Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3132302e38392e302f32342d3234203d3e20313436383137.roa
File:                     3130332e3132302e38392e302f32342d3234203d3e20313436383137.roa (raw, json)
Hash identifier:          faYHbH2+3j9/Ony37KmQvkIJuhAPvtebefAllPPbfTA=
Subject key identifier:   E1:DD:D4:82:AB:80:C2:83:FF:64:EA:02:EF:78:B0:49:E0:DC:0A:DE
Certificate issuer:       /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial:       3BAC34ED02D63DC857771B171A4D03AC30C229C0
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3132302e38392e302f32342d3234203d3e20313436383137.roa
Signing time:             Fri 08 May 2026 09:41:54 +0000
ROA not before:           Fri 08 May 2026 09:36:54 +0000
ROA not after:            Fri 07 May 2027 09:41:54 +0000
asID:                     146817
IP address blocks:        103.120.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ac:34:ed:02:d6:3d:c8:57:77:1b:17:1a:4d:03:ac:30:c2:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
        Validity
            Not Before: May  8 09:36:54 2026 GMT
            Not After : May  7 09:41:54 2027 GMT
        Subject: CN=E1DDD482AB80C283FF64EA02EF78B049E0DC0ADE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c7:f7:a7:2d:5a:3d:22:3e:04:6a:67:46:63:
                    04:a6:30:85:60:f7:d3:ee:72:4e:24:4c:11:48:35:
                    2f:00:c6:41:b4:40:cb:6e:a8:10:f2:38:2d:5b:eb:
                    da:0c:96:b4:cd:47:b5:4e:76:01:f2:e6:25:87:fa:
                    70:61:d3:fe:5b:83:ac:d3:b7:11:ab:bd:40:2f:f2:
                    95:40:f8:95:0c:74:1d:1a:40:ee:f8:db:c0:92:25:
                    ba:38:ff:e2:03:ed:f9:30:db:92:b4:dc:c7:ab:c0:
                    05:59:73:1e:61:10:3a:d7:f9:71:d4:0f:f8:89:09:
                    06:1c:66:44:b4:3f:5f:45:db:41:aa:25:66:5b:fd:
                    09:0f:d1:dd:ea:d0:15:cf:8f:9e:0d:3d:bd:fa:21:
                    7f:53:c3:23:02:63:48:ee:a3:68:95:b2:a3:ab:fb:
                    97:e8:ca:13:96:d2:f0:9c:1e:84:fa:c2:04:f7:e7:
                    6d:d9:c2:40:2c:c4:41:98:05:1f:77:c0:b4:96:46:
                    00:24:59:a4:39:40:66:99:aa:a5:13:65:2e:37:57:
                    6d:e4:68:5b:bd:d2:12:87:fd:30:ea:9d:3c:10:94:
                    5c:0d:42:c0:d5:b3:de:ee:00:56:2c:67:2f:00:13:
                    e6:a5:ea:db:dd:fa:fb:ec:38:92:f8:0e:b9:69:44:
                    6e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DD:D4:82:AB:80:C2:83:FF:64:EA:02:EF:78:B0:49:E0:DC:0A:DE
            X509v3 Authority Key Identifier:
                keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3132302e38392e302f32342d3234203d3e20313436383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e4:4a:e4:ee:66:2b:25:c0:71:32:21:ae:49:8b:62:58:ea:6a:
         71:72:c0:46:fd:5f:bb:94:03:2a:60:32:82:a4:37:e5:db:74:
         b1:38:05:0b:5d:7e:a7:2e:30:17:ef:d4:34:c6:43:39:98:43:
         e1:8d:0f:13:d1:81:72:9e:aa:96:57:c0:3e:c4:76:d6:77:c6:
         81:ea:1e:2a:e4:3b:0f:d5:47:df:93:38:b9:f2:6b:a3:fd:e4:
         fe:9d:26:7d:4a:bb:20:50:a2:42:6a:26:bb:3c:71:2b:9f:44:
         3e:94:0f:48:1a:87:2e:05:25:e6:db:f5:f0:db:c9:19:52:f5:
         97:18:41:22:cd:49:c3:fd:dd:ee:f3:1b:9e:ec:ad:94:94:be:
         92:ca:55:f9:3e:db:65:03:b3:15:5b:23:33:b1:32:1f:e5:3d:
         dd:0e:93:50:cb:bb:18:a5:6b:80:58:0e:4a:0b:4a:e0:e6:db:
         2f:eb:e3:b4:eb:1e:7e:57:90:c2:b2:29:5a:34:5d:d7:2e:b9:
         62:6a:8a:b6:4d:4c:7b:c6:93:96:45:71:8b:b6:ef:57:f6:39:
         23:f5:b7:1f:a2:77:c2:e1:17:ca:51:6d:82:3e:b9:31:e9:76:
         6b:87:ce:04:d5:7c:c1:7e:f1:ae:5b:aa:fb:23:ec:e5:78:dd:
         da:b7:f4:ce
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUO6w07QLWPchXdxsXGk0DrDDCKcAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1
RUJFMDM2MjAeFw0yNjA1MDgwOTM2NTRaFw0yNzA1MDcwOTQxNTRaMDMxMTAvBgNV
BAMTKEUxRERENDgyQUI4MEMyODNGRjY0RUEwMkVGNzhCMDQ5RTBEQzBBREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClx/enLVo9Ij4EamdGYwSmMIVg
99Puck4kTBFINS8AxkG0QMtuqBDyOC1b69oMlrTNR7VOdgHy5iWH+nBh0/5bg6zT
txGrvUAv8pVA+JUMdB0aQO7428CSJbo4/+ID7fkw25K03MerwAVZcx5hEDrX+XHU
D/iJCQYcZkS0P19F20GqJWZb/QkP0d3q0BXPj54NPb36IX9TwyMCY0juo2iVsqOr
+5foyhOW0vCcHoT6wgT3523ZwkAsxEGYBR93wLSWRgAkWaQ5QGaZqqUTZS43V23k
aFu90hKH/TDqnTwQlFwNQsDVs97uAFYsZy8AE+al6tvd+vvsOJL4DrlpRG6vAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQU4d3UgquAwoP/ZOoC73iwSeDcCt4wHwYDVR0j
BBgwFoAUgl5cc7dVI2Pg+SJhrcY3WF6+A2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NTA1ODA3Mjk0MzkxOTExNy8wLzgyNUU1QzczQjc1NTIzNjNFMEY5MjI2MUFEQzYz
NzU4NUVCRTAzNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1RUJFMDM2Mi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMDUwNTgwNzI5NDM5MTkxMTcvMC8zMTMwMzMyZTMx
MzIzMDJlMzgzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM4MzEzNy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGd4WTANBgkqhkiG9w0BAQsFAAOCAQEA5Erk7mYrJcBxMiGuSYti
WOpqcXLARv1fu5QDKmAygqQ35dt0sTgFC11+py4wF+/UNMZDOZhD4Y0PE9GBcp6q
llfAPsR21nfGgeoeKuQ7D9VH35M4ufJro/3k/p0mfUq7IFCiQmomuzxxK59EPpQP
SBqHLgUl5tv18NvJGVL1lxhBIs1Jw/3d7vMbnuytlJS+kspV+T7bZQOzFVsjM7Ey
H+U93Q6TUMu7GKVrgFgOSgtK4ObbL+vjtOsefleQwrIpWjRd1y65YmqKtk1Me8aT
lkVxi7bvV/Y5I/W3H6J3wuEXylFtgj65Mel2a4fOBNV8wX7xrluq+yPs5Xjd2rf0
zg==
-----END CERTIFICATE-----
Generated at Wed May 13 20:55:19 2026 by rpki-client