Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3232342e302f31392d3139203d3e203435303836.roa
File:                     3137352e3130322e3232342e302f31392d3139203d3e203435303836.roa (raw, json)
Hash identifier:          vMJTtmBGAq42t8RIp8jIfEEAlbf2n+mQFQP95ksezqs=
Subject key identifier:   14:A3:83:C6:B1:C5:CD:98:A0:B2:C4:C3:DE:35:9A:D5:65:A9:34:84
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       6AB353FB97913E7AB1D322C15CBDEBDE97735C97
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3232342e302f31392d3139203d3e203435303836.roa
Signing time:             Tue 28 Apr 2026 03:14:20 +0000
ROA not before:           Tue 28 Apr 2026 03:09:20 +0000
ROA not after:            Tue 27 Apr 2027 03:14:20 +0000
asID:                     45086
IP address blocks:        175.102.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:b3:53:fb:97:91:3e:7a:b1:d3:22:c1:5c:bd:eb:de:97:73:5c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: Apr 28 03:09:20 2026 GMT
            Not After : Apr 27 03:14:20 2027 GMT
        Subject: CN=14A383C6B1C5CD98A0B2C4C3DE359AD565A93484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:db:c2:f5:ed:47:e3:67:db:01:1e:a8:64:63:
                    55:9c:d2:d9:d7:b9:a2:06:46:69:56:0b:29:a2:8b:
                    08:ac:5c:46:67:b2:9c:a4:33:96:d3:66:41:af:3b:
                    3b:b2:ca:7d:43:cc:25:6c:d3:84:1f:28:79:8b:c9:
                    eb:f6:c1:81:16:51:aa:f3:48:c7:71:08:95:33:f3:
                    e9:cf:02:ef:c3:72:67:58:43:18:b5:6c:f5:29:33:
                    d4:c7:5e:60:eb:38:c8:a5:6a:42:ba:16:f4:90:b0:
                    1a:23:0e:0d:7c:91:ba:89:3a:d2:bc:01:79:70:f3:
                    c1:64:84:9a:40:c7:f8:29:a9:b1:f0:d9:bc:21:2d:
                    4f:57:a6:f7:79:48:55:e4:a4:ea:07:78:19:e8:ed:
                    c2:07:4d:09:d1:8d:16:5d:61:a6:47:19:e9:72:40:
                    bc:bd:ba:65:49:7a:2c:5b:2a:c5:46:7a:c2:22:b2:
                    3b:f5:30:10:85:1c:94:ab:47:b4:76:90:ad:5c:e4:
                    e4:bc:bc:bd:60:80:43:45:ce:2b:c0:ce:67:82:08:
                    54:97:4d:ef:de:4f:36:81:6f:29:16:d8:99:d3:6b:
                    e9:f8:26:81:8c:8b:92:1a:fa:7a:4c:b9:21:49:9b:
                    e0:da:73:30:9d:ad:3b:39:db:35:79:4a:e7:5c:dd:
                    1d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A3:83:C6:B1:C5:CD:98:A0:B2:C4:C3:DE:35:9A:D5:65:A9:34:84
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3232342e302f31392d3139203d3e203435303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         68:57:1b:40:8f:f0:80:1d:06:64:53:5e:fa:04:ef:dd:6e:bf:
         1e:a5:b8:ba:41:9e:4b:5f:84:8c:13:0a:b8:29:de:78:14:23:
         9b:f3:16:ce:bd:bd:55:4a:1c:be:bd:79:0b:c2:e6:8f:ac:4e:
         ba:36:eb:f0:c1:86:6d:15:e0:74:d5:32:f4:10:33:03:98:cb:
         e6:3f:56:f3:e7:60:b1:f8:a7:94:af:8a:c5:dd:60:e5:6f:0b:
         37:46:a3:6f:b4:5f:77:1c:bf:d0:5f:d8:f5:33:47:c3:2e:11:
         75:24:06:8f:17:81:55:5e:90:3a:cb:1b:23:cd:22:f2:c9:dd:
         88:9e:14:6e:0a:5e:d7:54:8c:fe:89:85:a1:05:ce:43:c1:72:
         cc:46:b9:61:c8:c2:d4:0d:7d:bf:dc:6f:0d:7d:75:33:03:2f:
         ed:e3:98:2d:e6:85:c6:ce:e1:b6:7d:58:4e:39:9b:99:d8:fb:
         ba:14:6c:30:b1:59:4e:d6:0d:77:39:85:3d:30:4b:69:84:c2:
         44:c0:a0:9d:2a:87:12:84:f3:a0:32:0b:ec:84:9c:38:c1:24:
         09:df:d7:5e:20:ab:fc:65:2b:3d:f6:ef:c2:a5:91:de:cb:12:
         4e:09:7d:e9:45:e4:61:f0:9c:04:43:a7:47:62:79:9e:e8:63:
         06:74:3b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:03:49 2026 by rpki-client