Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138312e302f32342d3234203d3e2034383038.roa
File:                     3137352e3130322e3138312e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          xjAUDTlqWxeXNtuhzGSll8Mcbq4Y/e0d61CcGdWPzNc=
Subject key identifier:   25:6D:6F:63:62:5F:F4:71:67:05:36:65:7A:BA:5E:93:7A:04:13:C1
Certificate issuer:       /CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
Certificate serial:       583157F33FD07505C531B18DD2B4F88EA30C2AD8
Authority key identifier: 65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138312e302f32342d3234203d3e2034383038.roa
Signing time:             Thu 07 May 2026 02:23:01 +0000
ROA not before:           Thu 07 May 2026 02:18:01 +0000
ROA not after:            Thu 06 May 2027 02:23:01 +0000
asID:                     4808
IP address blocks:        175.102.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:31:57:f3:3f:d0:75:05:c5:31:b1:8d:d2:b4:f8:8e:a3:0c:2a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
        Validity
            Not Before: May  7 02:18:01 2026 GMT
            Not After : May  6 02:23:01 2027 GMT
        Subject: CN=256D6F63625FF471670536657ABA5E937A0413C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:42:6f:24:24:b5:d4:ba:fe:51:bd:84:f8:0c:
                    9a:4a:1d:18:0d:7a:cf:96:78:f2:15:e7:a3:52:b3:
                    16:ca:95:97:24:f6:9c:eb:a9:83:e2:f2:b0:33:c4:
                    0c:63:34:58:9b:67:32:e2:bf:61:7f:cc:d3:d0:9e:
                    3c:8f:90:b4:21:45:33:a0:af:96:e3:75:9e:60:1d:
                    07:a1:46:ee:8f:64:51:cc:05:58:bb:51:c6:03:b8:
                    5e:9f:64:96:59:e8:b7:da:3d:86:5d:80:a6:61:88:
                    de:99:5e:18:73:39:b2:32:60:3f:84:12:f8:c4:99:
                    b4:dd:45:8f:d7:65:8c:57:e6:67:cb:5c:18:6d:cd:
                    77:90:99:8e:ed:4a:07:7b:dc:7e:1b:6b:76:4f:f3:
                    3a:76:d4:7d:c3:f3:2a:e6:3c:40:90:63:c3:42:5b:
                    f0:30:93:4a:40:ee:8c:cb:37:e6:0a:7f:46:3a:4a:
                    fc:c6:18:97:b5:f5:af:59:cc:69:07:9e:99:fa:52:
                    62:60:f5:21:bc:ae:a0:57:8e:3a:45:2e:2c:7c:ab:
                    e8:65:4f:ec:a9:25:f4:df:a6:e7:64:3e:03:4a:7c:
                    be:bc:36:8a:fc:3e:a5:64:4f:5d:11:ee:1a:06:a9:
                    c2:90:b3:b3:00:10:3f:ef:d8:f6:89:fa:3c:99:ab:
                    de:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6D:6F:63:62:5F:F4:71:67:05:36:65:7A:BA:5E:93:7A:04:13:C1
            X509v3 Authority Key Identifier:
                keyid:65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138312e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:8f:7f:a8:24:01:ce:04:79:65:2e:84:ce:cc:7f:40:ae:0c:
         f4:db:cd:50:b7:80:b2:9f:37:2e:0d:33:b3:2e:e6:a7:af:ae:
         73:8e:16:06:9c:c4:3d:84:47:9e:6d:30:ff:d2:83:5b:02:84:
         9c:6c:6a:3e:9a:3c:ea:a5:ba:7a:f4:dc:45:fe:e0:b4:f1:95:
         32:3f:87:b9:ff:a7:7f:48:3a:73:05:c5:ba:09:3a:ca:2e:44:
         0f:df:d0:81:34:6b:ca:86:7c:81:f3:96:5b:09:1c:d1:84:50:
         2a:b4:e2:e9:60:a5:b4:84:17:f1:98:34:c7:d2:50:aa:8d:ab:
         cb:ef:de:ed:01:4b:48:50:30:55:26:1b:12:f3:ab:70:e7:f3:
         5b:4d:ab:50:c8:43:e9:54:c1:d4:93:c4:ef:6b:75:0b:90:45:
         52:ae:08:38:32:9e:a6:b1:40:78:59:c0:ac:0d:57:33:6c:8b:
         a6:eb:25:6a:5d:3a:e7:70:bc:62:64:1e:47:27:d0:f9:2d:22:
         be:a9:86:13:e7:4a:22:a9:03:f4:28:1f:95:e9:66:4f:e7:83:
         f8:cb:a8:ee:db:e5:4e:52:07:99:85:be:42:82:f1:b0:71:d9:
         4a:24:d3:89:1b:dc:38:d3:8d:33:9e:1c:d7:d3:d3:50:cc:bd:
         59:99:15:4a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 14:11:00 2026 by rpki-client