Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3138342e34362e302f32342d3234203d3e20313436383137.roa
File:                     3130332e3138342e34362e302f32342d3234203d3e20313436383137.roa (raw, json)
Hash identifier:          lksEDfTBLhTki/Ep3H+dy7jbsWT52psiivn/d38PdDs=
Subject key identifier:   57:26:49:C7:EA:1F:A4:16:CF:45:26:0D:4D:1C:6A:A7:F6:3F:A7:C2
Certificate issuer:       /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial:       28CC9297FD10666C5112F790CC90EC320DF28637
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3138342e34362e302f32342d3234203d3e20313436383137.roa
Signing time:             Fri 08 May 2026 09:41:55 +0000
ROA not before:           Fri 08 May 2026 09:36:55 +0000
ROA not after:            Fri 07 May 2027 09:41:55 +0000
asID:                     146817
IP address blocks:        103.184.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:cc:92:97:fd:10:66:6c:51:12:f7:90:cc:90:ec:32:0d:f2:86:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
        Validity
            Not Before: May  8 09:36:55 2026 GMT
            Not After : May  7 09:41:55 2027 GMT
        Subject: CN=572649C7EA1FA416CF45260D4D1C6AA7F63FA7C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1c:c8:06:37:8e:8c:c1:82:c7:d3:1c:07:90:
                    1f:ba:9a:06:d8:46:a2:8a:7b:ae:41:06:1a:f1:7d:
                    1c:71:d7:b2:75:20:08:a4:68:41:b1:1c:2e:c3:a4:
                    33:73:1e:8a:c5:d6:b5:d3:68:ac:74:58:64:94:6c:
                    7e:ea:c3:57:9b:9a:cd:d6:06:e1:f3:00:0f:a7:ed:
                    e5:b0:cd:35:04:f4:cd:24:91:41:a1:00:15:20:7a:
                    12:50:5d:e5:6f:6b:36:b1:1e:88:2c:01:cc:95:99:
                    49:7f:b6:f3:55:ee:c6:2d:af:20:1e:3f:55:f2:ac:
                    fe:ee:eb:6e:f9:20:01:58:52:21:e1:9c:d7:3a:30:
                    33:4c:bd:23:0c:d0:ce:72:9c:f8:45:80:41:1d:f8:
                    3e:4f:83:ad:a9:45:e0:a2:98:fe:ac:b7:e9:f5:3c:
                    aa:26:a4:63:84:1a:cd:d9:11:78:a8:d7:9f:9d:70:
                    2c:51:39:7e:41:46:a3:bc:e8:01:55:80:e1:59:60:
                    35:12:9d:b0:36:eb:1c:03:86:14:12:2e:71:e7:11:
                    1a:77:07:45:fd:f2:ca:1a:f9:24:ee:c2:1c:a0:46:
                    29:ab:9b:18:d0:df:ad:e5:19:a3:76:ac:a5:2f:d2:
                    39:a5:bb:72:40:e6:93:88:0b:1b:e1:51:81:ff:3f:
                    73:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:26:49:C7:EA:1F:A4:16:CF:45:26:0D:4D:1C:6A:A7:F6:3F:A7:C2
            X509v3 Authority Key Identifier:
                keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3138342e34362e302f32342d3234203d3e20313436383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:67:ba:42:b2:6c:3d:0c:a5:df:68:dd:cc:7c:23:dc:29:4d:
         e7:74:26:73:f8:d1:e5:d3:fe:0b:a9:41:cc:3c:b8:79:4b:60:
         e6:c1:e5:be:5f:1a:ce:4b:7a:9c:1f:42:76:45:51:20:13:53:
         1e:61:97:14:ee:7d:6c:44:7d:f1:e1:83:4b:c2:69:ea:b1:eb:
         0f:7f:30:b5:eb:6d:e2:dd:25:f9:79:1b:89:6d:5d:f0:98:bb:
         87:f9:42:d6:6f:6f:85:46:7f:d3:d0:48:86:af:79:05:d9:95:
         09:16:bc:59:25:4f:1f:75:e1:78:41:dd:71:e6:31:5c:93:f6:
         5f:47:8d:b8:72:3e:ba:e4:d4:23:c6:46:9e:5e:d8:7c:56:b3:
         4f:00:56:09:2f:1e:ad:75:c4:cd:5b:82:52:51:8d:93:23:86:
         ca:22:81:57:8e:fe:83:6b:b2:1b:4e:82:65:be:a1:b6:04:23:
         1c:d4:a9:02:a3:79:60:7e:86:61:3b:9c:0e:c2:06:82:45:83:
         3c:96:1a:e6:19:63:02:4e:f3:54:72:b8:1c:66:ea:30:8b:34:
         91:99:24:1c:19:e4:e8:1a:b1:53:fd:53:dd:69:4b:55:ac:98:
         b2:d5:86:0a:22:b6:aa:d5:6a:99:5c:cb:7d:a8:5e:fe:86:51:
         ec:0f:3f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:17 2026 by rpki-client