Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3231372e3139322e302f32322d3232203d3e20313436383137.roa
File:                     3130332e3231372e3139322e302f32322d3232203d3e20313436383137.roa (raw, json)
Hash identifier:          AZByW5I1tv4jerlZrriaXg3Jz/Hs0tlextCTh+2/8Eg=
Subject key identifier:   BF:D5:13:59:E0:FC:CD:56:A5:01:6C:7F:61:D5:9B:FD:EE:3E:18:92
Certificate issuer:       /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial:       1087C5F5A08227AF2A807407748F60E331286A7F
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3231372e3139322e302f32322d3232203d3e20313436383137.roa
Signing time:             Fri 08 May 2026 09:34:30 +0000
ROA not before:           Fri 08 May 2026 09:29:30 +0000
ROA not after:            Fri 07 May 2027 09:34:30 +0000
asID:                     146817
IP address blocks:        103.217.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:87:c5:f5:a0:82:27:af:2a:80:74:07:74:8f:60:e3:31:28:6a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
        Validity
            Not Before: May  8 09:29:30 2026 GMT
            Not After : May  7 09:34:30 2027 GMT
        Subject: CN=BFD51359E0FCCD56A5016C7F61D59BFDEE3E1892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e8:32:fe:c4:c6:56:cb:0e:6d:e5:38:48:ae:
                    35:ec:53:3b:17:37:46:7c:08:64:a9:c8:60:c4:9d:
                    2c:1d:94:78:4b:bb:54:5e:76:14:2c:0c:eb:8d:39:
                    66:7a:d8:7d:1b:c0:79:30:e8:ed:36:7d:83:15:8b:
                    d8:b5:b5:82:d9:14:64:f1:75:eb:7b:f0:2b:62:2b:
                    41:24:83:24:1c:9b:82:55:66:1c:44:05:e2:d5:76:
                    24:1c:dc:6a:71:8d:da:4d:f5:98:47:22:c6:9e:c2:
                    6a:55:67:5a:ea:a8:6d:62:cb:13:a7:28:7b:e5:36:
                    01:c6:21:dc:02:b9:f4:4f:fc:02:be:c2:df:c0:4a:
                    a1:20:90:b7:77:c7:b1:bb:99:ee:8b:bb:c7:a3:b6:
                    a8:16:95:02:5c:e7:39:10:99:62:b0:81:62:9b:e7:
                    f2:2d:24:7c:8b:11:53:93:64:8f:48:26:9d:3f:ea:
                    13:20:42:e4:d5:57:c4:73:9d:89:10:de:5e:8a:26:
                    80:3c:fa:70:06:3b:1a:00:4d:7e:3e:4b:5d:2e:1a:
                    60:f7:00:bb:9d:89:3c:6c:79:4a:72:d9:43:6c:03:
                    83:91:8f:3d:9a:8c:ef:40:41:d4:91:b1:7d:f4:46:
                    84:1a:ef:95:48:1c:b3:a3:03:72:94:e9:d4:5a:f5:
                    e6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D5:13:59:E0:FC:CD:56:A5:01:6C:7F:61:D5:9B:FD:EE:3E:18:92
            X509v3 Authority Key Identifier:
                keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3231372e3139322e302f32322d3232203d3e20313436383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.217.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:20:1b:6c:dc:3c:8c:4f:ec:ab:29:d0:79:c9:f7:bd:46:b4:
         5c:fd:98:58:0e:d2:0d:f2:de:91:1f:47:8a:81:f8:b2:1b:7f:
         0a:fd:86:19:5c:49:d2:ee:bf:b1:a1:af:72:e6:4c:64:be:e8:
         6f:0f:da:4b:d9:79:e0:1e:38:20:fa:79:ec:dc:61:9b:7d:fb:
         ae:cb:0c:f3:47:3c:61:7b:fe:cc:73:c7:10:18:62:ba:53:cb:
         f6:dc:b9:20:d8:ce:dd:0c:16:c7:9f:77:89:53:cc:46:3d:e1:
         81:02:b0:31:f3:bb:cf:66:75:10:5e:7e:82:95:4c:1c:f3:43:
         c1:1e:9b:15:06:56:86:e0:c1:48:b7:16:06:67:d0:28:d8:a0:
         f8:14:e9:d0:23:c5:7e:14:e0:c7:03:b5:fa:23:84:10:b9:7e:
         13:2b:6e:c1:e8:c7:64:2f:3c:37:cb:f4:06:53:5c:ed:b8:a0:
         cc:69:b8:ab:b5:2d:76:ce:8a:24:e6:64:b6:a0:e8:dc:0d:4f:
         49:22:74:04:af:d4:38:e5:09:82:55:e6:d8:af:68:7c:0d:45:
         bf:38:e7:4e:76:27:40:a5:b2:27:cc:67:15:65:3a:7c:b3:7b:
         5a:69:de:32:62:ae:7c:32:45:2c:7d:4d:69:1b:78:2a:a7:96:
         cd:08:86:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:17 2026 by rpki-client