Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e33382e37362e302f32342d3234203d3e20313436383137.roa
File:                     3130332e33382e37362e302f32342d3234203d3e20313436383137.roa (raw, json)
Hash identifier:          YKs6uHdV5Trcj9PUnRvHF0bjyYk2WJXEVS4sjHEjpFI=
Subject key identifier:   4F:F9:1A:A0:9E:A5:19:6F:5E:17:D7:63:E1:C4:80:9A:95:98:FC:28
Certificate issuer:       /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial:       301A6F20F85B927623E01DDFF840743742FF4F40
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e33382e37362e302f32342d3234203d3e20313436383137.roa
Signing time:             Fri 08 May 2026 09:47:15 +0000
ROA not before:           Fri 08 May 2026 09:42:15 +0000
ROA not after:            Fri 07 May 2027 09:47:15 +0000
asID:                     146817
IP address blocks:        103.38.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:1a:6f:20:f8:5b:92:76:23:e0:1d:df:f8:40:74:37:42:ff:4f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
        Validity
            Not Before: May  8 09:42:15 2026 GMT
            Not After : May  7 09:47:15 2027 GMT
        Subject: CN=4FF91AA09EA5196F5E17D763E1C4809A9598FC28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f6:bf:81:54:79:3a:f0:81:f0:c9:f3:4f:ff:
                    88:61:9b:18:f5:05:da:4f:fc:87:fc:ed:f5:6a:63:
                    1f:88:15:8d:11:0a:71:82:61:ab:4e:37:6a:0a:e4:
                    bf:cb:c4:46:0f:48:e1:c8:7b:4a:c2:78:ed:d7:32:
                    84:a0:f5:99:50:c5:ae:28:cc:11:82:1b:c7:46:4e:
                    19:ff:69:6d:92:eb:3d:41:92:d0:23:37:cf:34:e4:
                    2c:c5:84:0b:9f:c9:b1:fb:1d:27:3e:6a:72:35:3b:
                    44:87:ae:87:cd:c2:70:5f:50:42:ef:7f:4e:9e:e8:
                    86:ad:b3:65:fc:f7:e5:3d:ec:0f:33:ab:f4:fd:0b:
                    4c:e7:1f:3e:89:ad:79:c8:a4:90:f1:d0:e0:ba:58:
                    ac:9f:eb:92:40:d2:93:d5:67:4f:1f:0b:f7:6a:fd:
                    7b:ba:e4:f2:ef:fd:eb:57:ce:89:b3:30:f3:7f:a2:
                    b7:6f:88:f9:c8:cc:76:01:53:83:53:a9:5c:2f:86:
                    c3:a0:13:65:44:63:a1:9d:ea:42:45:cd:68:7f:de:
                    d7:47:72:78:8a:b6:e9:fa:00:94:93:90:a2:0c:61:
                    6d:a9:17:05:fd:62:96:00:90:16:db:cd:0c:de:9c:
                    33:f4:48:d0:c1:2e:fe:b0:6f:2f:08:86:9f:5b:34:
                    48:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F9:1A:A0:9E:A5:19:6F:5E:17:D7:63:E1:C4:80:9A:95:98:FC:28
            X509v3 Authority Key Identifier:
                keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e33382e37362e302f32342d3234203d3e20313436383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.38.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:bc:33:ae:00:24:3b:63:cd:37:20:59:29:27:37:a0:60:42:
         01:b7:b7:ac:92:31:26:51:35:de:fb:ed:f0:21:f2:5c:5b:64:
         e8:e9:a0:44:6d:3f:93:c2:f0:13:d2:a3:83:7d:c7:e2:eb:61:
         32:c4:9d:da:a5:53:f4:22:b3:76:27:70:71:39:47:b9:26:84:
         30:36:fb:11:49:0b:f0:c6:24:bf:f2:f3:63:61:ba:0f:17:ac:
         17:56:39:c6:e0:f4:4f:33:1a:21:52:b1:04:79:78:62:aa:3d:
         c4:08:dd:f1:dc:73:05:64:a5:e3:36:eb:c2:b0:84:ef:e4:db:
         e4:57:94:04:1c:da:53:77:bc:bf:2a:f4:e6:24:c8:e6:1d:51:
         d5:b1:4c:6b:e2:ce:20:3b:6e:dc:13:b5:0b:5e:bd:2e:a5:7e:
         ae:d4:ad:5a:6d:f9:b8:01:48:bf:8c:7b:84:af:3f:65:10:24:
         fc:6e:6f:b9:a7:e1:84:11:e4:e9:36:f4:65:e7:9e:43:2b:2f:
         52:fd:5f:3c:49:02:2d:80:70:ca:c2:d8:45:56:52:91:3e:27:
         68:4b:23:8b:bd:4b:d0:48:e7:f1:5a:3c:e8:8c:13:d3:8f:33:
         0b:8e:18:b5:99:d1:c4:2d:ad:d7:9a:15:d7:4f:45:a7:4d:3e:
         42:11:17:0a
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUMBpvIPhbknYj4B3f+EB0N0L/T0AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1
RUJFMDM2MjAeFw0yNjA1MDgwOTQyMTVaFw0yNzA1MDcwOTQ3MTVaMDMxMTAvBgNV
BAMTKDRGRjkxQUEwOUVBNTE5NkY1RTE3RDc2M0UxQzQ4MDlBOTU5OEZDMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy9r+BVHk68IHwyfNP/4hhmxj1
BdpP/If87fVqYx+IFY0RCnGCYatON2oK5L/LxEYPSOHIe0rCeO3XMoSg9ZlQxa4o
zBGCG8dGThn/aW2S6z1BktAjN8805CzFhAufybH7HSc+anI1O0SHrofNwnBfUELv
f06e6Iats2X89+U97A8zq/T9C0znHz6JrXnIpJDx0OC6WKyf65JA0pPVZ08fC/dq
/Xu65PLv/etXzomzMPN/ordviPnIzHYBU4NTqVwvhsOgE2VEY6Gd6kJFzWh/3tdH
cniKtun6AJSTkKIMYW2pFwX9YpYAkBbbzQzenDP0SNDBLv6wby8Ihp9bNEj/AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUT/kaoJ6lGW9eF9dj4cSAmpWY/CgwHwYDVR0j
BBgwFoAUgl5cc7dVI2Pg+SJhrcY3WF6+A2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NTA1ODA3Mjk0MzkxOTExNy8wLzgyNUU1QzczQjc1NTIzNjNFMEY5MjI2MUFEQzYz
NzU4NUVCRTAzNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1RUJFMDM2Mi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwNTA1ODA3Mjk0MzkxOTExNy8wLzMxMzAzMzJlMzMz
ODJlMzczNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM4MzEzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGcmTDANBgkqhkiG9w0BAQsFAAOCAQEAWrwzrgAkO2PNNyBZKSc3oGBC
Abe3rJIxJlE13vvt8CHyXFtk6OmgRG0/k8LwE9Kjg33H4uthMsSd2qVT9CKzdidw
cTlHuSaEMDb7EUkL8MYkv/LzY2G6DxesF1Y5xuD0TzMaIVKxBHl4Yqo9xAjd8dxz
BWSl4zbrwrCE7+Tb5FeUBBzaU3e8vyr05iTI5h1R1bFMa+LOIDtu3BO1C169LqV+
rtStWm35uAFIv4x7hK8/ZRAk/G5vuafhhBHk6Tb0ZeeeQysvUv1fPEkCLYBwysLY
RVZSkT4naEsji71L0Ejn8Vo86IwT048zC44YtZnRxC2t15oV109Fp00+QhEXCg==
-----END CERTIFICATE-----
Generated at Wed May 13 20:55:25 2026 by rpki-client