Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e342e302f32342d3234203d3e2034383131.roa
File:                     3137352e3130322e342e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier:          GPXY30JC7Hf6AI/cXGdhU8Jq4QgBi3qpcBpjfW5ZuSY=
Subject key identifier:   F3:53:AB:0F:6B:43:D9:44:8D:62:E4:3C:6D:D7:45:58:0E:B4:52:0E
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       20B1FC50EAD82122422A5CFA158628B8FF0239BA
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e342e302f32342d3234203d3e2034383131.roa
Signing time:             Thu 07 May 2026 01:36:18 +0000
ROA not before:           Thu 07 May 2026 01:31:18 +0000
ROA not after:            Thu 06 May 2027 01:36:18 +0000
asID:                     4811
IP address blocks:        175.102.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:b1:fc:50:ea:d8:21:22:42:2a:5c:fa:15:86:28:b8:ff:02:39:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: May  7 01:31:18 2026 GMT
            Not After : May  6 01:36:18 2027 GMT
        Subject: CN=F353AB0F6B43D9448D62E43C6DD745580EB4520E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e7:85:17:ef:4b:08:f9:e3:77:f2:d3:3b:0f:
                    3c:81:53:e4:28:0d:8f:04:d8:69:c9:47:a5:48:e9:
                    d4:c7:32:aa:48:be:0c:e3:05:3c:53:0b:63:c4:c3:
                    0f:8e:f2:98:08:5b:a9:76:91:7a:d6:59:28:2d:39:
                    ae:5a:10:ba:8e:a9:52:19:14:c0:bf:7b:e7:08:d5:
                    e5:f2:a4:ff:8a:88:6b:94:33:62:4c:4f:7f:a2:ae:
                    b1:d5:25:ab:48:53:18:ac:44:77:f3:2b:9c:09:75:
                    c0:fa:07:03:c3:61:14:3a:d5:34:40:94:37:af:2a:
                    04:3e:44:9b:d6:55:c4:5f:3a:0b:bd:88:b5:29:06:
                    83:36:a9:57:13:b6:17:c5:93:fb:a2:50:2c:8e:20:
                    5d:7b:9b:a0:28:16:2a:7d:74:48:01:00:f2:bb:de:
                    e4:21:80:a5:92:0b:3c:bf:ac:20:56:0d:d5:b2:1a:
                    0e:e9:ca:19:86:bb:12:25:7d:9e:9b:89:2f:95:f2:
                    3e:8f:7c:6b:15:c1:23:3f:23:68:c6:bd:dc:ce:cf:
                    f8:d9:e7:ae:4b:5c:3d:70:db:a2:28:c1:d5:04:85:
                    cb:86:ef:57:c6:6e:fc:ca:c6:4d:b4:28:4c:da:7b:
                    37:f2:ce:1d:a2:ec:72:d2:d7:02:f3:a8:6d:a6:23:
                    7e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:53:AB:0F:6B:43:D9:44:8D:62:E4:3C:6D:D7:45:58:0E:B4:52:0E
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e342e302f32342d3234203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:68:a6:9c:56:30:57:0b:e1:9a:40:3e:da:e5:4c:d1:74:f9:
         35:72:9b:a3:da:93:c2:bf:58:8c:c4:bf:cc:48:f5:99:81:ed:
         4f:4f:8b:0e:c3:51:10:b8:b5:6e:13:99:ec:66:0e:9a:1d:c0:
         c7:1e:83:5b:17:31:05:89:14:ff:d3:1b:8c:ae:a6:33:48:a5:
         f5:65:21:d5:9e:c1:4b:04:72:07:5e:dd:3e:3f:4d:2d:43:fe:
         c6:4a:e5:35:b4:21:6d:72:59:9f:f1:a6:03:2e:47:4b:16:dd:
         b6:9d:b9:4c:b0:12:00:2a:08:8e:b3:a5:20:7f:a2:c0:9d:29:
         28:a6:f2:a8:25:4d:3b:59:b4:e6:41:35:0e:38:00:e4:c4:0e:
         55:3b:b4:bf:af:df:09:97:63:f9:e4:6f:7a:5e:18:51:7e:25:
         c4:26:5b:28:d3:1b:7e:60:2d:39:d3:ad:40:1a:14:7e:4c:c9:
         cf:8c:38:e6:9a:8d:95:79:d7:cf:b3:95:fc:99:1f:6f:2a:67:
         37:07:cb:ef:4b:26:82:d1:c0:ac:ca:a3:67:5a:af:1d:06:6a:
         cd:9c:39:21:5f:e3:96:7f:00:e4:3a:f5:62:00:05:4a:50:71:
         af:05:c2:16:e9:c4:fa:cc:b7:eb:15:6a:94:59:4e:74:0c:cb:
         4f:2e:b2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:58:27 2026 by rpki-client