Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32342e302f32342d3234203d3e203137363231.roa
File:                     3137352e3130322e32342e302f32342d3234203d3e203137363231.roa (raw, json)
Hash identifier:          wqoexucIQRgGhR7w3kIj/UCdSzFx7eHWy4Wg7PVXBJs=
Subject key identifier:   9C:89:0B:00:C1:74:A3:B9:90:37:AE:E0:7A:AB:EF:1F:A9:B2:61:C0
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       37CB3FC38AF4AA323135DC7C031A19024DAB529C
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32342e302f32342d3234203d3e203137363231.roa
Signing time:             Thu 07 May 2026 01:43:19 +0000
ROA not before:           Thu 07 May 2026 01:38:19 +0000
ROA not after:            Thu 06 May 2027 01:43:19 +0000
asID:                     17621
IP address blocks:        175.102.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:cb:3f:c3:8a:f4:aa:32:31:35:dc:7c:03:1a:19:02:4d:ab:52:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: May  7 01:38:19 2026 GMT
            Not After : May  6 01:43:19 2027 GMT
        Subject: CN=9C890B00C174A3B99037AEE07AABEF1FA9B261C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2c:2e:15:72:e2:fe:89:12:d6:ef:fb:91:4d:
                    49:78:10:d2:c5:f1:6a:ad:99:b1:da:c8:61:f5:39:
                    13:9c:09:1e:32:dd:1e:88:ca:34:8d:5c:17:0c:82:
                    bc:61:3c:f2:d3:c4:f8:66:44:cf:39:15:4b:15:94:
                    65:b5:a6:dc:6d:4f:57:a2:a8:ea:0f:29:e4:04:f5:
                    28:88:e3:ad:7e:d0:05:20:92:88:fe:4f:fd:53:2b:
                    9c:ec:bb:1a:0b:81:8d:73:39:e4:a7:60:ae:90:7d:
                    54:e3:53:5a:2d:b4:f4:41:fc:67:a4:fe:6d:5a:93:
                    f5:17:87:c2:48:8b:c2:3b:1a:67:44:56:25:d8:50:
                    d7:8b:c5:0a:da:5e:41:8a:34:f0:5e:01:fa:3d:70:
                    07:67:40:ae:a1:84:d1:e6:6b:d5:de:1d:3a:64:b7:
                    10:c6:18:35:ce:b1:de:7b:8b:46:57:0a:04:b7:82:
                    ae:f0:e5:84:61:5e:c4:18:de:1d:a3:6d:e3:08:d7:
                    90:55:d2:58:d5:52:fa:2e:57:f3:f8:4e:0f:4b:d5:
                    1d:dc:43:54:a6:50:1b:0c:a1:37:0a:2a:d9:7c:31:
                    2f:9c:19:5d:4f:8c:7b:af:d7:6c:18:a7:d0:1f:1e:
                    94:78:8b:d7:59:01:71:20:a4:96:c1:5a:4e:73:86:
                    22:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:89:0B:00:C1:74:A3:B9:90:37:AE:E0:7A:AB:EF:1F:A9:B2:61:C0
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32342e302f32342d3234203d3e203137363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:3a:32:a5:1b:3d:ea:9e:3c:9b:70:92:8a:46:e6:68:fb:2a:
         c3:e7:d5:fa:b8:f8:4c:eb:e4:03:4d:29:cc:a2:38:c5:7a:9f:
         64:60:1b:07:b4:43:d4:e6:2e:a7:0d:d2:e1:5e:de:30:17:46:
         83:30:4f:1a:f8:00:f3:45:40:c0:f6:76:a7:e7:ac:ff:cb:d3:
         b1:05:02:be:fd:e7:95:0e:86:c1:a7:f1:6f:38:8e:6a:ae:cd:
         5e:12:78:95:4c:c2:89:4e:18:82:54:44:7b:cb:56:4b:4d:09:
         a5:18:f6:a2:53:c1:70:3b:9d:24:e2:5f:97:31:5d:af:fe:de:
         77:58:ad:72:6b:d7:8a:ae:3a:03:24:ca:5a:7f:9f:62:68:f3:
         48:a2:90:83:57:a0:d2:34:41:7d:c7:13:c1:28:af:2d:8d:e0:
         be:2d:8e:bc:04:9b:b7:9b:99:3f:df:f2:fe:87:9b:01:81:1b:
         ad:5f:cf:85:1e:19:72:d7:1e:56:b4:76:e4:3f:4b:20:4d:85:
         f0:48:5b:63:fe:b2:b9:b6:c8:bc:41:7a:18:b8:0d:7f:32:b1:
         c1:49:d3:55:d3:4d:12:ad:ad:02:1e:27:3f:30:1a:a8:d2:88:
         89:c6:f4:bc:2c:61:58:d5:0d:a5:f8:40:81:06:86:f9:10:f7:
         5d:b0:41:72
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUN8s/w4r0qjIxNdx8AxoZAk2rUpwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDYxMzgwRDNDRThFMkI0NzJFOUI2OEEyOEJDQUM1Qzcy
NUIwMkMwOTAeFw0yNjA1MDcwMTM4MTlaFw0yNzA1MDYwMTQzMTlaMDMxMTAvBgNV
BAMTKDlDODkwQjAwQzE3NEEzQjk5MDM3QUVFMDdBQUJFRjFGQTlCMjYxQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7LC4VcuL+iRLW7/uRTUl4ENLF
8WqtmbHayGH1OROcCR4y3R6IyjSNXBcMgrxhPPLTxPhmRM85FUsVlGW1ptxtT1ei
qOoPKeQE9SiI461+0AUgkoj+T/1TK5zsuxoLgY1zOeSnYK6QfVTjU1ottPRB/Gek
/m1ak/UXh8JIi8I7GmdEViXYUNeLxQraXkGKNPBeAfo9cAdnQK6hhNHma9XeHTpk
txDGGDXOsd57i0ZXCgS3gq7w5YRhXsQY3h2jbeMI15BV0ljVUvouV/P4Tg9L1R3c
Q1SmUBsMoTcKKtl8MS+cGV1PjHuv12wYp9AfHpR4i9dZAXEgpJbBWk5zhiJVAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUnIkLAMF0o7mQN67geqvvH6myYcAwHwYDVR0j
BBgwFoAUBhOA086OK0cum2iii8rFxyWwLAkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
MDk2Nzg4MjcxMzQ2NDgzNS8wLzA2MTM4MEQzQ0U4RTJCNDcyRTlCNjhBMjhCQ0FD
NUM3MjVCMDJDMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMDYxMzgwRDNDRThFMkI0NzJFOUI2OEEyOEJDQUM1QzcyNUIwMkMwOS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwMDk2Nzg4MjcxMzQ2NDgzNS8wLzMxMzczNTJlMzEz
MDMyMmUzMjM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM2MzIzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAK9mGDANBgkqhkiG9w0BAQsFAAOCAQEAJjoypRs96p48m3CSikbmaPsq
w+fV+rj4TOvkA00pzKI4xXqfZGAbB7RD1OYupw3S4V7eMBdGgzBPGvgA80VAwPZ2
p+es/8vTsQUCvv3nlQ6GwafxbziOaq7NXhJ4lUzCiU4YglREe8tWS00JpRj2olPB
cDudJOJflzFdr/7ed1itcmvXiq46AyTKWn+fYmjzSKKQg1eg0jRBfccTwSivLY3g
vi2OvASbt5uZP9/y/oebAYEbrV/PhR4ZctceVrR25D9LIE2F8EhbY/6yubbIvEF6
GLgNfzKxwUnTVdNNEq2tAh4nPzAaqNKIicb0vCxhWNUNpfhAgQaG+RD3XbBBcg==
-----END CERTIFICATE-----
Generated at Wed May 13 14:47:46 2026 by rpki-client