Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32362e302f32342d3234203d3e203137363231.roa
File:                     3137352e3130322e32362e302f32342d3234203d3e203137363231.roa (raw, json)
Hash identifier:          ozLx4sdzj+SomxibCF6gakaKMUw47iHXTufwnrBfB68=
Subject key identifier:   25:5D:7D:50:DF:E8:D0:B5:D8:98:98:F9:2B:B1:AA:1C:5B:ED:BF:4D
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       7829C681B28C20E7F396D1E55250F8DE04CC421F
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32362e302f32342d3234203d3e203137363231.roa
Signing time:             Tue 28 Apr 2026 03:01:21 +0000
ROA not before:           Tue 28 Apr 2026 02:56:21 +0000
ROA not after:            Tue 27 Apr 2027 03:01:21 +0000
asID:                     17621
IP address blocks:        175.102.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:29:c6:81:b2:8c:20:e7:f3:96:d1:e5:52:50:f8:de:04:cc:42:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: Apr 28 02:56:21 2026 GMT
            Not After : Apr 27 03:01:21 2027 GMT
        Subject: CN=255D7D50DFE8D0B5D89898F92BB1AA1C5BEDBF4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:dc:aa:b0:9d:83:89:27:0b:cd:d8:bf:e4:70:
                    a0:ba:5e:2b:7e:01:c6:20:36:2e:bb:2a:c8:f4:ae:
                    20:b8:03:52:d8:33:a0:70:7c:a7:11:7d:fc:81:a3:
                    18:29:c3:b1:1d:16:ec:9a:88:a3:96:bd:ec:65:d7:
                    a3:82:f7:df:34:94:c4:64:df:c4:89:3a:65:6d:60:
                    e8:c6:9d:98:e5:28:31:53:e7:70:ff:9b:b9:92:de:
                    24:f7:55:91:ed:c2:60:96:64:cf:9e:b9:02:8a:16:
                    14:7c:67:4d:df:cd:2f:a3:c3:bc:ea:3e:3c:ed:2a:
                    29:20:5f:50:bd:67:36:9c:f3:40:0d:fa:6a:2e:37:
                    b8:88:53:19:73:93:b1:9e:4e:f5:c6:41:c9:60:aa:
                    52:14:24:2e:d2:d1:4f:a2:5d:66:0e:41:dd:a3:b3:
                    3e:75:a5:c7:b3:9b:41:d6:8a:94:1c:70:7e:dd:02:
                    78:bf:30:bd:79:7d:74:36:9a:b4:48:bc:58:40:4f:
                    93:9a:f4:f5:bb:01:9e:da:44:58:8f:49:f2:bb:ca:
                    08:e5:86:e5:c6:81:1f:cd:74:2e:74:4d:94:66:64:
                    52:56:df:cd:c5:2e:75:fc:cc:e8:5b:f5:3f:11:84:
                    ea:49:b2:b9:b3:42:0b:a6:86:85:b9:f3:5f:da:5c:
                    81:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5D:7D:50:DF:E8:D0:B5:D8:98:98:F9:2B:B1:AA:1C:5B:ED:BF:4D
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32362e302f32342d3234203d3e203137363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:b3:45:01:c5:79:31:2d:ed:f2:76:64:65:59:83:66:c6:94:
         d2:e1:62:d6:7f:31:f5:95:3b:e5:5f:fe:ed:5a:15:ed:44:fe:
         b4:63:bb:d2:7f:ab:04:55:5f:b9:49:46:79:cd:dd:e5:cf:88:
         4d:4f:4e:62:9d:93:df:8a:3f:cc:0e:8f:18:f6:77:74:84:1c:
         43:05:70:05:66:08:60:a9:46:c8:8e:aa:91:06:02:a1:6a:6f:
         df:e0:88:b1:84:c6:5b:75:92:69:54:68:a1:84:82:04:31:74:
         45:93:40:1f:c8:0a:df:d9:5d:cb:26:b2:3c:f3:02:ac:e1:89:
         a5:c2:49:4a:d9:0e:65:4f:6d:f3:96:dd:93:00:b0:9c:bf:57:
         5e:ea:ab:bf:f7:91:96:8c:d3:d6:e7:f6:2d:b1:89:a2:63:28:
         08:58:2f:0e:81:11:9b:62:4e:f6:4d:83:28:ec:fa:1d:de:75:
         f8:14:69:72:2d:91:7c:43:ba:73:e3:da:33:c5:01:32:59:ce:
         0b:6a:58:46:3a:a9:75:d9:86:48:ef:ea:f9:c3:03:32:ef:cd:
         b6:83:61:76:9c:8a:c1:35:ad:93:fa:60:3b:ae:2a:5a:27:32:
         05:0b:30:64:78:cc:ca:d5:72:e0:b2:51:27:57:d4:6b:aa:d6:
         62:af:4f:8a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 15:57:58 2026 by rpki-client