Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3137382e302f32342d3234203d3e2034383437.roa
File:                     3137352e3130322e3137382e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          xGPJrvDWtJIMeL617DK2lg8+27Xg0TnmJCu7gkjxkMU=
Subject key identifier:   36:26:55:E0:EF:0D:EA:85:73:86:4E:29:6B:72:F6:0A:13:58:64:AC
Certificate issuer:       /CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
Certificate serial:       3F7670392380631E9536571913133874D126640F
Authority key identifier: 65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3137382e302f32342d3234203d3e2034383437.roa
Signing time:             Thu 07 May 2026 02:23:01 +0000
ROA not before:           Thu 07 May 2026 02:18:01 +0000
ROA not after:            Thu 06 May 2027 02:23:01 +0000
asID:                     4847
IP address blocks:        175.102.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:76:70:39:23:80:63:1e:95:36:57:19:13:13:38:74:d1:26:64:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
        Validity
            Not Before: May  7 02:18:01 2026 GMT
            Not After : May  6 02:23:01 2027 GMT
        Subject: CN=362655E0EF0DEA8573864E296B72F60A135864AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:eb:a5:af:1d:0f:89:6b:97:34:4b:23:42:8f:
                    8b:ca:ba:8e:6b:2e:6b:8d:67:3f:5e:8a:0d:43:4e:
                    78:60:3c:07:79:b9:ca:a7:44:b8:db:a9:e8:1e:c2:
                    30:f1:06:fa:b9:0c:f2:ed:dc:94:bd:3b:77:1f:45:
                    19:72:f3:e3:97:2a:bc:0c:e3:2f:5c:85:40:72:61:
                    ed:bb:f1:76:37:81:a2:0c:b2:17:d2:31:b4:51:1b:
                    13:5f:75:5e:09:67:d0:d6:b2:c8:14:67:f7:1d:e6:
                    9b:07:d6:a9:62:c0:46:b2:19:45:8a:b9:e8:01:9e:
                    a3:c9:40:08:f2:e9:80:6e:e1:8b:8d:c3:13:b5:4f:
                    1c:c8:6a:ac:f9:e0:83:7b:e8:11:ac:04:61:6b:eb:
                    f3:17:9e:3a:20:f9:eb:ff:2f:58:4f:3f:c0:de:a3:
                    ea:8d:bf:f5:66:2f:8c:2e:f7:ce:ed:1a:9e:7d:44:
                    b9:75:24:e6:06:bb:a8:c7:ef:61:7b:39:e3:c1:2f:
                    59:c9:3c:80:ef:f8:e1:25:41:a5:37:2f:6c:6c:95:
                    2d:98:a8:c1:76:a8:5e:84:dd:59:5b:0d:39:0d:a0:
                    fd:34:2e:67:c5:9c:06:c7:6b:4c:2a:d1:de:38:15:
                    63:18:ed:17:23:38:8e:85:d7:a0:5b:f0:c5:c3:7c:
                    8d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:26:55:E0:EF:0D:EA:85:73:86:4E:29:6B:72:F6:0A:13:58:64:AC
            X509v3 Authority Key Identifier:
                keyid:65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3137382e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:49:58:de:1d:31:4f:af:7d:51:b8:a4:0a:f8:5f:6b:e0:87:
         95:dd:df:03:20:ee:3c:8c:3c:6e:f3:9a:22:c1:d5:65:3b:64:
         4a:ca:c4:a8:07:8c:2f:3e:02:23:7d:ec:52:f4:9f:ba:e1:e2:
         76:99:38:82:a5:64:ac:8a:42:b9:d3:dc:8d:c0:8e:99:fb:61:
         0c:9a:28:fe:d6:74:2a:cc:19:f0:b5:73:ec:51:1e:a8:4d:cd:
         68:5d:f7:df:9f:ac:40:cc:90:1f:4f:20:a4:d9:47:23:da:c0:
         7e:c2:6a:0f:0c:8c:d1:63:3e:0e:cb:b1:2c:d4:8c:c9:d2:17:
         fa:d4:a3:6b:20:c7:85:07:ab:f0:81:e6:19:cc:7e:d8:41:35:
         a4:3e:9c:28:f0:ca:ec:3c:d5:8b:2e:05:64:95:58:7f:f4:37:
         7b:50:2c:ef:00:a8:7b:43:60:14:f2:9b:98:a7:0d:62:7e:39:
         4e:38:c6:8f:e9:5a:fa:41:1c:b4:67:bf:96:19:6f:58:f5:fb:
         fb:83:70:0f:87:a2:2d:fa:7b:26:9b:48:c1:45:49:34:65:50:
         e0:d2:15:f3:e2:d3:ca:88:b7:3e:bd:95:67:40:9c:cf:bd:cc:
         d4:ba:8f:45:36:33:d9:c7:cd:16:e3:24:72:53:d3:02:53:ac:
         64:2f:6d:5e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 15:24:04 2026 by rpki-client