Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e36342e302f31382d3138203d3e20313331353232.roa
File:                     3137352e3130322e36342e302f31382d3138203d3e20313331353232.roa (raw, json)
Hash identifier:          cWxDlmTvkucqtNVNFWekPaHq1hl2IaO7AsOAn9C4NI4=
Subject key identifier:   B1:40:A7:92:D4:F8:AC:87:0E:C0:12:33:A4:F6:80:65:26:29:9F:7C
Certificate issuer:       /CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
Certificate serial:       1A08A6301DF82B4CE7F9CB7AE17CB1FB941FFA39
Authority key identifier: 65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e36342e302f31382d3138203d3e20313331353232.roa
Signing time:             Thu 07 May 2026 02:18:42 +0000
ROA not before:           Thu 07 May 2026 02:13:42 +0000
ROA not after:            Thu 06 May 2027 02:18:42 +0000
asID:                     131522
IP address blocks:        175.102.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:08:a6:30:1d:f8:2b:4c:e7:f9:cb:7a:e1:7c:b1:fb:94:1f:fa:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
        Validity
            Not Before: May  7 02:13:42 2026 GMT
            Not After : May  6 02:18:42 2027 GMT
        Subject: CN=B140A792D4F8AC870EC01233A4F6806526299F7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f4:4f:17:75:09:26:a0:b2:f3:a7:76:dc:1d:
                    76:6b:d5:7e:20:c1:3d:8d:7f:bd:10:96:01:47:ba:
                    0e:5c:33:c9:b2:15:63:5c:45:32:65:25:45:e1:c4:
                    3a:a4:c6:c6:60:75:71:7b:8a:74:11:6e:ce:16:77:
                    42:da:5b:6b:6b:77:b3:fa:94:98:87:7d:52:c8:6e:
                    25:b9:8c:63:5b:1b:ed:50:55:e3:d8:cb:2f:81:f3:
                    49:18:7b:2f:73:3e:82:4e:79:f8:41:f1:66:57:d3:
                    7c:b3:1c:77:8a:4b:fe:f0:53:57:23:1e:48:ae:24:
                    03:17:eb:ed:1c:19:2f:d9:cc:5a:65:c1:27:7b:2d:
                    66:87:20:4b:8d:46:1e:cb:fb:a8:1b:d6:ca:96:d0:
                    4b:10:2e:6e:9f:ae:42:07:0d:50:f9:a9:68:e4:1b:
                    ff:04:d1:47:e5:11:0c:19:7d:12:6d:e7:03:a6:dc:
                    b0:88:81:bf:64:ec:a9:b1:aa:f5:c9:90:1c:c0:ba:
                    e4:66:49:68:f5:3e:63:bd:e3:bc:ff:b4:2c:68:93:
                    5d:33:ca:9e:62:3a:f3:a7:7d:dd:67:36:69:b6:fd:
                    2c:6c:1c:5d:95:0b:22:ef:36:dd:84:84:67:c8:35:
                    43:9c:6e:1a:07:b4:34:0c:30:80:e6:1d:74:47:1b:
                    09:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:40:A7:92:D4:F8:AC:87:0E:C0:12:33:A4:F6:80:65:26:29:9F:7C
            X509v3 Authority Key Identifier:
                keyid:65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e36342e302f31382d3138203d3e20313331353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         53:33:c2:22:39:a8:c6:0b:9c:69:c6:db:46:bd:bf:12:fe:02:
         d7:56:86:a1:dd:b6:a2:1b:46:13:b2:da:40:71:0b:38:42:a7:
         8c:fe:85:2d:a6:34:42:e7:2b:7a:7b:52:ae:9c:1d:7b:23:67:
         dd:75:c6:e9:6b:ea:d6:87:3a:82:67:dd:43:33:42:bd:ee:e3:
         b7:43:64:f4:17:57:d4:52:51:7d:d6:c5:b3:f4:91:38:98:c8:
         54:f1:e3:82:44:6c:fa:a2:01:a6:47:71:83:56:f9:33:9f:d3:
         8a:00:11:77:ae:61:57:4b:14:54:38:9f:fb:5d:d6:ee:be:f6:
         cb:b1:c1:2b:54:ad:e5:c9:75:f7:50:67:a5:cc:0a:60:df:8f:
         54:a9:19:4b:d4:7b:a9:23:f7:1d:7e:17:2e:b1:fe:ea:24:c1:
         29:ed:39:d1:be:4a:94:ad:5e:f8:7f:0c:64:d0:58:69:1c:55:
         7f:5f:5f:6f:09:22:4d:9a:bd:49:a0:0b:90:f6:e7:18:36:ec:
         04:d4:8c:f4:64:72:dc:7f:12:92:0b:f2:e2:f9:85:67:56:32:
         a0:db:29:25:0e:81:45:40:b5:41:61:12:e7:8c:38:c1:e7:08:
         64:8c:46:46:2c:bc:f8:88:5e:d1:47:ef:07:f0:49:d1:d2:09:
         84:7b:cb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:28:03 2026 by rpki-client