a8:f0:dc:63:e4:e4:3a:
         8c:f9:af:28:52:84:ee:ea:33:70:29:fc:87:6d:cd:ce:ca:f5:
         ac:2c:87:b8
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUcMzU0H9BjRbOShACiAsfRMnUhBUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDYxMzgwRDNDRThFMkI0NzJFOUI2OEEyOEJDQUM1Qzcy
NUIwMkMwOTAeFw0yNjA1MDcwMTM3MzRaFw0yNzA1MDYwMTQyMzRaMDMxMTAvBgNV
BAMTKDNCMERGMEMwQ0JGMTM1NDM2OTUzNjQzQURFMkEwQTdCRTBEMTM0NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgAkP0UkYY/YCfTC8QYgB2LPoJ
Vv8PD4MtSRSyuo+ILfS20BcWVzL4+x8RtfywCGWsMMfXddGh6xutNgOXHGBVp0/Q
G52pPTKlCmkV4xQIfIJ0ZuhkaBy5DKEY9nOCffOeKu1j3IzoVWhkMVUv7EGCmBQe
ZVrBjJX5ALezy6MXpXJgKl6ZZ+IbvWhO5pDlEyStIeyYq00h9ooNZF374sCfv8SR
4G7H3DVyt+AtwAfeY0ZowYsIur1H/qKWJTbFajEA8rTfuWKraE2Jo5ud//rl7hAR
oaCwJQE1hHRg+7a1Y/GcfCJPzMttsXetArjnofJBGVsdvNeT4AhqKmyuW8+3AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUOw3wwMvxNUNpU2Q63ioKe+DRNGUwHwYDVR0j
BBgwFoAUBhOA086OK0cum2iii8rFxyWwLAkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
MDk2Nzg4MjcxMzQ2NDgzNS8wLzA2MTM4MEQzQ0U4RTJCNDcyRTlCNjhBMjhCQ0FD
NUM3MjVCMDJDMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMDYxMzgwRDNDRThFMkI0NzJFOUI2OEEyOEJDQUM1QzcyNUIwMkMwOS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwMDk2Nzg4MjcxMzQ2NDgzNS8wLzMxMzczNTJlMzEz
MDMyMmUzMTM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNTMwMzgzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAK9mEzANBgkqhkiG9w0BAQsFAAOCAQEAbLnWlolTgLYHu0nNsGMmP5IJ
hzUNzgqKzw9N70uSwQaMfV9iDjYlwjx/ciYjo5yx0UT+oWLsG0gY5iTwu7OtwMZw
bKbhmC8V+ATNhb1D97RVR5IYAblHRFqp/AhQKXZqO2TIFqZfX1ey81J5KE+T5yoZ
OAQ3UtX3+BnlKqU55iySbJCIMgPGCgS4Cft3JQ3DajXtqTw9VaoeNq0b95RnpXmx
yBRcvgJ315XtThXXAOcDqvUFMiDK0+iwmku87U01rYyppoaGyQoBjyVNAfU0WvZI
jrqxOKCd+5rSuYsnNycpeHSo8Nxj5OQ6jPmvKFKE7uozcCn8h23Nzsr1rCyHuA==
-----END CERTIFICATE-----
Generated at Wed May 13 17:05:07 2026 by rpki-client