Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e33312e302f32342d3234203d3e203435303836.roa
File:                     3137352e3130322e33312e302f32342d3234203d3e203435303836.roa (raw, json)
Hash identifier:          CMaJ4LfmuVqhE1POGQvDFev+gCTodyh5cYT+OKPPX+Q=
Subject key identifier:   4E:8F:18:B1:B8:8A:E2:F7:B6:6A:10:DB:B0:31:B3:33:89:B8:3B:2C
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       7AE995F492E4503D2FB5B9DD5C5661CBD851EFDE
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e33312e302f32342d3234203d3e203435303836.roa
Signing time:             Tue 28 Apr 2026 03:01:22 +0000
ROA not before:           Tue 28 Apr 2026 02:56:22 +0000
ROA not after:            Tue 27 Apr 2027 03:01:22 +0000
asID:                     45086
IP address blocks:        175.102.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e9:95:f4:92:e4:50:3d:2f:b5:b9:dd:5c:56:61:cb:d8:51:ef:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: Apr 28 02:56:22 2026 GMT
            Not After : Apr 27 03:01:22 2027 GMT
        Subject: CN=4E8F18B1B88AE2F7B66A10DBB031B33389B83B2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fd:ba:33:97:a7:64:c3:c8:c8:42:ce:99:5b:
                    c5:da:9e:1a:a3:e3:44:f3:04:91:53:41:6f:e4:a6:
                    a2:af:37:0b:7f:2e:33:dd:ca:4e:17:bf:0b:45:b6:
                    79:eb:90:ec:52:96:51:07:9c:5b:01:8d:a3:95:9d:
                    51:1b:81:36:dc:ae:4e:d5:88:30:1c:f5:0a:eb:c2:
                    4e:54:57:96:f6:22:3c:4a:0c:cc:b2:2d:12:99:e7:
                    19:ea:ac:21:25:ba:c2:9b:d9:bd:47:d4:2d:ef:26:
                    d7:9d:61:90:12:94:c7:45:11:d8:42:b9:f2:86:69:
                    bd:5f:7b:b1:3d:e0:25:46:6c:5d:0e:87:13:eb:94:
                    fb:f6:90:bd:f6:b5:b7:0a:70:b3:65:2e:6a:1b:61:
                    ae:9c:b0:c1:26:50:3b:a4:12:07:cd:3b:7e:22:e6:
                    d1:a7:3f:60:18:bf:82:36:e3:78:3c:a3:2f:12:84:
                    5a:53:30:bd:3c:9c:8d:bb:a6:5a:a2:19:ab:33:81:
                    92:d3:4f:a4:8d:3f:1c:71:73:99:c3:11:4b:28:67:
                    25:8c:8a:3a:0a:03:f1:4f:83:84:77:5f:5e:6a:59:
                    5e:6a:50:eb:7a:4c:ab:03:01:75:3d:17:9e:e4:a2:
                    75:29:cc:02:12:de:bd:8f:5c:b7:35:8a:40:d6:f9:
                    0c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8F:18:B1:B8:8A:E2:F7:B6:6A:10:DB:B0:31:B3:33:89:B8:3B:2C
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e33312e302f32342d3234203d3e203435303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:f3:80:d7:48:55:f4:7b:5a:a1:f6:06:48:6a:f9:20:82:95:
         cb:f7:54:38:2b:6b:4f:d7:53:d8:2d:4e:4d:fb:0e:6a:f3:98:
         19:6e:48:8e:61:c9:f8:70:bc:48:c9:a8:dd:a6:18:eb:a2:39:
         19:ad:90:88:79:5d:62:b1:bc:75:03:00:fc:ba:9f:ed:0a:00:
         f5:c4:8e:31:6b:1e:59:05:cf:d6:0b:cc:c2:18:1e:2c:06:19:
         cc:16:c3:8a:ec:83:24:dc:73:26:89:d7:ef:26:06:2d:07:71:
         28:9a:f0:3a:30:67:cc:40:d9:c0:a7:c6:74:2e:57:65:2a:21:
         72:51:21:60:69:dc:13:b9:81:66:83:a3:8a:ba:e6:e0:54:77:
         4c:a5:35:c5:50:1d:29:97:c0:4b:67:e5:98:47:33:79:ed:b3:
         30:5a:70:8c:0e:01:1f:af:25:fd:5a:69:ae:b3:a9:c4:fd:d0:
         d8:ab:24:ff:06:bf:c8:84:4c:37:16:1b:15:3d:9c:05:3a:1d:
         05:3e:8f:85:12:61:fa:a1:09:61:40:8d:ff:80:ea:03:50:23:
         48:cc:34:2e:35:87:9f:a7:00:22:85:f3:5b:13:e1:9e:49:4b:
         bb:6a:5b:ff:45:c9:e9:33:a5:1e:53:d6:ce:16:52:ff:2a:52:
         74:f5:c2:35
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 15:57:49 2026 by rpki-client