Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138322e302f32342d3234203d3e2034383437.roa
File:                     3137352e3130322e3138322e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          /LFsxTPzOq7XV08B9qwtkrNCKFbCpnxXzFuXWlF6fQI=
Subject key identifier:   EB:37:D8:27:D2:63:54:51:F8:95:86:E3:0F:79:26:50:61:98:97:C2
Certificate issuer:       /CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
Certificate serial:       0893C3C488E05688E0B32244CB6AC7A01648778C
Authority key identifier: 65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138322e302f32342d3234203d3e2034383437.roa
Signing time:             Thu 07 May 2026 02:23:01 +0000
ROA not before:           Thu 07 May 2026 02:18:01 +0000
ROA not after:            Thu 06 May 2027 02:23:01 +0000
asID:                     4847
IP address blocks:        175.102.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:93:c3:c4:88:e0:56:88:e0:b3:22:44:cb:6a:c7:a0:16:48:77:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
        Validity
            Not Before: May  7 02:18:01 2026 GMT
            Not After : May  6 02:23:01 2027 GMT
        Subject: CN=EB37D827D2635451F89586E30F792650619897C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:de:7b:5d:23:43:3e:d2:4f:fc:90:fd:b9:1f:
                    bc:b6:72:2b:84:f0:cc:6f:bc:8a:8a:3b:a0:09:1e:
                    9e:29:10:80:63:34:b7:42:57:f1:dc:bf:b2:99:30:
                    ab:ff:01:64:51:10:54:4e:19:b1:e1:c2:d7:a1:86:
                    5a:85:ab:95:31:fb:ea:6f:96:1a:66:09:c4:18:24:
                    9d:0f:f3:7d:c0:71:63:40:f4:c5:f2:f7:d7:34:a3:
                    e9:12:c3:88:50:cd:ff:c0:71:ef:ec:40:1a:b8:1f:
                    d4:d6:a9:bf:32:29:47:93:e9:6e:f1:c4:31:b2:37:
                    01:2b:03:73:18:48:23:7b:57:65:eb:4b:68:90:3e:
                    7b:7c:4e:33:b5:ed:94:24:c7:b1:16:4a:8f:5f:32:
                    40:fb:ad:10:9f:21:85:af:ba:61:f8:05:e7:2b:23:
                    64:92:ad:e8:27:f9:c3:c4:85:8b:11:6a:52:7a:7b:
                    eb:2d:36:5e:f7:ac:eb:55:1d:d2:23:c5:08:ac:3a:
                    a5:d7:d7:60:4b:04:4d:73:f2:e0:86:26:88:d7:dc:
                    05:8a:c6:95:39:55:1c:20:3b:1e:c2:55:c1:75:4e:
                    c4:89:2f:52:bb:e5:86:76:e7:c7:b3:8f:7c:55:fb:
                    59:30:1a:b4:47:4b:a5:80:18:c5:94:57:34:00:81:
                    e5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:37:D8:27:D2:63:54:51:F8:95:86:E3:0F:79:26:50:61:98:97:C2
            X509v3 Authority Key Identifier:
                keyid:65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138322e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:71:62:c3:31:87:ab:6c:e3:66:e7:8f:c7:2f:aa:8a:d8:bb:
         47:b4:cc:f6:ba:d4:41:af:e3:8c:3f:a5:08:35:75:5b:f0:4b:
         0a:87:4d:ef:65:07:8f:6b:18:17:a5:18:78:a6:ef:67:63:2a:
         14:da:44:ab:e1:36:59:64:c3:87:71:66:20:e9:a6:01:1b:dc:
         3c:95:2e:b2:a9:38:2a:e7:15:d7:17:a2:40:82:a8:e1:43:da:
         98:bb:c9:97:e0:30:c6:5b:f1:68:03:38:2e:1f:33:18:f6:3a:
         bd:c6:73:c2:04:96:63:f6:98:d6:7f:5f:ff:9e:3c:f4:24:13:
         f4:82:11:aa:f1:cc:49:f7:38:c5:0c:6b:71:3a:2b:8a:8b:88:
         e3:61:6b:dc:cd:67:9c:ce:21:67:d3:f9:ed:0f:40:ce:05:a9:
         60:3e:32:75:b2:98:e9:2b:06:de:83:3c:e6:22:00:3e:b7:62:
         c5:36:b7:30:c2:92:29:34:25:d6:45:da:90:f1:96:63:02:52:
         e3:84:ba:7e:e4:10:36:b2:6e:74:9e:d7:97:73:f1:25:dc:8b:
         0c:b9:df:f9:15:b1:7a:27:8e:14:29:a7:3a:8e:59:94:0a:dc:
         14:3b:9b:93:d4:ff:cf:42:d2:a9:e8:90:1c:77:f5:9c:09:2b:
         6a:9e:15:4c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 14:27:46 2026 by rpki-client