Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3231372e3230342e302f32322d3232203d3e20313436383137.roa
File:                     3130332e3231372e3230342e302f32322d3232203d3e20313436383137.roa (raw, json)
Hash identifier:          FhQItNhPn//ymdRCPgRZ1qvnXutjnKf0GMRCYCx61M4=
Subject key identifier:   9B:8F:9A:24:FA:C8:67:E5:72:3B:56:10:86:AD:9D:C2:4A:E5:F6:BA
Certificate issuer:       /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial:       77935B848E584E8FAFB842CC5B54FE914CB29648
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3231372e3230342e302f32322d3232203d3e20313436383137.roa
Signing time:             Fri 08 May 2026 09:41:54 +0000
ROA not before:           Fri 08 May 2026 09:36:54 +0000
ROA not after:            Fri 07 May 2027 09:41:54 +0000
asID:                     146817
IP address blocks:        103.217.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:93:5b:84:8e:58:4e:8f:af:b8:42:cc:5b:54:fe:91:4c:b2:96:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
        Validity
            Not Before: May  8 09:36:54 2026 GMT
            Not After : May  7 09:41:54 2027 GMT
        Subject: CN=9B8F9A24FAC867E5723B561086AD9DC24AE5F6BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:9e:86:da:4f:b7:b0:87:b5:e8:9b:80:c3:e2:
                    c9:5b:5e:c5:39:68:5e:66:f3:ce:04:45:1a:aa:2c:
                    82:b3:d5:ff:f3:a7:ba:ca:19:10:eb:25:6e:23:f6:
                    13:07:01:f5:4a:8f:96:cc:cb:8d:76:bc:a7:c5:f1:
                    c8:31:72:2b:93:17:8c:e7:7e:12:51:92:b4:38:4b:
                    fc:4e:3f:0c:04:d9:94:a9:86:04:71:af:b0:58:18:
                    78:3b:3a:eb:ce:66:d1:34:36:42:9b:82:91:6e:3a:
                    63:fa:a0:c6:88:84:cf:06:a7:e6:6d:9d:de:ba:15:
                    6c:9e:fa:cc:d9:13:78:1a:13:93:18:b7:1f:8a:b2:
                    0f:c3:05:05:78:f2:73:8e:87:e2:ef:39:96:ba:14:
                    e2:48:ca:6e:30:85:61:76:11:85:22:8c:89:16:7c:
                    4e:21:3b:35:2d:4a:c3:8b:b6:8c:87:b0:b6:55:6a:
                    19:c1:80:0f:28:1c:e4:2d:a8:cf:1a:c9:a4:0c:6c:
                    eb:98:ef:f7:1f:53:b0:68:60:0c:68:32:32:d4:21:
                    c6:33:79:89:24:02:8c:f9:86:eb:20:f1:63:de:7a:
                    e7:b5:27:68:52:b5:35:26:da:3c:b8:da:9e:0b:f0:
                    ff:96:e8:e3:08:56:12:6c:ae:9a:7e:32:5b:8b:27:
                    f1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8F:9A:24:FA:C8:67:E5:72:3B:56:10:86:AD:9D:C2:4A:E5:F6:BA
            X509v3 Authority Key Identifier:
                keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3231372e3230342e302f32322d3232203d3e20313436383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.217.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:a3:82:fa:0e:b2:2e:15:ca:3f:c6:3a:2d:65:70:05:cd:e5:
         ce:43:9a:24:c0:e6:6c:46:26:83:34:d9:32:6b:84:65:f9:6f:
         2d:66:eb:9c:c4:10:d7:12:e5:40:4a:53:7f:0d:80:da:67:c8:
         4c:6c:0f:5a:e5:9b:22:2c:28:70:f5:0d:ed:7d:28:8e:db:03:
         17:d9:fc:79:4d:d7:e3:21:2a:9c:55:74:65:d3:51:f8:12:ab:
         a3:c2:3d:c0:fd:73:d6:5c:ed:20:cd:6f:c1:ef:11:2a:cd:4d:
         f8:2d:3d:b4:5b:d9:95:7b:fe:e5:79:db:0e:22:e1:46:3a:c7:
         e3:38:7f:17:7b:8c:f2:c1:16:d8:9d:c2:17:a5:99:fb:f1:04:
         75:5c:79:af:00:58:94:28:d7:f4:82:18:f7:e7:ac:95:25:30:
         93:89:d9:96:f0:a8:ce:e7:ed:99:e8:e2:e9:c2:d6:8c:11:7c:
         a3:de:70:b6:bf:f9:54:3d:2d:15:73:13:07:ba:35:1d:d7:f9:
         b7:8d:45:5c:d9:1d:71:72:ce:75:fd:4d:cd:50:e0:80:83:e8:
         7b:46:49:31:18:fc:f9:c6:08:16:87:0b:5c:c0:01:b2:f5:2d:
         df:fc:e3:d3:6d:f2:df:1a:c7:9a:ad:ff:11:21:0e:ba:ab:df:
         e6:2c:2b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:20 2026 by rpki-client