Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32322e302f32342d3234203d3e203435303836.roa
File:                     3137352e3130322e32322e302f32342d3234203d3e203435303836.roa (raw, json)
Hash identifier:          V6QSs53hgf0IiiA9FsxBSb6Z3hS4qZkIwoP568YxYiM=
Subject key identifier:   3A:D3:4C:2B:BB:AD:62:20:79:86:FF:1B:4C:C8:51:7D:A5:D2:BA:24
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       166633B746255D3507ED85F72C2FE6082D12C7D3
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32322e302f32342d3234203d3e203435303836.roa
Signing time:             Tue 28 Apr 2026 03:01:22 +0000
ROA not before:           Tue 28 Apr 2026 02:56:22 +0000
ROA not after:            Tue 27 Apr 2027 03:01:22 +0000
asID:                     45086
IP address blocks:        175.102.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:66:33:b7:46:25:5d:35:07:ed:85:f7:2c:2f:e6:08:2d:12:c7:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: Apr 28 02:56:22 2026 GMT
            Not After : Apr 27 03:01:22 2027 GMT
        Subject: CN=3AD34C2BBBAD62207986FF1B4CC8517DA5D2BA24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:dd:0d:60:d5:c4:8f:23:9e:b6:75:42:49:17:
                    1f:94:52:47:07:cd:f7:16:31:34:c1:8d:a6:f7:f7:
                    41:15:04:7d:c3:5f:35:7c:2c:89:fa:39:b3:1d:2a:
                    00:d1:41:bf:f3:03:84:f1:0e:61:40:bf:72:09:0c:
                    6c:34:3e:e4:25:03:95:f7:da:58:d8:8e:2b:32:b7:
                    ad:8b:1d:e1:b8:6a:e4:6f:2f:7c:b4:34:5b:c8:c3:
                    33:f1:bb:69:7b:c0:28:17:0c:f0:24:23:51:5b:e2:
                    f9:dc:e5:a2:b8:dd:86:b1:71:f2:82:d2:ca:16:59:
                    a9:16:4f:e4:19:68:db:a7:ae:ce:a4:70:52:a7:e8:
                    76:40:72:5b:89:5f:f2:b3:1f:89:f9:cb:e9:f9:5b:
                    1c:d6:d7:53:8c:c0:70:9c:f1:48:c5:b3:c7:de:06:
                    9e:d1:60:f0:48:c0:f8:5d:30:1c:9e:b5:92:10:90:
                    5e:33:fd:ab:09:d2:27:f4:e3:d5:2a:43:d9:5d:ca:
                    f9:1d:4a:79:85:b0:00:cc:37:dc:5a:72:01:41:fe:
                    d2:de:00:0d:b5:5f:d2:38:5f:27:bd:2b:90:4e:1e:
                    e5:a6:3e:03:0d:41:5a:85:8a:5c:17:21:6d:96:4e:
                    bb:85:06:3f:f5:17:d6:cb:b3:83:5e:39:f5:54:a5:
                    4b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D3:4C:2B:BB:AD:62:20:79:86:FF:1B:4C:C8:51:7D:A5:D2:BA:24
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32322e302f32342d3234203d3e203435303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:e8:b3:6d:3e:a5:a6:87:b2:4f:ff:86:15:06:6c:08:e5:92:
         e7:17:eb:89:9a:78:ab:db:5e:41:74:92:dd:c9:0d:44:9f:6d:
         6f:b4:09:68:de:77:26:4f:65:e1:9f:40:2b:60:d8:4d:ab:6c:
         3a:39:fd:52:54:46:6d:30:3a:07:76:e9:a4:6a:95:40:21:79:
         54:3f:ba:5b:24:34:01:52:0b:29:95:1f:b8:ec:59:71:34:af:
         a5:6b:0a:74:63:bf:79:39:72:57:f4:d9:c2:95:c1:1b:97:23:
         85:e2:8b:47:26:b6:bf:b9:e2:2e:e1:0e:20:f2:f8:7b:00:74:
         84:e6:ec:1d:c3:5c:fb:ea:a4:4f:70:10:bd:84:dc:31:b4:a5:
         8b:34:87:2c:2a:44:ec:c7:a7:f8:1f:37:aa:8a:1d:16:49:e9:
         1a:24:a9:91:7c:73:a5:78:3f:09:3e:b8:71:cb:66:9d:f7:62:
         d9:bb:c5:e0:0d:6c:9f:af:7c:3d:5d:07:5f:3c:4f:40:50:59:
         d5:39:28:64:9f:af:0e:d8:f2:c0:6c:93:a5:98:52:0e:47:9c:
         09:1f:e4:a3:34:a0:8f:70:84:15:0a:4c:1c:9d:6d:db:fb:42:
         0c:84:f6:37:62:d4:09:aa:65:21:7d:2a:3e:b6:6b:44:20:8e:
         df:4d:a0:dd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 16:11:43 2026 by rpki-client