Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32382e302f32322d3232203d3e203435303836.roa
File:                     3137352e3130322e32382e302f32322d3232203d3e203435303836.roa (raw, json)
Hash identifier:          2RmjCgQcQsYTamj0zfXSZx6DeMyNAU2mH4FPoirO69Y=
Subject key identifier:   7C:42:C6:AF:A2:FA:02:33:9C:3A:03:A1:19:70:03:65:FB:83:D8:0E
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       3AC40361B6367072D28C20C40C4E3D618FD499CF
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32382e302f32322d3232203d3e203435303836.roa
Signing time:             Tue 28 Apr 2026 03:01:57 +0000
ROA not before:           Tue 28 Apr 2026 02:56:57 +0000
ROA not after:            Tue 27 Apr 2027 03:01:57 +0000
asID:                     45086
IP address blocks:        175.102.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c4:03:61:b6:36:70:72:d2:8c:20:c4:0c:4e:3d:61:8f:d4:99:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: Apr 28 02:56:57 2026 GMT
            Not After : Apr 27 03:01:57 2027 GMT
        Subject: CN=7C42C6AFA2FA02339C3A03A119700365FB83D80E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7b:1d:fa:2f:a2:5f:bf:67:27:96:09:40:20:
                    67:66:94:78:be:01:75:8e:3c:0b:01:e4:26:90:82:
                    59:d3:17:e3:69:6e:c9:7b:47:89:52:5c:fd:23:65:
                    68:88:00:82:1a:9d:73:32:b8:aa:c4:cb:6f:e0:4c:
                    14:d0:21:18:9e:ce:d0:42:54:6a:7f:42:20:50:44:
                    eb:fc:e8:35:33:2b:c4:0f:83:c8:9d:f8:b2:2a:86:
                    c5:74:4a:0d:9f:07:33:56:52:e2:18:52:2e:d1:75:
                    30:20:06:91:1e:c3:90:fb:5a:b8:c7:a3:b8:f2:40:
                    33:54:02:f5:cf:17:33:58:19:55:2a:f5:7b:13:02:
                    42:24:b8:53:d9:08:15:08:4f:fd:87:ac:d0:6c:f8:
                    24:4c:f8:00:25:a7:79:f8:5f:7c:91:01:82:ea:40:
                    3d:ad:1a:ec:cf:47:a9:d5:5b:37:60:42:83:98:7f:
                    04:5e:49:24:84:91:30:d4:3d:b2:3f:06:ee:84:7f:
                    02:a3:3a:8c:bb:3e:4f:c2:77:4a:02:f6:24:bd:bd:
                    a1:05:a0:36:ff:46:1f:5c:c5:04:41:2b:dd:04:73:
                    a0:b4:13:75:9c:82:f8:90:5d:cf:03:72:be:31:d6:
                    2a:46:f2:c2:92:1c:2d:28:1a:7c:b6:e9:25:56:89:
                    a9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:42:C6:AF:A2:FA:02:33:9C:3A:03:A1:19:70:03:65:FB:83:D8:0E
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32382e302f32322d3232203d3e203435303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:89:4c:b5:f4:dd:11:a4:7d:5c:62:2a:81:48:02:6a:3c:2b:
         e1:11:bc:eb:ae:2e:1c:0d:96:46:34:be:1d:fe:bb:6c:ba:25:
         19:23:ad:a2:40:c5:81:d9:ee:98:49:28:02:36:00:70:6b:f4:
         97:67:84:06:a6:4a:58:92:03:9c:41:25:1f:21:9e:b3:8c:2a:
         7c:74:0b:da:d4:87:ce:81:9a:73:79:75:0d:ba:a5:75:d2:d4:
         8c:21:9f:ed:03:6d:cb:ea:31:92:70:d0:c3:29:61:60:2a:14:
         78:e4:e4:e8:36:1f:73:fd:a3:b0:0e:fe:18:57:f3:ef:71:f5:
         2e:0a:69:cb:00:a1:7c:0c:ad:6d:7e:93:e9:09:0e:c0:fa:c7:
         e9:25:12:3b:11:5d:da:84:a9:d4:a9:3e:50:0a:79:d6:f2:cd:
         7c:40:df:58:7a:18:6e:9d:d2:e9:da:58:86:81:ad:97:7a:15:
         57:0e:e8:f9:13:55:09:67:48:81:53:da:1e:c4:10:d6:97:0d:
         ac:35:a6:25:84:08:49:c5:13:42:ee:6d:55:47:93:19:4d:9b:
         b3:aa:3b:79:dd:3d:f7:80:8e:39:4e:82:95:17:0e:f0:51:ef:
         6d:53:30:d2:77:a1:a6:7b:0c:41:6a:22:c6:72:17:b0:28:ae:
         2a:82:fa:31
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 16:25:27 2026 by rpki-client