Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e382e302f32332d3233203d3e2034383131.roa
File:                     3137352e3130322e382e302f32332d3233203d3e2034383131.roa (raw, json)
Hash identifier:          zfSamXYN3JEC9Uo5/xd4/BFOnJApD2QoggnHaJEmBL4=
Subject key identifier:   AC:07:CB:B3:5A:2B:B9:7C:4E:65:B3:BB:8D:A4:73:DE:F4:E9:A6:B2
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       455C728EFABA74C74A7EDE37F24AB39EF40640A6
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e382e302f32332d3233203d3e2034383131.roa
Signing time:             Thu 07 May 2026 01:36:49 +0000
ROA not before:           Thu 07 May 2026 01:31:49 +0000
ROA not after:            Thu 06 May 2027 01:36:49 +0000
asID:                     4811
IP address blocks:        175.102.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:5c:72:8e:fa:ba:74:c7:4a:7e:de:37:f2:4a:b3:9e:f4:06:40:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: May  7 01:31:49 2026 GMT
            Not After : May  6 01:36:49 2027 GMT
        Subject: CN=AC07CBB35A2BB97C4E65B3BB8DA473DEF4E9A6B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2f:35:cd:cb:aa:7e:83:75:d4:23:99:a5:a5:
                    3b:ef:32:51:35:6d:c4:b4:27:41:3c:17:ad:25:c1:
                    ee:ed:78:91:86:f6:f0:07:5e:77:1b:15:65:b2:48:
                    22:b1:af:3c:45:8d:17:86:cd:52:e9:18:47:ea:51:
                    46:a1:3c:ae:33:74:69:c3:04:74:29:95:a7:bd:f4:
                    e5:30:38:b3:2a:ba:67:3e:a4:e8:0e:74:2f:32:fc:
                    f1:bb:14:42:ef:66:53:4a:24:39:d2:55:3d:03:93:
                    ff:03:6f:fe:31:c3:10:92:88:96:bf:af:72:c3:6b:
                    f4:2a:b7:47:97:cb:d8:d1:7d:42:48:a2:c6:11:77:
                    60:34:18:b5:d7:f5:e9:a5:06:c1:f9:5b:c0:de:5e:
                    dc:1a:c4:ef:9c:ad:17:c8:10:f9:71:35:f8:f4:be:
                    4c:23:84:33:d2:10:f1:9b:6d:3d:6e:a1:1a:b2:b3:
                    b9:77:9f:5d:ea:37:34:b2:73:9b:21:a5:76:66:f0:
                    72:ba:e9:52:b9:86:cc:ea:78:b2:33:39:36:77:b1:
                    a8:b4:6a:20:e3:11:53:a0:77:61:cd:3c:b6:1b:56:
                    8d:95:42:dd:80:22:7a:c1:a1:75:95:7c:19:48:69:
                    70:6a:87:e7:ec:30:b7:2e:d6:b9:cb:8d:dc:e3:5d:
                    c6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:07:CB:B3:5A:2B:B9:7C:4E:65:B3:BB:8D:A4:73:DE:F4:E9:A6:B2
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e382e302f32332d3233203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:2c:56:28:a7:82:9a:92:22:00:82:2e:b8:81:43:00:a5:94:
         57:d8:2d:bb:13:a2:f6:0b:c3:70:95:f8:ce:2e:45:da:ac:c2:
         c5:94:20:4a:22:95:df:fe:5e:cf:d3:c6:94:f7:70:7b:b8:43:
         92:cf:9a:b6:ae:52:5a:3b:bb:e7:4e:ea:57:91:ae:e1:de:5c:
         71:25:39:7e:0e:58:5a:4f:96:33:3f:b4:11:5f:bf:54:e4:77:
         f2:8c:ff:f2:26:5c:ad:37:ea:42:1a:38:32:ce:b3:60:9f:a8:
         b9:39:b1:5b:2b:dc:fb:57:68:81:75:40:1e:83:17:42:fd:93:
         cd:e6:45:b4:15:d1:65:bf:97:bf:3b:16:8f:e9:78:3c:a3:dd:
         3e:2b:c5:da:a3:0b:f1:d6:f1:a9:d9:cd:57:1d:a4:d5:88:84:
         c2:4f:4f:dc:48:55:28:3d:17:93:e2:ab:68:51:a4:2e:4d:1d:
         e4:12:2c:32:da:b6:50:8d:cf:3d:64:3b:48:74:33:15:1e:8d:
         e5:3b:2e:dc:cf:c6:88:fd:f7:e1:f8:7a:15:f2:02:e0:b8:f6:
         02:a6:89:a1:cb:22:6b:45:4e:19:36:bf:9c:ad:66:60:ac:29:
         3a:45:a8:f6:8c:cb:c6:f6:dd:76:79:e8:07:74:4c:18:e6:1e:
         33:d1:8f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:25:02 2026 by rpki-client