Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3231372e3139362e302f32322d3232203d3e20313436383137.roa
File:                     3130332e3231372e3139362e302f32322d3232203d3e20313436383137.roa (raw, json)
Hash identifier:          SZvUh+BewLJax6UGm61jMBZ9UykG9jwlDejj+VMu5gs=
Subject key identifier:   4B:F6:BB:B9:26:60:EA:9C:3A:15:1A:BA:FB:17:A2:77:D4:91:DC:68
Certificate issuer:       /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial:       39D81727BDBCEB2E9C0F6D54F878D51477AEA83A
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3231372e3139362e302f32322d3232203d3e20313436383137.roa
Signing time:             Fri 08 May 2026 09:47:16 +0000
ROA not before:           Fri 08 May 2026 09:42:16 +0000
ROA not after:            Fri 07 May 2027 09:47:16 +0000
asID:                     146817
IP address blocks:        103.217.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d8:17:27:bd:bc:eb:2e:9c:0f:6d:54:f8:78:d5:14:77:ae:a8:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
        Validity
            Not Before: May  8 09:42:16 2026 GMT
            Not After : May  7 09:47:16 2027 GMT
        Subject: CN=4BF6BBB92660EA9C3A151ABAFB17A277D491DC68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ff:61:6c:33:f2:c4:4d:8f:0d:f8:87:c0:65:
                    ee:1b:67:40:d2:08:73:53:4f:c6:d4:83:dc:99:55:
                    af:d1:7c:de:37:18:2a:ef:f1:70:ca:fa:45:4c:72:
                    17:ab:83:7b:e3:17:f8:df:04:3f:39:20:5c:14:0d:
                    ac:76:3e:28:e7:41:8a:3b:65:33:3d:cf:ed:6b:70:
                    8a:48:a3:b6:73:d8:08:bf:e7:24:b2:48:98:a7:83:
                    fb:fe:d3:37:b0:25:67:50:b0:68:2e:8e:2c:e9:53:
                    40:c0:a5:08:3d:4b:cc:7d:f3:f7:19:41:67:0b:e0:
                    5b:c4:b9:dd:e1:cf:c4:4d:98:27:3c:50:e3:9b:6d:
                    a1:c1:4e:ff:7b:18:4a:2d:ec:a9:fd:d3:4f:b0:70:
                    d3:6a:50:f7:40:cd:5f:84:72:0a:8f:b9:45:92:ae:
                    7a:e9:4a:ae:2e:31:8c:aa:65:20:30:c9:f1:37:14:
                    63:73:d7:35:f5:e0:79:44:e3:02:0b:32:ef:7a:2d:
                    64:af:f2:0d:52:19:92:24:de:e3:7c:6e:aa:55:c7:
                    07:46:a5:20:b0:28:77:43:01:fd:ce:19:0d:3f:13:
                    d3:44:9f:60:f7:13:a5:f3:f8:bf:43:7f:6c:0d:97:
                    b5:03:78:a0:71:74:26:f3:19:73:d8:ea:f7:bb:ae:
                    1a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F6:BB:B9:26:60:EA:9C:3A:15:1A:BA:FB:17:A2:77:D4:91:DC:68
            X509v3 Authority Key Identifier:
                keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3231372e3139362e302f32322d3232203d3e20313436383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.217.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:d8:de:51:5f:f0:9a:76:4f:ac:ff:a7:64:a0:d9:61:9c:80:
         3d:21:d1:25:fc:cd:21:bb:4b:62:2e:81:70:b5:28:39:8d:54:
         da:5d:58:cf:05:2a:ac:6f:80:e3:4c:92:fe:20:d1:18:a6:97:
         46:a4:1d:9f:6e:86:db:48:98:74:a8:40:7a:28:5e:08:b1:2a:
         34:ed:9f:11:ab:6b:a3:09:26:77:0c:90:3b:a9:1f:20:95:28:
         7d:a8:68:41:28:c3:1a:ce:62:ed:8d:2e:14:c9:e2:0a:39:05:
         d8:f5:c9:25:d9:59:9a:f7:00:33:1f:f7:f6:3c:1a:ad:b8:52:
         1e:c7:b0:87:3a:af:c6:0d:27:c6:92:65:bd:ab:fa:e2:bd:15:
         0a:f5:0a:05:4e:25:28:d6:81:6b:20:21:75:ba:66:41:94:e7:
         b0:df:04:91:32:35:2f:e3:c6:56:5d:f2:58:cd:b7:1c:59:9c:
         88:55:2c:04:34:50:c3:bd:8e:d8:74:33:b0:c9:86:68:98:4d:
         90:fd:7c:af:b0:7a:12:f0:63:80:77:99:11:b5:20:92:de:0e:
         88:74:18:28:04:8b:ad:8b:c5:1f:c1:ad:53:aa:d7:fc:41:c0:
         5d:da:79:8a:5b:fb:f8:fe:9e:b2:6f:10:26:86:49:9c:57:7a:
         b4:fa:82:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:14 2026 by rpki-client