Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138342e302f32312d3231203d3e20313331353232.roa
File:                     3137352e3130322e3138342e302f32312d3231203d3e20313331353232.roa (raw, json)
Hash identifier:          zCgBPYVpORQxeQ4aKcEOXa9llUC0vPnWBwD3k7FInUw=
Subject key identifier:   88:92:60:75:53:23:A8:30:0E:33:B6:3C:86:50:1B:F6:2B:97:C6:C4
Certificate issuer:       /CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
Certificate serial:       240DE3C5F53B9448E9E651278FBF4FAFED21688B
Authority key identifier: 65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138342e302f32312d3231203d3e20313331353232.roa
Signing time:             Thu 07 May 2026 02:26:01 +0000
ROA not before:           Thu 07 May 2026 02:21:01 +0000
ROA not after:            Thu 06 May 2027 02:26:01 +0000
asID:                     131522
IP address blocks:        175.102.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:0d:e3:c5:f5:3b:94:48:e9:e6:51:27:8f:bf:4f:af:ed:21:68:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
        Validity
            Not Before: May  7 02:21:01 2026 GMT
            Not After : May  6 02:26:01 2027 GMT
        Subject: CN=889260755323A8300E33B63C86501BF62B97C6C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:20:1c:c7:66:bd:aa:18:5a:2d:75:28:94:99:
                    46:a3:97:75:15:6b:b1:47:ab:f3:43:46:87:94:c4:
                    ac:17:8c:9a:d9:2f:1f:02:31:10:54:28:d9:89:f1:
                    56:b0:d7:c5:98:4e:a3:50:85:bc:f1:a6:6e:bb:06:
                    15:7f:39:93:b3:6e:dc:9d:02:61:19:2d:24:fa:b4:
                    66:1a:34:41:97:ab:19:9f:a2:81:31:bc:5d:75:83:
                    71:24:60:f3:d7:6f:83:a4:a1:0d:ef:68:c9:2b:96:
                    1b:57:a8:99:11:95:9b:7c:be:7f:53:91:14:02:ce:
                    c4:41:c7:59:e7:9c:9b:ec:9d:9d:1a:70:04:27:ac:
                    0a:24:2e:e9:9b:98:39:7a:36:64:39:92:a8:a0:f1:
                    fa:90:5f:01:b7:21:f4:b4:8d:02:a6:26:61:5e:94:
                    20:0c:ac:fe:4f:2b:5b:36:bd:07:59:3d:e9:d8:af:
                    85:8c:e2:7b:28:1d:5a:8b:d3:16:f0:6f:fd:e4:cc:
                    53:11:03:24:ea:e6:9b:e6:dd:4e:bf:73:eb:5d:10:
                    1f:11:95:d1:99:b0:d8:26:6b:7f:bd:26:23:32:47:
                    55:d1:a5:cc:36:18:7a:4e:d6:e7:c7:3f:82:60:44:
                    7c:f3:a6:b3:8a:5f:0b:57:e5:b8:f1:e6:2f:1c:5d:
                    6e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:92:60:75:53:23:A8:30:0E:33:B6:3C:86:50:1B:F6:2B:97:C6:C4
            X509v3 Authority Key Identifier:
                keyid:65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138342e302f32312d3231203d3e20313331353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         00:1c:51:5f:4f:70:89:14:01:9b:41:cb:a2:d9:16:a2:f6:26:
         68:45:4a:0b:85:f4:7c:1a:91:00:0c:77:e3:3c:bf:48:42:5b:
         69:6b:9c:e9:39:12:64:df:4e:de:c0:4a:ac:df:7a:ba:72:ac:
         0c:cb:9c:f6:c7:80:cb:25:89:a8:23:3c:61:80:a2:b2:43:95:
         f0:90:a6:ed:1d:57:fe:96:80:81:f9:6a:77:0f:bf:d7:f3:6d:
         25:9e:39:ce:c8:85:ca:08:3f:58:2d:cd:24:bb:67:80:1a:01:
         6e:e7:03:51:4f:90:0a:79:32:b2:de:a5:b8:2b:e5:38:56:a9:
         2a:15:1b:6d:68:ec:eb:2c:40:89:cb:5f:3c:86:5a:ee:43:8a:
         66:32:54:50:60:31:c4:0b:be:1e:e5:9f:dd:86:4e:b4:58:16:
         a8:c6:e4:a5:19:c3:17:23:7e:fc:5b:b4:c5:d3:71:fd:d4:ca:
         dc:65:73:15:49:33:44:09:26:36:85:5c:a1:7e:2b:d6:10:fe:
         cb:4c:fb:d2:a6:5f:a0:5a:01:2a:eb:87:31:3d:a4:af:07:7d:
         9a:0b:af:14:39:fd:d3:c4:fd:4a:45:2b:7b:ab:1a:08:03:a2:
         80:ae:d9:92:17:68:13:67:62:91:9a:17:f5:df:03:b4:94:a5:
         7b:8a:17:9a
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUJA3jxfU7lEjp5lEnj79Pr+0haIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU4MDZERDg1NjAxRjMyN0IyRTNGNERDMkYzNDVFODE1
RTYxREIyMzAeFw0yNjA1MDcwMjIxMDFaFw0yNzA1MDYwMjI2MDFaMDMxMTAvBgNV
BAMTKDg4OTI2MDc1NTMyM0E4MzAwRTMzQjYzQzg2NTAxQkY2MkI5N0M2QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1IBzHZr2qGFotdSiUmUajl3UV
a7FHq/NDRoeUxKwXjJrZLx8CMRBUKNmJ8Vaw18WYTqNQhbzxpm67BhV/OZOzbtyd
AmEZLST6tGYaNEGXqxmfooExvF11g3EkYPPXb4OkoQ3vaMkrlhtXqJkRlZt8vn9T
kRQCzsRBx1nnnJvsnZ0acAQnrAokLumbmDl6NmQ5kqig8fqQXwG3IfS0jQKmJmFe
lCAMrP5PK1s2vQdZPenYr4WM4nsoHVqL0xbwb/3kzFMRAyTq5pvm3U6/c+tdEB8R
ldGZsNgma3+9JiMyR1XRpcw2GHpO1ufHP4JgRHzzprOKXwtX5bjx5i8cXW7lAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUiJJgdVMjqDAOM7Y8hlAb9iuXxsQwHwYDVR0j
BBgwFoAUZYBt2FYB8yey4/TcLzRegV5h2yMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NDU5MjI5NTk1ODY3NTQ2MS8wLzY1ODA2REQ4NTYwMUYzMjdCMkUzRjREQzJGMzQ1
RTgxNUU2MURCMjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNjU4MDZERDg1NjAxRjMyN0IyRTNGNERDMkYzNDVFODE1RTYxREIyMy5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMTA0NTkyMjk1OTU4Njc1NDYxLzAvMzEzNzM1MmUz
MTMwMzIyZTMxMzgzNDJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMxMzMzMTM1MzIz
Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA69muDANBgkqhkiG9w0BAQsFAAOCAQEAABxRX09wiRQBm0HL
otkWovYmaEVKC4X0fBqRAAx34zy/SEJbaWuc6TkSZN9O3sBKrN96unKsDMuc9seA
yyWJqCM8YYCiskOV8JCm7R1X/paAgflqdw+/1/NtJZ45zsiFygg/WC3NJLtngBoB
bucDUU+QCnkyst6luCvlOFapKhUbbWjs6yxAictfPIZa7kOKZjJUUGAxxAu+HuWf
3YZOtFgWqMbkpRnDFyN+/Fu0xdNx/dTK3GVzFUkzRAkmNoVcoX4r1hD+y0z70qZf
oFoBKuuHMT2krwd9mguvFDn908T9SkUre6saCAOigK7ZkhdoE2dikZoX9d8DtJSl
e4oXmg==
-----END CERTIFICATE-----
Generated at Wed May 13 16:25:09 2026 by rpki-client