Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e392e302f32342d3234203d3e2034383131.roa
File:                     3137352e3130322e392e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier:          wL8DZd7kiboB5qN4axXXgeP4P4CVXyNII2irHmdZDr4=
Subject key identifier:   C5:25:FB:43:C5:3D:72:6A:92:C5:19:05:0B:B3:F8:2B:DE:A8:68:0A
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       7023F1FAD94E0F183A7A2B5A31A10A4AF447E654
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e392e302f32342d3234203d3e2034383131.roa
Signing time:             Thu 07 May 2026 01:36:18 +0000
ROA not before:           Thu 07 May 2026 01:31:18 +0000
ROA not after:            Thu 06 May 2027 01:36:18 +0000
asID:                     4811
IP address blocks:        175.102.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:23:f1:fa:d9:4e:0f:18:3a:7a:2b:5a:31:a1:0a:4a:f4:47:e6:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: May  7 01:31:18 2026 GMT
            Not After : May  6 01:36:18 2027 GMT
        Subject: CN=C525FB43C53D726A92C519050BB3F82BDEA8680A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a1:3e:72:6b:b5:ce:17:22:36:6d:93:f5:69:
                    60:6f:df:6a:c9:d3:69:c0:58:44:5a:f5:08:0e:4e:
                    d9:f8:50:c6:ab:49:d3:b9:ba:bd:64:1d:79:f1:df:
                    82:8d:03:14:1e:b4:4d:f3:26:ba:92:23:ef:a6:74:
                    a1:32:f0:bd:9b:bf:90:f8:c4:1a:88:db:35:51:a0:
                    41:e4:ee:16:99:33:43:32:0b:97:ec:10:30:ad:ec:
                    cb:10:05:95:11:39:56:63:03:af:4b:fd:3c:36:2c:
                    30:93:6a:b9:a4:d7:fd:2e:a5:51:86:b9:9d:27:85:
                    95:60:66:29:e1:23:3f:d9:4c:6b:03:4d:e1:7d:01:
                    83:37:1b:93:ed:62:72:2a:87:98:69:08:14:e7:ab:
                    e6:cb:ed:1a:ba:f9:a9:5d:df:c8:6a:c8:3b:02:a3:
                    13:d5:f2:a6:d2:8e:da:41:e9:b1:db:99:f7:0c:24:
                    45:db:54:9c:f3:39:4e:06:b6:f6:e8:c0:6b:b0:d3:
                    ab:4e:34:9b:98:76:6b:17:8c:a2:31:d3:ad:49:07:
                    37:b7:75:3e:4b:20:ac:b6:da:5f:dc:b4:6f:ac:7b:
                    15:88:62:a5:e9:58:10:7b:bf:e3:1b:7c:d9:6e:92:
                    7b:ee:1a:2d:10:ea:b7:28:a8:7d:44:5d:af:34:a4:
                    90:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:25:FB:43:C5:3D:72:6A:92:C5:19:05:0B:B3:F8:2B:DE:A8:68:0A
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e392e302f32342d3234203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:29:ef:db:5d:5f:24:70:09:bf:2f:d0:ab:7c:b3:56:49:9f:
         48:62:ba:41:a9:7f:9a:b1:9d:e1:3d:d8:b9:24:6e:f3:8f:68:
         53:f9:db:88:82:5e:d8:5d:e5:f2:c8:d6:91:f1:01:d3:e6:f3:
         c1:8a:88:7e:eb:ca:bc:45:59:ab:9a:ad:4d:8b:f2:b4:e3:46:
         16:b6:d6:a4:24:1c:96:82:c2:9a:4f:f6:02:d2:e4:fd:e9:29:
         4d:ec:c1:d7:41:93:b8:cd:6f:69:b5:72:32:c9:c3:80:6a:b5:
         bc:b0:84:4b:14:6b:6c:f1:4d:bf:06:33:7a:5d:97:48:17:15:
         7b:61:f2:8e:f8:e1:6a:12:d2:80:2f:b0:e7:8c:a3:3b:4d:e2:
         1c:12:2d:b5:cd:96:fb:d9:c8:a3:76:ce:05:07:de:87:a0:77:
         a5:a4:91:c2:14:fb:23:a4:bc:b2:b9:c9:27:18:b0:05:76:0f:
         03:60:e5:ba:d5:5d:18:b4:c9:80:3f:99:5f:86:92:5d:65:38:
         5b:6b:49:22:56:8e:e2:86:6a:5d:65:aa:d8:4e:32:44:3a:a3:
         9a:e5:46:8b:6c:27:22:0e:6e:24:9d:e6:2e:ba:b8:8e:03:6b:
         99:3b:1a:50:c6:ea:8f:0f:3c:f8:36:5c:d9:56:33:6a:e8:29:
         c6:00:e2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:36:40 2026 by rpki-client