Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3231372e3230302e302f32322d3232203d3e20313436383137.roa
File:                     3130332e3231372e3230302e302f32322d3232203d3e20313436383137.roa (raw, json)
Hash identifier:          LYVg3O9KDmIg3zOnt8qYrnfYspk0FrhlhAAErV1tRHs=
Subject key identifier:   93:75:08:ED:5C:F1:59:19:1A:9A:F0:43:45:58:EA:5C:4F:DF:6B:8F
Certificate issuer:       /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial:       58633F0BD5526E7A8EE5A2C87F0845D8DAC45E28
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3231372e3230302e302f32322d3232203d3e20313436383137.roa
Signing time:             Fri 08 May 2026 09:34:30 +0000
ROA not before:           Fri 08 May 2026 09:29:30 +0000
ROA not after:            Fri 07 May 2027 09:34:30 +0000
asID:                     146817
IP address blocks:        103.217.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:63:3f:0b:d5:52:6e:7a:8e:e5:a2:c8:7f:08:45:d8:da:c4:5e:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
        Validity
            Not Before: May  8 09:29:30 2026 GMT
            Not After : May  7 09:34:30 2027 GMT
        Subject: CN=937508ED5CF159191A9AF0434558EA5C4FDF6B8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:46:01:89:b4:78:7b:69:16:f4:8b:b6:a3:f2:
                    32:b0:75:22:b4:74:7e:94:5f:6c:14:ac:90:5d:24:
                    14:6b:cb:9a:11:db:35:69:3b:03:cc:4c:a8:03:4a:
                    ee:ba:6d:04:ab:30:06:09:52:a7:1d:96:d0:41:bf:
                    77:d4:48:3e:cc:00:d0:71:81:7b:52:87:df:8d:91:
                    ed:81:81:9f:32:08:f0:9f:9a:93:c0:11:9f:b1:46:
                    00:c7:1f:87:ea:73:a0:11:97:a8:88:3c:90:29:f4:
                    db:4a:65:f3:43:a0:07:64:49:4c:f8:64:29:e1:05:
                    15:89:90:ad:57:e2:26:4e:7f:43:00:85:6b:a4:31:
                    66:ee:40:10:d0:c6:76:8d:25:32:0b:4f:9b:a0:d3:
                    9b:a3:3e:37:ec:58:26:28:c5:32:85:4e:1f:32:41:
                    4b:20:e2:13:dd:0b:08:56:05:ab:52:3d:b0:e5:51:
                    67:3c:21:90:0c:a0:bf:e0:5b:1f:11:ec:31:24:64:
                    a4:7c:ca:a6:da:c9:f6:4b:7b:37:ea:64:af:38:92:
                    0c:b8:ec:ee:ad:15:23:e1:8c:0d:f1:2e:c4:a5:0a:
                    60:98:71:03:da:46:87:91:16:89:55:a0:c1:bd:28:
                    89:50:be:35:2e:6a:1d:14:fe:e0:14:58:0f:5b:32:
                    59:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:75:08:ED:5C:F1:59:19:1A:9A:F0:43:45:58:EA:5C:4F:DF:6B:8F
            X509v3 Authority Key Identifier:
                keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3231372e3230302e302f32322d3232203d3e20313436383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.217.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:38:e3:6e:76:85:53:90:ce:1b:3d:2d:01:80:08:08:cd:dc:
         c5:21:5f:11:0f:58:63:4a:7f:31:20:d7:ac:f0:76:fb:b4:77:
         56:ac:63:20:19:e8:d2:61:1a:7d:c1:4a:46:57:d7:a5:fd:44:
         83:13:be:8d:ac:f2:78:48:1f:7f:ae:d6:2e:af:43:b6:ab:3b:
         2a:0a:d8:e3:0b:8f:f3:ea:1c:a8:d2:6a:de:da:44:a9:66:c6:
         74:25:07:d8:b4:73:00:f4:41:8b:18:c6:ce:d9:30:86:3c:a5:
         fa:88:d7:f0:4f:e1:d1:6b:46:50:96:56:56:84:23:a6:6c:11:
         a5:5f:5f:dc:2b:4b:c8:59:1f:a3:b4:bf:31:3c:b8:22:26:43:
         17:5c:a0:52:d5:07:0e:c0:9c:df:47:0d:12:b4:06:b0:e3:c3:
         d6:a8:41:84:50:b1:16:7f:aa:bc:11:37:b7:06:07:8e:8e:13:
         99:d5:02:d4:6b:0c:a5:ec:6b:74:da:e0:75:43:64:fe:60:fa:
         94:42:24:0f:f6:6c:51:78:ea:f1:fa:96:0f:95:11:1f:68:80:
         40:56:1e:77:02:75:fb:97:d5:35:de:2d:c9:01:cd:de:b6:4f:
         6b:38:f3:9d:54:74:7e:85:b2:74:01:6d:b8:61:c0:4b:b2:b4:
         3d:d9:37:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:22 2026 by rpki-client