Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e31312e302f32342d3234203d3e2034383132.roa
File:                     3137352e3130322e31312e302f32342d3234203d3e2034383132.roa (raw, json)
Hash identifier:          Ij8CU56N4C2ixRm12PUuXMsrVfrfvCAinXnu5JUuucc=
Subject key identifier:   86:7A:E1:49:88:17:8A:3F:8D:EF:18:22:26:95:54:C0:70:B0:37:35
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       76C338397263488B05AAD1CB18C98DBB77F39E87
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e31312e302f32342d3234203d3e2034383132.roa
Signing time:             Fri 21 Aug 2026 05:56:34 +0000
ROA not before:           Fri 21 Aug 2026 05:51:34 +0000
ROA not after:            Fri 20 Aug 2027 05:56:34 +0000
asID:                     4812
IP address blocks:        175.102.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 13:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:c3:38:39:72:63:48:8b:05:aa:d1:cb:18:c9:8d:bb:77:f3:9e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: Aug 21 05:51:34 2026 GMT
            Not After : Aug 20 05:56:34 2027 GMT
        Subject: CN=867AE14988178A3F8DEF1822269554C070B03735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:7c:b2:9a:26:e0:32:49:27:4b:61:6f:3a:ce:
                    f4:57:a2:5a:a2:c5:2d:8f:68:e3:a0:11:5a:87:6b:
                    63:e3:5b:c6:5e:92:cc:61:56:65:8a:23:01:9d:62:
                    5b:ea:d3:fc:ab:ab:03:ca:21:88:f5:54:c1:54:7f:
                    9f:5f:1b:90:97:21:88:27:01:20:6d:66:e6:8d:bf:
                    a2:5a:96:5c:23:b0:44:bc:25:d1:c8:59:5b:19:1d:
                    77:68:0b:58:a5:a9:88:e8:aa:66:9b:fb:7c:73:57:
                    1d:ef:12:6e:7b:ac:99:2a:92:61:75:3f:a6:da:3b:
                    c0:33:77:b3:e4:0a:77:19:41:31:88:a8:71:af:ee:
                    8c:40:bc:c4:5e:79:f9:9c:4d:b5:67:4f:57:8b:8a:
                    31:5c:d0:8d:71:1c:7e:e8:38:a6:73:6f:ad:25:07:
                    c3:11:f8:d7:e1:d0:8f:77:a7:0e:44:a4:b3:b3:c5:
                    2e:d3:cf:c1:76:49:77:a8:a1:31:af:ed:d4:4d:25:
                    1d:11:69:f0:1a:44:11:47:65:f3:29:1f:4e:76:d9:
                    20:19:18:d3:06:e2:fc:ae:3f:53:e7:3f:74:19:17:
                    04:fe:1d:52:ac:5f:bf:22:c9:bd:a0:54:f3:c3:2f:
                    e9:eb:76:f2:cc:b0:23:06:b5:70:78:42:26:18:0c:
                    f0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7A:E1:49:88:17:8A:3F:8D:EF:18:22:26:95:54:C0:70:B0:37:35
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e31312e302f32342d3234203d3e2034383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.102.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:5e:d0:85:ce:dd:e0:df:fe:17:ba:71:bf:ac:ac:4e:0b:55:
         21:4e:11:f1:d7:51:9b:f2:f1:6c:a0:93:b3:db:68:2d:f1:17:
         bc:d8:c0:34:4f:a7:6b:17:3e:f5:d0:74:6f:3e:64:15:36:85:
         8d:b3:fe:d5:68:66:dd:a4:60:21:a7:2b:ef:22:0e:f3:9e:fc:
         26:a1:22:68:4d:fc:da:a0:53:ab:29:d1:3a:6a:24:c2:41:87:
         ab:46:6e:51:6f:08:7e:ce:eb:80:4f:43:cc:34:1d:3c:e2:27:
         0d:fc:a4:8a:4e:b4:d4:fb:5a:7b:00:6d:54:a2:ff:2c:65:d5:
         49:92:43:33:69:1b:2d:ab:e1:a7:ee:b3:3d:39:c2:dd:83:80:
         88:54:ba:9b:30:a8:c6:c9:24:36:61:55:a1:0f:43:59:2b:2c:
         d9:e1:2b:42:4b:82:73:57:ee:7d:6c:0d:dd:b9:bf:85:02:84:
         5d:8e:ce:97:74:6a:ac:5c:14:ee:86:fd:18:25:61:2d:6a:6d:
         d9:46:99:5d:57:56:ff:a4:8d:3e:3c:38:e3:e1:de:10:80:8e:
         3e:2e:62:2b:ca:04:0f:ac:9c:7f:b0:cf:bd:dc:da:43:f4:7c:
         b9:96:b2:4d:9f:30:7b:84:4d:c4:34:b4:d1:4d:cb:76:21:14:
         87:7c:f5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:20:20 2026 by rpki-client