Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e332e302f32342d3234203d3e2034383131.roa
File:                     3137352e3130322e332e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier:          iSgO8W88x52o8dFNLpAvpjXryQ7lfK+1tP0EZXSlQ5c=
Subject key identifier:   66:06:AD:5D:99:73:BE:50:3D:38:0B:7F:E5:EE:E7:31:60:70:99:1F
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       35C1AE355831754AD1756AE8E9FA47E09E07EC0B
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e332e302f32342d3234203d3e2034383131.roa
Signing time:             Thu 07 May 2026 01:34:17 +0000
ROA not before:           Thu 07 May 2026 01:29:17 +0000
ROA not after:            Thu 06 May 2027 01:34:17 +0000
asID:                     4811
IP address blocks:        175.102.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c1:ae:35:58:31:75:4a:d1:75:6a:e8:e9:fa:47:e0:9e:07:ec:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: May  7 01:29:17 2026 GMT
            Not After : May  6 01:34:17 2027 GMT
        Subject: CN=6606AD5D9973BE503D380B7FE5EEE7316070991F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ac:53:42:2e:67:ee:b4:c6:6e:c3:4c:b1:7c:
                    e2:2a:d0:06:1c:51:74:ed:0e:49:f0:a7:01:cf:2e:
                    f7:61:46:2d:4c:ac:6a:53:c4:56:fb:15:62:02:94:
                    69:7b:98:5b:d3:9a:a7:59:f6:fd:07:b8:64:1f:f9:
                    82:2e:b8:88:97:e1:ad:51:dd:e2:73:ac:ee:dc:76:
                    19:1a:59:13:01:83:41:84:ea:c0:94:1b:31:bb:9c:
                    db:5e:92:9e:f1:21:bb:02:fc:95:65:a6:d3:4c:49:
                    da:8c:27:26:9e:a9:52:70:95:3b:08:1d:b6:91:9c:
                    03:64:82:71:64:75:41:01:39:5d:a0:71:80:cd:dd:
                    10:e0:3a:b1:9f:62:d5:49:86:9f:d6:98:b2:d7:c5:
                    b3:ad:e3:4d:d6:07:14:ed:f3:09:fc:34:b1:6a:4b:
                    ba:7d:ed:d7:69:32:44:9f:a0:da:90:b4:fb:5e:f7:
                    37:0b:4d:b5:09:41:c6:bd:77:e3:73:df:b3:4c:31:
                    9b:77:ee:5e:52:38:fa:5c:6e:80:31:97:4b:7b:78:
                    ea:3c:2a:78:4f:14:94:79:25:a8:11:29:70:fe:47:
                    aa:88:e0:26:ab:30:89:e1:91:2d:8e:9f:ef:86:3c:
                    33:56:9f:e3:67:de:eb:2f:72:b0:68:b1:31:e7:c2:
                    d0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:06:AD:5D:99:73:BE:50:3D:38:0B:7F:E5:EE:E7:31:60:70:99:1F
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e332e302f32342d3234203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:2b:6e:0c:9e:5c:d9:84:3a:db:95:ac:10:8a:78:21:fe:c0:
         55:d7:d0:a3:f7:26:84:60:5b:1f:0e:ce:d0:5c:41:48:4c:a7:
         9c:f2:4d:3a:94:f5:cd:9e:1c:ca:a0:21:2a:a1:e9:12:7f:16:
         86:18:e7:ab:ab:ca:3f:84:4e:93:e5:50:da:19:da:20:c3:2a:
         c8:16:f5:0b:70:78:59:34:aa:0b:eb:ba:ec:98:a2:cc:1d:33:
         e6:c3:96:93:b2:87:ba:42:4f:40:7c:d8:ff:63:26:35:d3:b2:
         bb:9f:d6:08:0e:12:f9:9d:76:30:a7:59:c3:03:37:9d:a0:64:
         30:9c:52:dc:17:91:76:3c:59:18:7b:dd:f8:52:c1:01:eb:90:
         d2:86:61:88:61:c0:5c:62:fd:d7:26:e6:a9:02:e6:26:a0:36:
         92:3f:11:dc:c0:08:a2:d0:0a:25:89:07:9b:29:6e:14:a8:8c:
         de:68:f5:c6:ce:e0:97:78:5e:f5:40:9f:65:10:6c:67:f3:60:
         28:23:c0:b3:5f:4a:da:73:fc:f5:f8:e7:87:a4:f6:ba:7d:26:
         36:90:ab:1e:f2:d4:b8:92:8f:97:fe:b6:e3:36:d9:4b:9e:7f:
         f0:8f:1d:57:5f:a3:78:96:69:e5:b5:43:3b:85:24:7b:ed:bf:
         fe:c0:02:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:57:51 2026 by rpki-client