Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e362e302f32342d3234203d3e2034383131.roa
File:                     3137352e3130322e362e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier:          DWjII8xwxNXC5OuvUB/9BIyU20p5IxpVJ8ISwLblGAI=
Subject key identifier:   06:91:4E:CC:3C:FA:59:9E:8A:41:17:7A:69:13:75:43:1B:9E:20:4E
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       6036F53AE8CA9DAC27E5DD07249768B1FBBD93C2
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e362e302f32342d3234203d3e2034383131.roa
Signing time:             Thu 07 May 2026 01:36:18 +0000
ROA not before:           Thu 07 May 2026 01:31:18 +0000
ROA not after:            Thu 06 May 2027 01:36:18 +0000
asID:                     4811
IP address blocks:        175.102.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:36:f5:3a:e8:ca:9d:ac:27:e5:dd:07:24:97:68:b1:fb:bd:93:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: May  7 01:31:18 2026 GMT
            Not After : May  6 01:36:18 2027 GMT
        Subject: CN=06914ECC3CFA599E8A41177A691375431B9E204E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b8:fc:4d:43:53:0b:dc:e2:f0:17:5b:50:87:
                    b8:45:e5:73:e4:4d:fb:31:08:a8:60:c4:36:8d:e5:
                    db:14:af:3d:d0:cb:3e:92:d0:14:85:89:71:6f:cd:
                    c3:71:98:38:7b:cb:a2:ba:a1:ce:60:54:c2:c3:c4:
                    0a:0c:03:11:43:e1:e9:6a:2b:d1:73:fd:f9:c2:32:
                    88:2b:6d:6a:dc:c9:e0:c2:27:06:dd:0e:97:d6:4f:
                    80:f4:e0:ba:ab:66:02:68:55:3d:14:b2:b6:d0:61:
                    c6:1a:24:dc:fd:bb:98:9d:fd:ad:e0:20:72:41:31:
                    d2:71:79:55:3a:3e:80:d2:9d:a9:d1:de:88:81:ba:
                    f3:8d:bc:0c:c3:c9:b3:d8:93:f1:a8:23:45:79:68:
                    cd:08:24:cd:18:00:86:3f:cf:04:f6:52:dc:0a:df:
                    bb:92:0b:56:50:18:0f:c2:1f:58:66:23:88:a5:36:
                    3a:87:e0:f9:77:5d:4e:f8:d4:cf:81:62:c9:2c:bd:
                    c3:c0:72:d9:dc:fa:ea:81:eb:3f:8c:99:58:84:86:
                    6d:42:57:b3:aa:e1:f2:b7:4e:2d:7a:0b:eb:1a:ef:
                    62:21:96:6b:c6:56:9b:79:18:4b:10:aa:00:c8:1d:
                    27:58:11:ff:6c:4a:66:73:1e:f6:9b:5e:d7:33:02:
                    d0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:91:4E:CC:3C:FA:59:9E:8A:41:17:7A:69:13:75:43:1B:9E:20:4E
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e362e302f32342d3234203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:af:d1:f6:ee:bd:8c:ca:05:8f:9c:d8:5e:6d:b2:c0:e5:4e:
         73:14:ed:14:3e:00:26:ef:17:e4:fa:0c:12:2a:ba:6e:76:f3:
         90:e2:4a:fd:15:30:c8:06:48:28:ea:c9:e3:a4:4f:f2:9d:0a:
         6e:c8:11:88:61:b5:69:2a:1e:d7:78:a9:2e:9f:fc:90:25:19:
         29:7b:d1:a2:b4:07:a9:4d:c4:6f:05:0c:d2:fa:0d:57:87:35:
         65:6d:4d:92:e8:f3:11:1d:ce:76:af:46:fa:d7:83:0e:b3:98:
         38:8e:dc:e8:2b:62:5b:88:9a:38:72:e9:86:c8:64:e6:af:33:
         88:4a:bf:f5:1e:30:d6:01:ad:10:b8:22:3e:c7:cb:f1:95:d3:
         c2:21:85:03:ee:d8:7b:28:3c:c1:20:b3:f4:a3:54:31:93:35:
         d1:fd:68:31:57:df:34:77:10:de:2c:32:24:ad:3b:43:c3:9c:
         3c:f8:a5:cd:77:73:c6:91:42:d8:60:f4:25:c6:ad:5d:a2:ad:
         dc:11:45:16:ef:a5:74:d9:26:b9:fc:42:d3:c4:ca:da:0b:1e:
         50:99:7c:88:82:1a:04:85:0c:e1:00:c4:d5:d7:76:42:a5:c2:
         ef:03:68:8f:28:fd:83:d5:d1:8b:f5:f7:01:8f:0d:b8:93:74:
         70:8a:92:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:24:14 2026 by rpki-client