Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3132302e39312e302f32342d3234203d3e20313436383137.roa
File:                     3130332e3132302e39312e302f32342d3234203d3e20313436383137.roa (raw, json)
Hash identifier:          MJhDpIr1ED00J4JtQi5OxpfR/XKVPsJOIyU/vMqL5Nc=
Subject key identifier:   59:3A:25:1D:05:ED:49:90:C7:D6:19:E5:E7:6C:B5:0F:66:FE:9E:F2
Certificate issuer:       /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial:       156EF2B0B303530155967C3910FF4B74AE590A81
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3132302e39312e302f32342d3234203d3e20313436383137.roa
Signing time:             Fri 08 May 2026 09:41:54 +0000
ROA not before:           Fri 08 May 2026 09:36:54 +0000
ROA not after:            Fri 07 May 2027 09:41:54 +0000
asID:                     146817
IP address blocks:        103.120.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:6e:f2:b0:b3:03:53:01:55:96:7c:39:10:ff:4b:74:ae:59:0a:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
        Validity
            Not Before: May  8 09:36:54 2026 GMT
            Not After : May  7 09:41:54 2027 GMT
        Subject: CN=593A251D05ED4990C7D619E5E76CB50F66FE9EF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3d:62:a1:a1:6e:fb:ed:3a:0d:4e:28:5d:83:
                    64:ae:14:63:bd:4a:f7:b6:c6:c9:11:a2:d2:78:6b:
                    b6:01:f9:5a:e6:7a:08:7c:28:1c:f1:de:fc:9b:18:
                    e2:9b:97:ee:ce:97:55:45:e2:e0:c1:13:ad:67:c0:
                    ae:01:86:77:ee:92:01:fe:f6:82:13:bb:3d:a0:8c:
                    39:7f:00:ea:ac:b6:f1:37:1c:5f:f6:59:74:d2:f8:
                    3a:bd:28:cf:f7:6a:c4:2c:75:45:0e:37:d6:ca:a5:
                    f8:be:e0:a4:00:e7:87:e3:0c:bd:99:ef:30:e8:b4:
                    ea:f7:cf:7f:0a:c8:5b:21:0f:41:ea:3e:94:91:3c:
                    14:99:07:66:bd:b3:9d:95:ad:c7:cb:df:9d:71:4e:
                    e5:12:f2:46:30:01:3b:e1:c6:b0:58:f8:11:51:3e:
                    30:f7:ef:fb:99:91:9f:99:0f:ad:9c:60:23:3a:c6:
                    f1:56:b4:d6:84:54:1d:1a:ac:94:ab:cc:d2:6f:2b:
                    3e:c1:ae:19:80:1b:ff:61:44:f8:52:dd:88:06:78:
                    09:c6:51:45:5b:ca:8f:c9:f6:d2:8c:95:ec:8e:12:
                    30:f4:8a:e7:01:53:fd:42:3b:2d:36:8a:bb:3d:cf:
                    bc:3e:af:c4:58:02:aa:93:21:41:94:53:6f:16:53:
                    78:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:3A:25:1D:05:ED:49:90:C7:D6:19:E5:E7:6C:B5:0F:66:FE:9E:F2
            X509v3 Authority Key Identifier:
                keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3132302e39312e302f32342d3234203d3e20313436383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:6e:74:d9:e8:b7:3b:3b:8c:8c:54:d6:82:fb:db:04:6e:c1:
         87:8f:87:34:ff:11:07:70:c2:d7:b4:c4:24:ec:62:47:6c:96:
         3a:43:7b:54:f2:c8:05:51:c6:bb:b9:7f:d1:40:92:71:40:04:
         41:51:e6:96:dd:41:62:62:ee:29:4a:2e:d5:07:c8:3e:43:cf:
         7c:26:da:e3:dd:1f:60:2c:5b:13:96:64:0d:b8:9a:ca:cb:8a:
         fe:1b:e4:76:14:32:45:4e:ca:c6:f3:9c:ba:a9:f3:d5:04:5c:
         f7:0a:29:ee:7c:4f:1a:7e:f8:84:be:b4:36:d5:3c:79:40:63:
         b7:7b:fb:fe:ef:d5:7b:50:4a:9d:89:d5:be:5f:20:00:c3:c1:
         0e:22:f5:23:0b:44:51:74:2d:0d:fe:33:65:67:53:e2:fe:37:
         1a:5d:b5:d5:28:7b:8d:ab:5b:5d:bf:7c:1e:fb:f1:09:bf:41:
         af:e5:8b:2d:5c:cd:29:39:0e:12:f4:fc:2b:47:1f:d1:95:09:
         cc:fd:10:20:5b:43:e7:1d:fb:37:a2:21:65:de:f0:32:0c:93:
         a9:66:ee:1b:c3:72:e9:b4:84:bb:35:c6:4d:dc:ba:69:31:a6:
         14:28:25:6c:ac:1b:0f:13:29:05:29:13:03:44:c4:ad:47:dd:
         05:a7:62:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:23 2026 by rpki-client