Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138362e302f32342d3234203d3e20313331353232.roa
File:                     3137352e3130322e3138362e302f32342d3234203d3e20313331353232.roa (raw, json)
Hash identifier:          es0NV0lUcL7B8+IFaq9CK3HhPJxiD6YEpZbY2Ww6dXo=
Subject key identifier:   63:6B:72:AA:47:A5:32:FD:06:58:C0:72:BA:3A:44:FB:70:31:41:E2
Certificate issuer:       /CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
Certificate serial:       5CCCED8F75024F6E7FBCCD9E9D58D7B863185FF0
Authority key identifier: 65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138362e302f32342d3234203d3e20313331353232.roa
Signing time:             Thu 07 May 2026 02:25:28 +0000
ROA not before:           Thu 07 May 2026 02:20:28 +0000
ROA not after:            Thu 06 May 2027 02:25:28 +0000
asID:                     131522
IP address blocks:        175.102.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:cc:ed:8f:75:02:4f:6e:7f:bc:cd:9e:9d:58:d7:b8:63:18:5f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
        Validity
            Not Before: May  7 02:20:28 2026 GMT
            Not After : May  6 02:25:28 2027 GMT
        Subject: CN=636B72AA47A532FD0658C072BA3A44FB703141E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:48:af:30:5c:13:3e:48:37:91:88:06:53:e6:
                    fd:2d:df:5f:73:b4:1c:ce:e3:c7:43:a2:3a:38:bc:
                    82:28:a0:f5:64:ef:0a:fb:be:2a:99:ce:e6:9c:74:
                    44:c6:45:c7:1d:85:33:4b:17:de:9a:0e:24:8c:5b:
                    5c:b2:93:f3:97:8d:bf:87:24:20:4c:a3:a1:26:75:
                    c5:70:c8:ed:a1:49:c3:21:2c:7c:c5:2d:05:e8:91:
                    69:63:97:b8:75:1e:61:97:b7:2e:76:ae:57:5e:d7:
                    df:64:f9:36:8e:d9:01:8f:76:15:21:92:66:3b:1a:
                    4c:25:ad:f3:4d:37:e2:f0:b0:c6:d9:f9:ec:4e:9e:
                    10:25:3f:92:03:4b:f4:6e:65:d1:95:88:45:3c:7e:
                    13:e2:c1:04:16:ac:97:97:50:a2:85:da:81:38:b5:
                    20:57:0b:56:38:d5:09:c0:f3:36:0f:75:38:85:65:
                    d6:bb:01:e4:aa:d5:84:1e:73:6c:d2:56:65:91:bc:
                    26:7b:73:9c:b7:bc:7d:50:c7:a0:31:54:12:40:ae:
                    55:03:07:65:e9:f1:5f:b6:85:75:c9:46:34:bf:20:
                    bf:ef:f5:1d:5a:56:83:d1:a1:3b:24:f9:2a:a0:28:
                    b3:f4:10:58:a5:35:77:43:45:f2:e3:a2:05:ae:be:
                    ba:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6B:72:AA:47:A5:32:FD:06:58:C0:72:BA:3A:44:FB:70:31:41:E2
            X509v3 Authority Key Identifier:
                keyid:65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138362e302f32342d3234203d3e20313331353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:76:57:00:e5:74:0c:e3:9f:46:18:0e:67:5f:bc:a4:d1:ab:
         ae:ee:82:6f:45:91:a6:ed:7f:73:08:9d:18:bd:b2:39:40:3c:
         dd:24:79:77:8f:5b:d2:21:81:fb:c1:85:51:f9:90:48:7a:72:
         2a:cb:12:0e:aa:10:ad:d6:82:2e:22:f6:74:85:6c:58:a4:9d:
         aa:0d:1d:b7:72:6b:31:9c:dc:97:be:48:cd:16:a0:f7:01:e3:
         bc:da:33:c4:3d:30:8d:c2:ef:a3:0d:c6:ec:bd:bc:8c:a0:14:
         0f:6b:ba:5f:9c:60:39:81:6d:df:3b:2c:c7:d2:25:31:64:2e:
         b4:ae:ea:5b:01:23:3e:04:21:4c:f9:92:5e:69:2c:1a:00:1e:
         20:98:a5:a5:6c:7c:56:fe:8d:e2:95:b6:9e:31:58:ed:65:69:
         9f:e1:d6:88:28:3e:1a:25:88:ab:c7:64:0e:8f:ae:79:94:b7:
         9c:40:4a:7c:08:32:78:a2:fd:5b:63:08:73:8f:c9:89:81:4a:
         3b:cb:8a:58:34:39:42:87:b9:5e:5c:c2:aa:9b:db:3c:b1:58:
         83:73:e4:23:95:42:5f:8e:ca:c9:0b:46:4b:f5:07:a9:53:71:
         6d:c0:a4:3c:1a:e3:9f:41:8b:0f:67:3b:ff:3d:4d:b5:e0:d4:
         e3:f5:48:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:39:12 2026 by rpki-client