Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138342e302f32342d3234203d3e20313331353232.roa
File:                     3137352e3130322e3138342e302f32342d3234203d3e20313331353232.roa (raw, json)
Hash identifier:          qmLtyVxaZyfOsLbp/wjiFwlsxVA/0eE36iWtTW7oXYg=
Subject key identifier:   70:65:B3:7C:06:FC:72:93:48:35:58:8B:AE:03:F1:43:EE:0A:18:8E
Certificate issuer:       /CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
Certificate serial:       39AC9AE24FB043E99DADE707D0054B952629DA04
Authority key identifier: 65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138342e302f32342d3234203d3e20313331353232.roa
Signing time:             Thu 07 May 2026 02:23:38 +0000
ROA not before:           Thu 07 May 2026 02:18:38 +0000
ROA not after:            Thu 06 May 2027 02:23:38 +0000
asID:                     131522
IP address blocks:        175.102.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ac:9a:e2:4f:b0:43:e9:9d:ad:e7:07:d0:05:4b:95:26:29:da:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
        Validity
            Not Before: May  7 02:18:38 2026 GMT
            Not After : May  6 02:23:38 2027 GMT
        Subject: CN=7065B37C06FC72934835588BAE03F143EE0A188E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8f:0b:5c:c2:7d:aa:06:56:90:ba:2d:71:a4:
                    94:bf:f3:a3:7b:07:16:31:9a:12:ab:3a:b5:b6:0e:
                    5e:ca:e8:a9:6f:df:83:cd:4b:1d:49:23:d2:3e:d9:
                    c4:ee:2f:14:5d:d4:1d:78:58:3c:56:4e:bf:1c:03:
                    d1:1e:a8:88:f8:43:50:29:dc:05:77:90:45:c0:a4:
                    7b:60:29:9a:93:87:ca:a9:44:8e:1b:23:89:b7:95:
                    ee:88:64:cd:f1:8b:b3:46:71:3d:f3:f7:47:56:e8:
                    08:d8:d4:e8:68:cc:86:cc:9b:50:86:1f:16:d4:95:
                    93:31:5a:7e:9d:0a:c0:83:31:96:9b:09:da:33:44:
                    81:e4:8b:bf:a5:37:2c:5c:3d:ae:f4:ff:f1:49:f9:
                    f9:a7:3e:27:2b:bc:b4:bf:9f:92:ef:50:d7:90:e6:
                    07:d4:11:19:d0:22:fd:93:7f:51:15:2b:b1:e1:54:
                    9b:4a:c7:7c:ad:de:cb:5e:75:7d:b6:dc:6e:21:c0:
                    40:15:e2:7a:dc:7e:22:2c:f0:1a:9b:a0:bf:c4:07:
                    29:67:52:ce:49:64:df:8e:c9:c1:4a:78:66:8e:a8:
                    bf:1a:aa:a3:ee:4b:87:9c:23:a8:ab:12:df:26:76:
                    56:fa:1a:b1:a6:2d:d6:1f:a2:7c:e4:e3:bb:bb:a5:
                    c8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:65:B3:7C:06:FC:72:93:48:35:58:8B:AE:03:F1:43:EE:0A:18:8E
            X509v3 Authority Key Identifier:
                keyid:65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138342e302f32342d3234203d3e20313331353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:8c:fd:ef:3c:54:fd:c2:11:40:09:0a:55:1a:13:0a:19:f3:
         02:e2:67:50:d4:ea:91:c6:7d:77:dd:b3:24:11:e1:15:2d:d2:
         0c:dc:e1:8c:1b:02:31:a0:7b:8a:45:db:47:b1:5e:f7:a4:db:
         c1:ef:77:bb:ee:25:cc:e2:77:d1:68:1b:11:9f:9b:89:f0:c5:
         c6:30:39:ad:9c:86:3e:1b:14:c2:1b:71:6c:f2:fc:df:fd:5b:
         90:94:3b:35:cb:96:c7:2b:76:d3:91:83:c7:d0:f4:3e:d5:6a:
         17:f0:e9:59:14:80:54:9e:5d:8e:c8:80:bc:ae:29:c7:bc:9a:
         36:40:8f:47:bc:99:b2:76:bc:27:58:73:5a:61:6a:ce:5f:32:
         bb:d3:68:cc:e4:cd:30:d2:54:11:9c:6b:ac:c4:ba:af:a7:17:
         3c:5a:50:7a:65:6b:df:54:8b:0f:b5:da:36:00:9f:6c:c7:63:
         32:49:58:d6:d4:39:7a:c7:ea:4d:0b:1e:e8:49:55:7b:27:2b:
         e1:75:ed:09:f5:81:b2:02:63:01:27:ac:2e:69:b0:f7:32:05:
         06:d6:99:1f:e3:37:6a:03:e8:b4:e8:13:08:24:9f:4a:c8:49:
         1c:7f:95:f0:86:c1:a7:3d:95:14:af:f8:90:6f:39:f4:ae:0d:
         12:37:11:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:13:55 2026 by rpki-client