Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3230302e302f32312d3231203d3e203435303836.roa
File:                     3137352e3130322e3230302e302f32312d3231203d3e203435303836.roa (raw, json)
Hash identifier:          ce69GHmprQqgg5fAy1gG7pmNPsZMZYRNR7vYxYZduQM=
Subject key identifier:   74:5E:C8:F5:00:B3:AA:A1:3F:D7:1E:94:77:17:0A:0B:04:23:BF:3D
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       0C7B1E0C2E753B4252E2A77988F7024155ED9B25
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3230302e302f32312d3231203d3e203435303836.roa
Signing time:             Tue 28 Apr 2026 03:14:19 +0000
ROA not before:           Tue 28 Apr 2026 03:09:19 +0000
ROA not after:            Tue 27 Apr 2027 03:14:19 +0000
asID:                     45086
IP address blocks:        175.102.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:7b:1e:0c:2e:75:3b:42:52:e2:a7:79:88:f7:02:41:55:ed:9b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: Apr 28 03:09:19 2026 GMT
            Not After : Apr 27 03:14:19 2027 GMT
        Subject: CN=745EC8F500B3AAA13FD71E9477170A0B0423BF3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3f:0a:48:15:2c:f4:28:5d:e8:68:6b:32:a3:
                    ad:de:0f:76:4f:12:b5:93:17:c4:e1:ae:d9:ae:f4:
                    fd:06:9a:5d:06:fe:9e:24:44:63:33:f0:b9:15:8d:
                    2f:96:50:13:70:e2:10:53:42:55:16:2d:b2:31:b1:
                    8c:fc:74:bb:7e:6a:87:67:0e:8d:9e:1a:5b:65:72:
                    dd:34:7b:8a:77:15:f0:f6:da:57:9a:7d:94:96:88:
                    67:ff:e7:db:d1:a5:c6:b5:a2:38:ad:ac:33:10:c0:
                    5a:a5:f9:87:4f:87:6c:56:30:6c:bb:0a:43:03:68:
                    7d:31:f9:76:13:3f:f5:eb:a8:99:3d:c0:63:2e:da:
                    c9:d8:36:6d:bd:94:6c:66:d0:c6:bb:89:40:8a:7b:
                    ac:eb:72:af:5d:c1:9c:f3:96:b7:14:28:6c:9e:af:
                    89:07:e6:90:55:55:ff:93:a7:f4:9c:85:af:e1:f4:
                    ad:43:f2:7c:60:1f:96:59:26:35:67:e2:f7:cf:59:
                    62:d4:09:7d:29:26:0e:8d:14:9b:94:f2:95:fb:80:
                    91:9d:29:e7:72:b4:72:bb:5e:e9:75:ec:b1:00:81:
                    14:99:e5:aa:37:37:59:6f:5d:b2:20:9d:26:fe:fa:
                    90:90:1d:cb:5f:f8:20:13:5c:c1:5f:ca:fb:ed:5b:
                    c9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5E:C8:F5:00:B3:AA:A1:3F:D7:1E:94:77:17:0A:0B:04:23:BF:3D
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3230302e302f32312d3231203d3e203435303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         01:94:82:de:49:57:d0:84:42:ec:de:0d:9e:a9:66:20:84:bd:
         5d:35:18:21:e8:e9:97:87:6b:f0:cb:59:5b:a7:cb:62:0f:35:
         25:f9:a6:3d:4d:75:2b:4c:1e:a6:ab:93:31:f0:71:73:7a:22:
         d6:0a:15:c5:fc:d4:56:40:af:de:41:d6:ec:3f:06:7d:5b:72:
         4a:be:1e:82:dc:46:3f:7f:cb:13:86:15:57:88:e2:27:60:4b:
         1e:e9:61:cd:37:82:6c:e9:20:32:d7:33:fa:57:87:d2:da:7c:
         e4:9f:b5:f3:01:a1:04:f2:85:5d:71:95:26:53:83:1f:73:bf:
         14:99:7f:94:6b:e0:83:8e:f4:41:98:97:b6:03:d1:3c:b4:d8:
         76:c7:50:69:49:cd:77:3f:38:7b:2a:ed:41:34:69:e2:02:17:
         eb:ab:f6:dd:1c:ce:ff:9b:e5:89:e9:6e:38:80:ce:0b:bc:bd:
         9c:3a:c6:0e:78:6b:5e:99:ea:04:ea:e8:0f:a9:16:54:8d:f1:
         2a:52:52:b8:e0:ae:61:96:d5:e5:91:69:a3:1c:e2:54:01:97:
         2b:f0:0b:b1:2e:0a:9b:1f:4b:09:9b:22:ed:96:39:d8:40:92:
         fc:be:b1:e1:e6:f4:15:14:6d:be:a8:82:dc:a4:50:de:f6:89:
         91:62:83:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:56:23 2026 by rpki-client