Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3131352e39322e302f32322d3232203d3e20313436383137.roa
File:                     3130332e3131352e39322e302f32322d3232203d3e20313436383137.roa (raw, json)
Hash identifier:          PND75o2clQ/gdomAxjn5UyshHxPXY42asjkh6xUKNac=
Subject key identifier:   87:91:68:D4:0E:8C:E2:10:C7:7D:08:F7:3B:97:14:5F:A7:89:0F:3A
Certificate issuer:       /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial:       49C4BDC3FFC971B1EA27CA019B632D53193A1479
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3131352e39322e302f32322d3232203d3e20313436383137.roa
Signing time:             Fri 08 May 2026 09:47:15 +0000
ROA not before:           Fri 08 May 2026 09:42:15 +0000
ROA not after:            Fri 07 May 2027 09:47:15 +0000
asID:                     146817
IP address blocks:        103.115.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c4:bd:c3:ff:c9:71:b1:ea:27:ca:01:9b:63:2d:53:19:3a:14:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
        Validity
            Not Before: May  8 09:42:15 2026 GMT
            Not After : May  7 09:47:15 2027 GMT
        Subject: CN=879168D40E8CE210C77D08F73B97145FA7890F3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fc:ca:c5:e5:41:7e:cc:8c:f3:27:77:09:fd:
                    d7:a3:5b:6e:89:92:52:61:e9:63:43:4f:c1:1a:19:
                    88:82:25:f4:48:a7:97:15:dd:d0:43:8a:f8:9d:41:
                    e7:68:4c:c4:b0:c3:59:cd:ca:cb:bd:b4:5b:b1:a3:
                    95:1c:60:ec:e3:5b:3f:f6:9a:cb:19:1a:26:96:7b:
                    2c:bb:cb:4b:e0:c6:6b:1b:70:32:8f:49:ff:e6:41:
                    5e:89:f5:82:37:cf:e3:2a:29:c3:d6:12:54:26:f3:
                    91:e8:9e:24:14:ac:2a:15:a8:67:a9:87:85:4c:46:
                    af:30:05:8d:59:0e:19:07:c2:fd:98:20:94:a8:07:
                    53:21:d4:b2:f7:d8:ce:9e:9d:74:82:b5:64:8c:a4:
                    35:b2:a2:e0:6d:fe:0c:30:70:30:8a:a9:da:0e:56:
                    90:bd:56:58:71:4d:a0:5f:e1:89:72:e0:7d:d0:5b:
                    63:9c:d8:ce:de:81:9a:b8:f1:57:ec:9a:c8:50:f2:
                    ef:8d:c3:0c:59:21:e1:22:bf:75:53:76:7b:f5:cb:
                    a5:5d:bd:15:b4:7e:15:3a:9a:57:e7:cc:ab:4a:0b:
                    2d:b1:95:0c:b3:54:0c:a3:b1:ca:4c:ec:9d:10:1a:
                    6a:d2:73:20:4e:2c:3a:53:c6:45:50:f0:1d:0a:f8:
                    f9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:91:68:D4:0E:8C:E2:10:C7:7D:08:F7:3B:97:14:5F:A7:89:0F:3A
            X509v3 Authority Key Identifier:
                keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3131352e39322e302f32322d3232203d3e20313436383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:4e:74:e9:9d:0c:7f:c4:e3:ce:5c:b7:91:26:0f:d5:89:fe:
         64:0e:72:1e:bf:47:5f:b3:66:cc:b4:8d:a3:f7:6d:6d:c8:4e:
         90:76:c7:a3:1f:aa:15:bd:cc:04:24:65:fc:b1:42:8b:f7:1d:
         9a:13:02:cc:19:7b:11:ad:99:a2:bd:6d:54:c1:5a:ed:1e:29:
         8c:e0:c4:1d:4c:f4:7d:e9:c6:16:ae:f9:7b:21:d4:fc:6d:16:
         de:9f:87:01:7b:8b:a0:6c:ff:62:7c:ff:89:f3:01:76:90:38:
         65:5c:81:45:4b:8e:e2:cd:f0:30:54:3f:70:cb:84:57:17:e8:
         cc:95:c6:01:e4:b7:de:49:51:47:7a:29:f6:30:bf:1d:e7:bf:
         d2:0a:58:3f:07:b9:ea:3c:3b:6a:69:67:a4:a7:1b:17:89:16:
         b3:df:09:91:95:5a:15:8f:84:e7:36:d5:e8:6d:09:4e:ef:71:
         b0:2b:c8:eb:37:d8:ab:07:11:11:08:4b:53:f9:11:7f:ee:6b:
         8f:6e:5e:cc:ca:a9:07:e7:8e:2d:58:a7:82:82:be:aa:3c:1e:
         31:11:7b:83:ce:11:f3:2d:10:b2:a8:8e:f2:a1:ca:be:33:5e:
         93:99:a0:de:b3:cd:8d:5d:1b:11:8c:1e:d7:b0:88:c4:64:6c:
         ca:41:f7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:18 2026 by rpki-client