Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3138342e34372e302f32342d3234203d3e20313436383137.roa
File:                     3130332e3138342e34372e302f32342d3234203d3e20313436383137.roa (raw, json)
Hash identifier:          9j+8tLOSl3JHJPysFfvTppfqMQIQiWXttHMP1/F4QLc=
Subject key identifier:   A4:7A:22:96:7A:3E:B4:56:87:FD:7C:26:24:98:7A:AF:E2:EB:0A:3F
Certificate issuer:       /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial:       442DB2AF7E0E00F01FE322628072B53EB6C5582D
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3138342e34372e302f32342d3234203d3e20313436383137.roa
Signing time:             Fri 08 May 2026 09:41:55 +0000
ROA not before:           Fri 08 May 2026 09:36:55 +0000
ROA not after:            Fri 07 May 2027 09:41:55 +0000
asID:                     146817
IP address blocks:        103.184.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:2d:b2:af:7e:0e:00:f0:1f:e3:22:62:80:72:b5:3e:b6:c5:58:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
        Validity
            Not Before: May  8 09:36:55 2026 GMT
            Not After : May  7 09:41:55 2027 GMT
        Subject: CN=A47A22967A3EB45687FD7C2624987AAFE2EB0A3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:25:b3:b5:c3:7e:6e:78:1c:3d:96:85:b2:a8:
                    0f:ca:09:a5:d3:02:33:f9:55:11:c3:2a:7c:4a:e6:
                    82:f9:a5:7d:4b:0e:5b:6c:9e:84:a8:80:8b:b6:8a:
                    a4:d4:92:bc:32:b7:67:cc:46:c3:5f:2f:a9:06:c2:
                    fd:40:37:c3:f4:b4:2c:7a:fc:7c:9e:d9:91:20:7a:
                    fc:bf:67:0a:fe:4e:8e:2b:bb:77:77:3e:26:01:c6:
                    11:23:fc:aa:16:06:2c:79:5f:81:26:2d:67:a4:75:
                    93:b5:6a:d1:52:92:1e:73:73:42:42:24:74:82:4b:
                    b9:d6:64:0b:c2:f8:73:b6:12:b0:fb:8a:3c:57:34:
                    49:6a:f2:98:c1:2e:79:68:bd:6f:cf:73:9c:ab:02:
                    8a:98:ce:cf:3a:7c:30:a4:ae:71:3c:67:a9:48:d5:
                    f3:72:3f:90:4c:2d:e8:73:a1:3f:36:cf:78:d3:53:
                    8b:d4:be:6f:98:af:d3:25:86:75:9a:74:6d:d7:79:
                    d0:75:93:7c:a2:ff:43:38:77:dc:be:01:a2:08:e1:
                    f3:59:54:a0:5d:82:15:43:83:68:59:4d:2a:01:65:
                    62:66:1c:30:dc:4a:2f:b4:28:ed:41:14:6e:7b:c4:
                    74:c9:59:e1:27:4e:9f:61:c1:19:49:fa:23:1e:3f:
                    31:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7A:22:96:7A:3E:B4:56:87:FD:7C:26:24:98:7A:AF:E2:EB:0A:3F
            X509v3 Authority Key Identifier:
                keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3138342e34372e302f32342d3234203d3e20313436383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:fe:4d:52:e8:90:33:64:68:b0:8e:38:3a:2b:03:01:81:fc:
         11:3e:33:60:3c:fe:62:a4:69:0d:2c:c2:89:9f:b9:23:5a:de:
         fb:26:73:5d:f9:5a:b7:7c:56:d2:30:48:57:87:d5:a1:ac:c9:
         56:71:fa:15:2a:ff:56:d9:4d:95:c7:05:31:24:cc:94:10:c9:
         13:ea:bc:36:ac:3a:1b:01:fb:e8:20:03:a6:2d:7d:b4:49:e0:
         3a:81:89:51:22:30:c9:f6:9b:7d:64:d5:c9:a8:71:77:d5:ff:
         b6:32:d8:f9:fd:b5:77:e0:e3:b5:6c:d4:fe:2f:76:db:a6:34:
         cc:ad:af:a7:c4:db:d0:68:2c:7c:38:2a:77:09:1d:af:e0:6d:
         f1:8a:49:da:7c:11:18:51:83:d8:5c:e5:56:ab:59:84:b0:4a:
         28:33:b7:81:da:34:90:ac:7c:e2:7f:08:2b:88:51:b8:85:7b:
         e9:f4:f8:62:71:00:4b:70:f0:64:d5:7e:09:4f:ad:61:1c:21:
         04:c3:af:49:76:ef:59:00:4d:e3:5c:30:97:4e:06:27:1b:92:
         c4:22:13:a7:6d:08:e2:93:1e:80:e5:73:b7:31:8c:14:53:e6:
         07:f3:4e:ac:d7:aa:8a:c6:88:32:4b:16:ea:cb:ff:78:c6:c6:
         a9:29:72:01
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIURC2yr34OAPAf4yJigHK1PrbFWC0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1
RUJFMDM2MjAeFw0yNjA1MDgwOTM2NTVaFw0yNzA1MDcwOTQxNTVaMDMxMTAvBgNV
BAMTKEE0N0EyMjk2N0EzRUI0NTY4N0ZEN0MyNjI0OTg3QUFGRTJFQjBBM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaJbO1w35ueBw9loWyqA/KCaXT
AjP5VRHDKnxK5oL5pX1LDltsnoSogIu2iqTUkrwyt2fMRsNfL6kGwv1AN8P0tCx6
/Hye2ZEgevy/Zwr+To4ru3d3PiYBxhEj/KoWBix5X4EmLWekdZO1atFSkh5zc0JC
JHSCS7nWZAvC+HO2ErD7ijxXNElq8pjBLnlovW/Pc5yrAoqYzs86fDCkrnE8Z6lI
1fNyP5BMLehzoT82z3jTU4vUvm+Yr9MlhnWadG3XedB1k3yi/0M4d9y+AaII4fNZ
VKBdghVDg2hZTSoBZWJmHDDcSi+0KO1BFG57xHTJWeEnTp9hwRlJ+iMePzG5AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUpHoilno+tFaH/XwmJJh6r+LrCj8wHwYDVR0j
BBgwFoAUgl5cc7dVI2Pg+SJhrcY3WF6+A2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NTA1ODA3Mjk0MzkxOTExNy8wLzgyNUU1QzczQjc1NTIzNjNFMEY5MjI2MUFEQzYz
NzU4NUVCRTAzNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1RUJFMDM2Mi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMDUwNTgwNzI5NDM5MTkxMTcvMC8zMTMwMzMyZTMx
MzgzNDJlMzQzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM4MzEzNy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGe4LzANBgkqhkiG9w0BAQsFAAOCAQEAkP5NUuiQM2RosI44OisD
AYH8ET4zYDz+YqRpDSzCiZ+5I1re+yZzXflat3xW0jBIV4fVoazJVnH6FSr/VtlN
lccFMSTMlBDJE+q8Nqw6GwH76CADpi19tEngOoGJUSIwyfabfWTVyahxd9X/tjLY
+f21d+DjtWzU/i9226Y0zK2vp8Tb0GgsfDgqdwkdr+Bt8YpJ2nwRGFGD2FzlVqtZ
hLBKKDO3gdo0kKx84n8IK4hRuIV76fT4YnEAS3DwZNV+CU+tYRwhBMOvSXbvWQBN
41wwl04GJxuSxCITp20I4pMegOVztzGMFFPmB/NOrNeqisaIMksW6sv/eMbGqSly
AQ==
-----END CERTIFICATE-----
Generated at Wed May 13 20:55:19 2026 by rpki-client