Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3130332e37392e32352e302f32342d3234203d3e20313331353232.roa
File:                     3130332e37392e32352e302f32342d3234203d3e20313331353232.roa (raw, json)
Hash identifier:          nuT6j7amOOCu8ttGS7qfpZHPlE0A2CUlrIMN8XuUuSY=
Subject key identifier:   DE:FF:40:F8:40:A0:D6:99:2C:95:DF:A9:37:45:0B:DC:71:18:3A:23
Certificate issuer:       /CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
Certificate serial:       57834C32128115228AA41EF257FB62A0EA3D4964
Authority key identifier: 65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3130332e37392e32352e302f32342d3234203d3e20313331353232.roa
Signing time:             Thu 07 May 2026 02:20:10 +0000
ROA not before:           Thu 07 May 2026 02:15:10 +0000
ROA not after:            Thu 06 May 2027 02:20:10 +0000
asID:                     131522
IP address blocks:        103.79.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:83:4c:32:12:81:15:22:8a:a4:1e:f2:57:fb:62:a0:ea:3d:49:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
        Validity
            Not Before: May  7 02:15:10 2026 GMT
            Not After : May  6 02:20:10 2027 GMT
        Subject: CN=DEFF40F840A0D6992C95DFA937450BDC71183A23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b1:1e:6d:7c:12:14:64:9f:3a:d0:65:31:11:
                    5c:36:9e:cf:e9:3a:ea:9c:56:2c:f1:57:12:52:12:
                    44:4c:53:5a:d3:1a:ec:b0:4e:e8:1e:6c:d9:6b:5c:
                    05:8d:56:a1:85:45:53:98:7e:f1:e0:14:f1:cb:4c:
                    d8:5d:91:04:c2:89:b5:87:58:2e:12:3b:98:93:60:
                    32:85:74:d6:55:5b:10:65:19:88:c9:8c:0c:a8:73:
                    7c:ac:b9:cb:9f:0a:59:a0:a2:b3:8a:0b:aa:50:48:
                    95:80:73:d2:0b:17:7d:0a:f9:b6:59:a2:e6:ed:36:
                    ee:d7:cf:f7:1f:95:c2:c3:4e:f8:42:41:af:12:ca:
                    77:93:9d:29:6b:98:38:89:c3:2c:87:b4:6f:18:92:
                    ae:1d:9a:c8:51:b4:44:b1:2f:ce:fa:b3:32:0b:66:
                    95:20:be:02:27:71:c5:b9:b5:20:ac:68:d1:10:a4:
                    53:1d:7f:bb:d1:df:53:03:08:af:4d:b0:f1:55:44:
                    d7:bd:b7:ee:ac:d3:fc:aa:90:14:f1:a6:af:45:28:
                    50:e1:6a:fc:98:8a:75:26:73:9e:e4:b9:f0:d8:c1:
                    ff:bd:fd:37:45:16:a4:01:75:95:86:76:f3:69:1c:
                    07:a9:4c:04:05:e1:91:f2:3e:d0:8b:6f:ba:70:0c:
                    0a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:FF:40:F8:40:A0:D6:99:2C:95:DF:A9:37:45:0B:DC:71:18:3A:23
            X509v3 Authority Key Identifier:
                keyid:65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3130332e37392e32352e302f32342d3234203d3e20313331353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:09:16:3f:42:2d:e1:ea:e6:13:b8:05:d8:f8:36:21:5d:6d:
         10:c6:7a:f1:e1:82:33:d2:5a:14:e8:e3:c2:f0:e9:fa:4d:73:
         b1:c1:7b:ad:6e:6b:5b:c1:70:e1:95:60:68:6c:19:2d:ac:5d:
         73:a0:6f:12:c9:04:9f:f2:b5:37:45:60:42:89:65:9d:70:63:
         6a:37:dc:6e:e9:eb:62:78:a5:03:5b:66:71:5d:26:af:61:f6:
         aa:49:a8:5e:16:a9:1e:42:17:c0:f2:9f:20:15:f7:d6:ed:19:
         86:95:ad:62:f4:c9:5d:da:ff:da:90:2e:74:cb:ae:2a:4f:b5:
         18:82:5e:94:d6:c7:16:70:52:78:2d:98:24:f3:56:80:a2:c6:
         f7:a1:05:93:d6:65:aa:bc:cf:88:41:e6:22:56:db:be:0c:ee:
         77:b3:99:d3:46:15:f7:2f:6f:d7:af:5c:cc:f5:81:b3:3f:02:
         f7:af:1a:13:0d:08:88:a7:8b:2f:4e:9a:cf:37:3f:f0:e4:e1:
         fc:27:44:ae:86:71:53:66:6a:21:89:2c:64:61:c7:27:27:66:
         85:39:1f:d8:76:40:a0:9b:61:b5:1c:b1:7c:3a:f2:e8:ae:3c:
         7a:72:30:e5:16:27:72:e4:13:77:40:66:c3:a5:c2:a1:bc:6c:
         3e:b6:63:36
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUV4NMMhKBFSKKpB7yV/tioOo9SWQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU4MDZERDg1NjAxRjMyN0IyRTNGNERDMkYzNDVFODE1
RTYxREIyMzAeFw0yNjA1MDcwMjE1MTBaFw0yNzA1MDYwMjIwMTBaMDMxMTAvBgNV
BAMTKERFRkY0MEY4NDBBMEQ2OTkyQzk1REZBOTM3NDUwQkRDNzExODNBMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmsR5tfBIUZJ860GUxEVw2ns/p
OuqcVizxVxJSEkRMU1rTGuywTugebNlrXAWNVqGFRVOYfvHgFPHLTNhdkQTCibWH
WC4SO5iTYDKFdNZVWxBlGYjJjAyoc3ysucufClmgorOKC6pQSJWAc9ILF30K+bZZ
oubtNu7Xz/cflcLDTvhCQa8SyneTnSlrmDiJwyyHtG8Ykq4dmshRtESxL876szIL
ZpUgvgInccW5tSCsaNEQpFMdf7vR31MDCK9NsPFVRNe9t+6s0/yqkBTxpq9FKFDh
avyYinUmc57kufDYwf+9/TdFFqQBdZWGdvNpHAepTAQF4ZHyPtCLb7pwDApNAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU3v9A+ECg1pksld+pN0UL3HEYOiMwHwYDVR0j
BBgwFoAUZYBt2FYB8yey4/TcLzRegV5h2yMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NDU5MjI5NTk1ODY3NTQ2MS8wLzY1ODA2REQ4NTYwMUYzMjdCMkUzRjREQzJGMzQ1
RTgxNUU2MURCMjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNjU4MDZERDg1NjAxRjMyN0IyRTNGNERDMkYzNDVFODE1RTYxREIyMy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwNDU5MjI5NTk1ODY3NTQ2MS8wLzMxMzAzMzJlMzcz
OTJlMzIzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMTM1MzIzMi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGdPGTANBgkqhkiG9w0BAQsFAAOCAQEAJQkWP0It4ermE7gF2Pg2IV1t
EMZ68eGCM9JaFOjjwvDp+k1zscF7rW5rW8Fw4ZVgaGwZLaxdc6BvEskEn/K1N0Vg
QollnXBjajfcbunrYnilA1tmcV0mr2H2qkmoXhapHkIXwPKfIBX31u0ZhpWtYvTJ
Xdr/2pAudMuuKk+1GIJelNbHFnBSeC2YJPNWgKLG96EFk9ZlqrzPiEHmIlbbvgzu
d7OZ00YV9y9v169czPWBsz8C968aEw0IiKeLL06azzc/8OTh/CdEroZxU2ZqIYks
ZGHHJydmhTkf2HZAoJthtRyxfDry6K48enIw5RYncuQTd0Bmw6XCobxsPrZjNg==
-----END CERTIFICATE-----
Generated at Wed May 13 13:24:08 2026 by rpki-client