Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138322e302f32342d3234203d3e2034383038.roa
File:                     3137352e3130322e3138322e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          m6jA29tBDd/58kALW1iwaVXbBTydCfq1JvKSEfUEDnU=
Subject key identifier:   78:9E:2A:C8:9E:AE:05:F0:17:24:38:03:21:5B:B9:74:AF:CD:BC:A7
Certificate issuer:       /CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
Certificate serial:       5A029B46720555C4A0AAA7ABE70AB9504D023C1F
Authority key identifier: 65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138322e302f32342d3234203d3e2034383038.roa
Signing time:             Thu 07 May 2026 02:23:00 +0000
ROA not before:           Thu 07 May 2026 02:18:00 +0000
ROA not after:            Thu 06 May 2027 02:23:00 +0000
asID:                     4808
IP address blocks:        175.102.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:02:9b:46:72:05:55:c4:a0:aa:a7:ab:e7:0a:b9:50:4d:02:3c:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
        Validity
            Not Before: May  7 02:18:00 2026 GMT
            Not After : May  6 02:23:00 2027 GMT
        Subject: CN=789E2AC89EAE05F017243803215BB974AFCDBCA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9f:55:99:ed:99:36:20:0c:2f:c2:54:17:1a:
                    02:ca:fa:68:83:f0:9e:e8:81:c4:b1:fe:98:57:7e:
                    80:04:17:0a:ae:03:d2:18:73:22:1c:04:05:3d:f6:
                    10:23:9a:18:ae:dc:2f:2e:1a:a8:6f:43:5d:9c:6d:
                    3a:37:82:3c:24:bc:1f:a4:9e:70:ec:7c:c4:42:00:
                    b2:93:e4:fc:f1:ba:8a:97:70:38:aa:01:e4:dc:bd:
                    59:ab:ad:f9:32:95:81:04:83:fc:ad:fa:10:ec:65:
                    0b:59:87:c1:ae:76:17:1c:3d:0f:34:ae:af:7b:97:
                    7a:24:d2:d1:84:a9:60:2c:61:f4:09:37:55:47:e4:
                    67:6a:f2:f4:5c:01:50:8d:d0:38:28:47:f4:4e:77:
                    72:ce:fc:5f:23:40:95:95:ba:53:b6:ea:b0:1a:6f:
                    14:a2:48:60:3b:86:e4:ce:cb:a0:c3:a7:a5:6f:ae:
                    89:55:12:a9:a0:c1:c9:8c:68:75:2a:6c:6e:4a:e7:
                    e9:9f:c9:86:71:5c:a2:a3:9e:d0:73:0a:b6:4e:25:
                    bf:d5:93:d7:8b:84:c0:ac:ae:7c:25:76:40:16:6b:
                    ab:f7:fa:9b:e1:b5:39:0f:33:5c:0e:7c:42:95:c9:
                    04:e7:c8:8e:74:28:55:c9:e0:a5:4b:8f:3c:4d:59:
                    85:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9E:2A:C8:9E:AE:05:F0:17:24:38:03:21:5B:B9:74:AF:CD:BC:A7
            X509v3 Authority Key Identifier:
                keyid:65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138322e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:4b:67:f6:5d:4d:e8:1b:d6:b8:ec:5c:dd:76:38:f0:5f:fc:
         2a:7a:df:a1:26:74:0f:30:8e:89:6b:1a:ae:59:d0:b6:74:c9:
         3b:e0:c4:24:1d:e6:ad:f7:cd:ff:5b:94:38:71:55:df:9f:58:
         31:3c:ee:cd:ba:16:25:90:c4:10:ba:53:9e:51:ef:94:e0:04:
         0e:9a:a7:87:4d:83:a2:74:a9:c3:d4:eb:f9:3e:c1:9b:83:51:
         24:2d:c4:ba:2d:6c:24:1b:4d:3c:02:68:08:eb:b5:1a:e5:a9:
         71:00:1e:be:60:3d:37:c1:3d:80:88:d3:12:46:b6:e8:2d:02:
         15:49:49:44:8d:ba:ff:2a:c0:78:4b:d4:5c:69:35:91:b8:55:
         26:c3:d0:83:6e:52:00:d5:6a:1e:4c:e1:24:10:1b:3c:0f:14:
         59:87:c5:2b:8d:67:d4:69:bd:26:20:fe:34:4b:f0:52:a6:c6:
         3f:20:16:66:9c:e7:44:d2:5c:63:a0:69:ed:16:92:95:fb:06:
         c2:eb:5c:9d:d6:e1:22:f2:17:e2:f8:46:7f:f6:77:b1:69:9d:
         c8:e1:a0:24:b2:20:22:f9:33:ae:7c:e2:f1:b5:e2:07:df:99:
         d4:c1:e0:75:b1:4d:85:bc:52:cc:d7:ed:b0:15:e4:e6:17:fd:
         b9:d8:41:a6
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUWgKbRnIFVcSgqqer5wq5UE0CPB8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU4MDZERDg1NjAxRjMyN0IyRTNGNERDMkYzNDVFODE1
RTYxREIyMzAeFw0yNjA1MDcwMjE4MDBaFw0yNzA1MDYwMjIzMDBaMDMxMTAvBgNV
BAMTKDc4OUUyQUM4OUVBRTA1RjAxNzI0MzgwMzIxNUJCOTc0QUZDREJDQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6n1WZ7Zk2IAwvwlQXGgLK+miD
8J7ogcSx/phXfoAEFwquA9IYcyIcBAU99hAjmhiu3C8uGqhvQ12cbTo3gjwkvB+k
nnDsfMRCALKT5PzxuoqXcDiqAeTcvVmrrfkylYEEg/yt+hDsZQtZh8GudhccPQ80
rq97l3ok0tGEqWAsYfQJN1VH5Gdq8vRcAVCN0DgoR/ROd3LO/F8jQJWVulO26rAa
bxSiSGA7huTOy6DDp6VvrolVEqmgwcmMaHUqbG5K5+mfyYZxXKKjntBzCrZOJb/V
k9eLhMCsrnwldkAWa6v3+pvhtTkPM1wOfEKVyQTnyI50KFXJ4KVLjzxNWYWtAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUeJ4qyJ6uBfAXJDgDIVu5dK/NvKcwHwYDVR0j
BBgwFoAUZYBt2FYB8yey4/TcLzRegV5h2yMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NDU5MjI5NTk1ODY3NTQ2MS8wLzY1ODA2REQ4NTYwMUYzMjdCMkUzRjREQzJGMzQ1
RTgxNUU2MURCMjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNjU4MDZERDg1NjAxRjMyN0IyRTNGNERDMkYzNDVFODE1RTYxREIyMy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwNDU5MjI5NTk1ODY3NTQ2MS8wLzMxMzczNTJlMzEz
MDMyMmUzMTM4MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzAzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAK9mtjANBgkqhkiG9w0BAQsFAAOCAQEAAUtn9l1N6BvWuOxc3XY48F/8
KnrfoSZ0DzCOiWsarlnQtnTJO+DEJB3mrffN/1uUOHFV359YMTzuzboWJZDEELpT
nlHvlOAEDpqnh02DonSpw9Tr+T7Bm4NRJC3Eui1sJBtNPAJoCOu1GuWpcQAevmA9
N8E9gIjTEka26C0CFUlJRI26/yrAeEvUXGk1kbhVJsPQg25SANVqHkzhJBAbPA8U
WYfFK41n1Gm9JiD+NEvwUqbGPyAWZpznRNJcY6Bp7RaSlfsGwutcndbhIvIX4vhG
f/Z3sWmdyOGgJLIgIvkzrnzi8bXiB9+Z1MHgdbFNhbxSzNftsBXk5hf9udhBpg==
-----END CERTIFICATE-----
Generated at Wed May 13 14:27:42 2026 by rpki-client