Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3137392e302f32342d3234203d3e20313331353232.roa
File:                     3137352e3130322e3137392e302f32342d3234203d3e20313331353232.roa (raw, json)
Hash identifier:          OhkHKq2DyO8Be9IGqml4tqnKUxRAF5JdAK0S+/NKb0c=
Subject key identifier:   12:1E:AE:0C:90:4B:64:24:0D:01:75:EF:00:08:E5:DA:BB:E9:37:90
Certificate issuer:       /CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
Certificate serial:       021A232A1889B566C209BB42A52183DECFECAAB2
Authority key identifier: 65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3137392e302f32342d3234203d3e20313331353232.roa
Signing time:             Thu 07 May 2026 02:23:01 +0000
ROA not before:           Thu 07 May 2026 02:18:01 +0000
ROA not after:            Thu 06 May 2027 02:23:01 +0000
asID:                     131522
IP address blocks:        175.102.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:1a:23:2a:18:89:b5:66:c2:09:bb:42:a5:21:83:de:cf:ec:aa:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
        Validity
            Not Before: May  7 02:18:01 2026 GMT
            Not After : May  6 02:23:01 2027 GMT
        Subject: CN=121EAE0C904B64240D0175EF0008E5DABBE93790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:08:64:88:02:c3:ce:64:d4:5e:01:55:a5:40:
                    c8:1a:e8:d0:ca:6e:e1:1d:32:a5:d0:f9:bc:b2:45:
                    df:fe:11:7d:a0:8a:7d:b1:46:60:58:b3:42:1f:fa:
                    cd:c1:0a:63:63:89:df:e0:fd:3b:b9:58:95:36:86:
                    77:c2:cb:3a:bf:1e:82:29:cb:0b:c9:89:c6:aa:db:
                    9d:f2:4c:49:3b:be:53:25:9c:25:d2:dc:e3:c9:b0:
                    3e:d7:82:62:32:3b:db:f6:2f:b2:e0:d7:ed:a8:47:
                    31:fa:ab:9f:f1:80:f7:3e:f5:02:a1:a0:7f:97:94:
                    0f:23:2b:93:03:49:42:cb:2b:6d:73:21:c4:b6:fa:
                    a0:d5:3f:ab:be:a0:59:1d:ef:0f:da:b4:1b:3a:c4:
                    e7:24:14:d5:6e:c8:10:93:e9:ab:54:d8:b7:c7:8d:
                    7c:61:ba:49:05:fc:11:97:f3:86:c8:c2:6d:11:19:
                    00:e5:60:8d:5c:4a:82:75:4c:76:fe:dd:10:c7:d7:
                    49:80:7d:6c:38:e5:d3:9a:7b:28:f1:0f:12:9b:4f:
                    79:d6:b0:92:03:66:67:0d:f9:c3:54:b0:af:9e:fd:
                    9c:ec:a6:4d:d7:38:8f:88:ab:11:7b:3f:b7:5c:d0:
                    0e:69:e3:58:10:86:ec:0e:11:73:a8:6e:dc:6d:9f:
                    7d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1E:AE:0C:90:4B:64:24:0D:01:75:EF:00:08:E5:DA:BB:E9:37:90
            X509v3 Authority Key Identifier:
                keyid:65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3137392e302f32342d3234203d3e20313331353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:c3:ec:79:04:06:e1:cd:18:fd:31:cf:a4:4f:63:75:6c:66:
         67:08:e5:cd:2f:28:6a:1c:c6:af:50:4f:da:0d:3a:56:a2:57:
         5b:fe:24:00:59:81:e9:49:6c:7c:7c:56:a5:0d:4d:3e:49:33:
         fe:85:84:ee:e7:60:51:e3:b9:38:c0:a8:15:80:18:9c:33:c9:
         a9:2d:cd:09:02:fe:67:44:6c:f9:78:44:84:8f:49:44:e9:33:
         e0:b2:c0:0c:9c:c1:cf:ab:a7:ad:60:8b:54:a2:65:ba:f3:3f:
         0c:b5:d6:b4:5f:9b:4f:ba:ea:c3:b5:e6:ec:98:ce:b0:76:29:
         56:b1:e7:af:08:2f:00:7a:dc:97:b3:80:6d:e5:30:c8:90:ce:
         60:a7:cd:39:cd:d7:3b:39:92:22:ae:b8:5c:f7:72:c2:30:57:
         02:35:4d:0e:4e:30:e5:95:fc:86:a6:bb:be:ab:ff:8f:b7:3a:
         eb:0e:98:2d:26:8c:c5:22:b2:d7:f4:55:c0:90:dc:ac:de:0e:
         9d:d9:ec:4c:0d:de:18:d0:ec:0d:89:e4:60:c5:31:7f:b6:d8:
         86:c0:50:95:f3:62:73:47:a1:7b:6c:1b:2b:3c:40:9c:b3:8d:
         fe:ee:c7:3a:d0:4b:fe:b7:ec:42:52:df:96:2b:e4:16:78:a3:
         2b:1d:90:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:36:22 2026 by rpki-client