Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32382e302f32342d3234203d3e203435303836.roa
File:                     3137352e3130322e32382e302f32342d3234203d3e203435303836.roa (raw, json)
Hash identifier:          HB6TNh3XPBc9SrGufeezGNSBDYo3T2ea/B6cs13staM=
Subject key identifier:   E7:75:E7:D0:47:8C:71:98:7D:0D:F6:DB:C5:6F:B6:03:A9:DB:91:21
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       50A5A23EDEC52F609C93C9904D111F1A8B9F9DAA
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32382e302f32342d3234203d3e203435303836.roa
Signing time:             Tue 28 Apr 2026 03:01:21 +0000
ROA not before:           Tue 28 Apr 2026 02:56:21 +0000
ROA not after:            Tue 27 Apr 2027 03:01:21 +0000
asID:                     45086
IP address blocks:        175.102.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:a5:a2:3e:de:c5:2f:60:9c:93:c9:90:4d:11:1f:1a:8b:9f:9d:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: Apr 28 02:56:21 2026 GMT
            Not After : Apr 27 03:01:21 2027 GMT
        Subject: CN=E775E7D0478C71987D0DF6DBC56FB603A9DB9121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f4:85:2e:00:36:62:06:5f:03:a5:14:a9:2c:
                    42:70:b7:82:bb:ad:c1:93:b4:45:64:01:63:72:a2:
                    8a:3d:54:04:3f:03:e0:3e:08:3b:e8:85:fc:38:a0:
                    4c:cf:19:0d:fd:58:d5:d8:83:d9:07:22:3e:99:70:
                    a5:89:5a:7e:0f:91:47:60:42:f2:75:66:54:89:26:
                    a3:58:62:f0:64:fc:9a:6c:46:84:d7:38:20:84:a3:
                    52:59:f2:53:42:07:60:2d:51:8a:9c:15:da:96:5c:
                    06:9a:26:d5:ff:65:c4:39:ec:56:bd:d3:90:97:99:
                    66:18:15:7d:5d:ec:25:1a:c2:9b:0f:15:ac:93:c5:
                    18:bc:45:9c:58:a7:7b:a9:a8:8e:39:92:e5:12:57:
                    83:c1:af:c9:75:73:15:9f:cc:9a:a2:04:e1:99:a6:
                    42:b4:29:4f:a9:39:44:16:40:c1:3f:d6:aa:7d:d8:
                    c0:36:0b:1d:6d:d1:d4:62:f8:33:98:a0:0f:84:74:
                    9b:ba:c7:d3:2d:de:de:82:5e:a3:d8:bb:c8:aa:cb:
                    0c:4b:2a:df:90:9e:8b:4c:2f:33:d6:05:19:45:f1:
                    06:fd:8b:ff:37:84:e5:bc:41:22:9f:30:08:36:8f:
                    5c:b5:22:50:7d:42:89:e5:46:ad:e1:b1:25:ff:76:
                    f0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:75:E7:D0:47:8C:71:98:7D:0D:F6:DB:C5:6F:B6:03:A9:DB:91:21
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32382e302f32342d3234203d3e203435303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:87:de:9c:90:30:7f:ff:57:d7:23:07:a9:ea:8a:b9:79:c1:
         0c:8f:5b:10:5d:22:89:cf:2a:f9:fc:a3:60:17:d0:f2:0e:45:
         ec:e9:de:24:11:07:3a:c2:ea:23:6b:ce:1b:ff:49:36:41:f4:
         59:7b:71:b3:6e:f6:b0:e3:ec:94:94:91:38:22:fd:e7:a0:ee:
         c1:3d:6f:c0:c7:dd:4b:66:57:bd:a2:72:2f:e5:e0:a8:44:ad:
         ab:0a:e1:1d:f1:69:7c:4e:7b:59:26:79:4d:43:6f:23:7a:ac:
         82:b0:f8:65:a8:ca:9f:36:39:9a:c4:4a:fd:d2:33:88:eb:e6:
         07:90:8d:f1:84:aa:a5:22:b2:cb:ab:50:b2:89:13:c5:87:e1:
         69:39:96:cc:57:1d:d7:e3:47:39:64:5d:ae:c8:9d:bd:5a:f6:
         64:cc:7c:5e:85:fb:be:b0:be:67:bb:cd:35:8a:1a:1d:e8:da:
         b9:48:53:91:ac:63:f1:3c:99:07:e4:4b:82:14:62:35:08:2a:
         c7:e7:44:04:88:44:1c:8f:48:66:2b:d5:f9:fb:4c:bb:ea:10:
         1b:ba:3b:e0:a3:9f:87:c7:75:09:06:ee:1f:85:e1:70:b1:99:
         e9:28:8f:cf:f1:02:7b:9f:63:19:6c:6f:ec:c9:93:23:26:e2:
         7b:83:42:23
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 15:56:12 2026 by rpki-client