Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138302e302f32342d3234203d3e2034383437.roa
File:                     3137352e3130322e3138302e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          Zb4IHE4KR5o0w9ZRyEqzdEJsDI/6QJhAZBFAkb21A/A=
Subject key identifier:   C9:C2:A2:76:59:1C:EF:04:C6:23:FC:22:3C:F2:B7:9A:69:F8:EE:68
Certificate issuer:       /CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
Certificate serial:       0EA42FA11EE95F5CC2D7138F0F880DFC742B2E10
Authority key identifier: 65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138302e302f32342d3234203d3e2034383437.roa
Signing time:             Thu 07 May 2026 02:23:02 +0000
ROA not before:           Thu 07 May 2026 02:18:02 +0000
ROA not after:            Thu 06 May 2027 02:23:02 +0000
asID:                     4847
IP address blocks:        175.102.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:a4:2f:a1:1e:e9:5f:5c:c2:d7:13:8f:0f:88:0d:fc:74:2b:2e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
        Validity
            Not Before: May  7 02:18:02 2026 GMT
            Not After : May  6 02:23:02 2027 GMT
        Subject: CN=C9C2A276591CEF04C623FC223CF2B79A69F8EE68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ca:cd:82:67:54:d9:f7:3d:34:99:0f:c0:49:
                    49:8e:4b:a1:fe:42:ec:da:78:09:c8:46:0c:34:cd:
                    56:68:9f:41:37:a7:96:d0:ef:ec:bc:3c:df:00:f5:
                    5b:b4:6d:0e:c7:dd:c7:9b:67:0d:6b:28:bf:fb:d0:
                    0d:0f:31:4f:44:1c:46:30:50:c1:ae:04:e6:e2:09:
                    90:9d:09:c7:87:bb:00:f3:d6:4f:22:fd:33:47:76:
                    b8:49:25:26:64:09:40:73:dd:89:89:a5:ba:fa:c4:
                    d1:a5:1f:1d:1c:f9:91:ce:57:a2:2e:04:e2:b5:95:
                    20:d8:a5:6c:a1:dc:d3:a2:4c:57:67:42:16:c6:97:
                    78:af:c4:3a:68:e2:c3:8d:5d:ee:9e:e7:0b:1b:b9:
                    d6:30:72:e6:f4:18:16:92:e6:a5:00:6e:92:55:ee:
                    a3:66:08:bf:aa:e9:f3:a8:11:3e:89:b4:99:c7:e0:
                    3a:28:f4:1f:a3:25:38:5e:5c:5f:8e:56:f9:ae:fd:
                    a1:2d:46:e5:2d:11:bc:8d:64:ed:11:81:68:64:29:
                    92:8a:e8:8a:9e:65:78:54:94:47:e3:69:cc:54:c8:
                    ef:6b:1e:b9:b1:87:16:1a:b1:f5:bd:6e:57:fd:d3:
                    e5:6b:fb:5d:8c:47:4b:3d:12:5a:1d:b5:63:7d:3f:
                    c8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C2:A2:76:59:1C:EF:04:C6:23:FC:22:3C:F2:B7:9A:69:F8:EE:68
            X509v3 Authority Key Identifier:
                keyid:65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138302e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:c7:db:5c:f7:01:ed:5b:d6:d6:2a:a1:d5:f0:c1:a0:2e:a2:
         99:7c:26:f7:da:8e:d1:ed:2f:e5:ed:97:b1:ce:24:29:7c:a0:
         fa:3b:b8:a2:a0:e6:7c:19:68:49:73:b6:72:6e:87:cf:0e:eb:
         6e:71:0c:47:79:d8:38:28:0b:1d:ed:30:cc:7d:72:b5:77:46:
         53:d9:b2:38:1c:bc:95:3b:27:f5:0e:31:87:86:7e:94:5d:08:
         ad:28:67:ad:7e:32:99:b8:cc:89:47:76:7e:b9:fa:53:b8:a1:
         7d:98:b4:a3:e5:3c:f5:b3:15:3e:5d:36:b7:a4:8b:01:83:14:
         14:3a:dc:ef:f8:d1:cb:6a:c2:92:c9:8f:cf:12:21:1c:16:ba:
         24:4f:04:fe:18:dc:f1:ee:30:05:d8:ef:5d:5f:34:96:d2:99:
         c8:4a:2b:1f:af:bd:51:96:f5:5b:8f:38:6f:f7:f5:0a:be:f2:
         3c:b1:d7:ac:d8:62:fc:9d:0e:ff:58:bb:1d:1e:03:51:7d:94:
         2b:7e:7a:b1:50:a0:50:d3:23:57:07:8f:57:d6:ff:97:01:c8:
         c9:94:1f:cc:ab:18:7d:e2:9b:29:56:74:12:cd:f0:72:9f:d6:
         83:d8:80:d7:93:96:5b:66:2d:3a:81:04:42:63:9d:2a:d5:84:
         d8:e9:7e:1a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 14:40:27 2026 by rpki-client