Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138382e302f32342d3234203d3e20313331353232.roa
File:                     3137352e3130322e3138382e302f32342d3234203d3e20313331353232.roa (raw, json)
Hash identifier:          Mv7KdKpRBUy/xmVKXsQdUwpE7dWcV5ZwrJIq0u38QqE=
Subject key identifier:   AA:74:AE:D5:9D:70:0D:F8:A8:58:74:78:2D:37:1E:65:E4:BA:80:8B
Certificate issuer:       /CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
Certificate serial:       533091123ECD2C7628C4A45C36B071C7CAC4935F
Authority key identifier: 65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138382e302f32342d3234203d3e20313331353232.roa
Signing time:             Thu 07 May 2026 02:25:28 +0000
ROA not before:           Thu 07 May 2026 02:20:28 +0000
ROA not after:            Thu 06 May 2027 02:25:28 +0000
asID:                     131522
IP address blocks:        175.102.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:30:91:12:3e:cd:2c:76:28:c4:a4:5c:36:b0:71:c7:ca:c4:93:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
        Validity
            Not Before: May  7 02:20:28 2026 GMT
            Not After : May  6 02:25:28 2027 GMT
        Subject: CN=AA74AED59D700DF8A85874782D371E65E4BA808B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fe:c2:e7:a0:66:dc:b8:e7:fe:46:a9:f1:60:
                    1b:f9:ef:c8:22:08:ac:30:fb:f1:b8:a7:4d:2f:91:
                    ff:55:fb:27:43:ce:61:3a:b5:ea:b0:bc:b5:4a:6e:
                    bb:c7:8d:a6:7b:7d:eb:f0:ee:13:c0:89:2f:18:a7:
                    1d:aa:cd:e9:b4:c2:a6:3c:e3:b4:4e:46:56:21:fe:
                    8d:97:21:0b:68:98:47:cf:e5:bb:d7:4c:ee:67:9b:
                    38:d9:f0:e2:1b:36:35:20:8b:61:3d:be:80:c1:ef:
                    c1:a2:5e:f1:94:af:17:17:b1:a0:cb:64:1f:da:5d:
                    10:10:ee:9b:d4:bc:70:12:0e:1f:88:dc:b5:0a:aa:
                    e9:59:af:b3:e4:0a:ac:be:77:71:c0:b1:e9:a6:a2:
                    ad:48:b9:87:53:95:a1:cb:d0:18:f5:8c:b3:ff:36:
                    da:2f:6c:c7:ed:88:8e:72:74:36:29:f9:ed:ea:cb:
                    c6:13:95:14:c5:d8:74:4e:2f:d4:44:d4:19:27:7f:
                    ca:58:ec:a0:75:b6:8d:3f:2a:a0:8e:63:d2:e9:31:
                    da:4f:00:65:77:55:67:99:27:4d:7d:57:73:18:7b:
                    bb:43:27:b8:32:4c:33:32:15:7a:f4:54:09:63:94:
                    2a:05:8d:41:1b:4f:40:94:40:a0:71:36:f8:5a:53:
                    3a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:74:AE:D5:9D:70:0D:F8:A8:58:74:78:2D:37:1E:65:E4:BA:80:8B
            X509v3 Authority Key Identifier:
                keyid:65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138382e302f32342d3234203d3e20313331353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:e0:b5:96:73:9d:89:5c:45:e4:4f:e1:77:3c:2f:37:73:43:
         13:46:82:eb:5a:b0:db:80:69:0a:55:e6:46:e3:55:44:fc:a1:
         35:c3:b4:93:5d:a6:f8:50:20:f3:15:f6:9a:91:87:91:cb:b4:
         77:a4:74:0f:14:ab:78:3a:79:9a:f1:99:f6:e0:17:99:de:29:
         67:55:5a:fe:ea:f2:11:6e:7b:51:c5:7c:3d:5f:92:ad:90:0c:
         4e:81:13:79:bf:77:d8:6e:30:73:0d:59:74:35:66:3f:91:e6:
         6a:f6:f4:d8:83:7a:00:09:6d:42:a8:3c:da:88:2b:fd:89:65:
         0e:e4:38:21:dc:6d:60:87:26:d9:9d:2e:09:1e:9d:14:76:99:
         7b:78:1a:34:06:1c:e8:67:ed:d1:4b:b1:b5:ae:8a:70:6f:0e:
         8e:20:00:eb:6d:e3:1a:8a:69:44:10:1e:c7:55:f1:2e:0d:ac:
         2b:95:54:e4:f8:68:67:1c:ed:a9:91:b0:f0:8e:0a:7e:0c:ce:
         75:4c:b1:cd:79:88:c2:50:7a:f2:a0:7e:73:e0:a4:50:6c:25:
         88:51:26:f5:3d:5b:a6:7d:33:fa:12:56:45:25:ab:40:88:2e:
         e5:46:02:88:88:cf:9b:52:aa:3a:69:91:dd:bf:06:71:6f:a3:
         74:72:87:88
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUUzCREj7NLHYoxKRcNrBxx8rEk18wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU4MDZERDg1NjAxRjMyN0IyRTNGNERDMkYzNDVFODE1
RTYxREIyMzAeFw0yNjA1MDcwMjIwMjhaFw0yNzA1MDYwMjI1MjhaMDMxMTAvBgNV
BAMTKEFBNzRBRUQ1OUQ3MDBERjhBODU4NzQ3ODJEMzcxRTY1RTRCQTgwOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr/sLnoGbcuOf+RqnxYBv578gi
CKww+/G4p00vkf9V+ydDzmE6teqwvLVKbrvHjaZ7fevw7hPAiS8Ypx2qzem0wqY8
47RORlYh/o2XIQtomEfP5bvXTO5nmzjZ8OIbNjUgi2E9voDB78GiXvGUrxcXsaDL
ZB/aXRAQ7pvUvHASDh+I3LUKqulZr7PkCqy+d3HAsemmoq1IuYdTlaHL0Bj1jLP/
NtovbMftiI5ydDYp+e3qy8YTlRTF2HROL9RE1Bknf8pY7KB1to0/KqCOY9LpMdpP
AGV3VWeZJ019V3MYe7tDJ7gyTDMyFXr0VAljlCoFjUEbT0CUQKBxNvhaUzr1AgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUqnSu1Z1wDfioWHR4LTceZeS6gIswHwYDVR0j
BBgwFoAUZYBt2FYB8yey4/TcLzRegV5h2yMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NDU5MjI5NTk1ODY3NTQ2MS8wLzY1ODA2REQ4NTYwMUYzMjdCMkUzRjREQzJGMzQ1
RTgxNUU2MURCMjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNjU4MDZERDg1NjAxRjMyN0IyRTNGNERDMkYzNDVFODE1RTYxREIyMy5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMTA0NTkyMjk1OTU4Njc1NDYxLzAvMzEzNzM1MmUz
MTMwMzIyZTMxMzgzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMTM1MzIz
Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAK9mvDANBgkqhkiG9w0BAQsFAAOCAQEAS+C1lnOdiVxF5E/h
dzwvN3NDE0aC61qw24BpClXmRuNVRPyhNcO0k12m+FAg8xX2mpGHkcu0d6R0DxSr
eDp5mvGZ9uAXmd4pZ1Va/uryEW57UcV8PV+SrZAMToETeb932G4wcw1ZdDVmP5Hm
avb02IN6AAltQqg82ogr/YllDuQ4IdxtYIcm2Z0uCR6dFHaZe3gaNAYc6Gft0Uux
ta6KcG8OjiAA623jGoppRBAex1XxLg2sK5VU5PhoZxztqZGw8I4KfgzOdUyxzXmI
wlB68qB+c+CkUGwliFEm9T1bpn0z+hJWRSWrQIgu5UYCiIjPm1KqOmmR3b8GcW+j
dHKHiA==
-----END CERTIFICATE-----
Generated at Wed May 13 15:58:46 2026 by rpki-client