Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e33382e37382e302f32342d3234203d3e20313436383137.roa
File:                     3130332e33382e37382e302f32342d3234203d3e20313436383137.roa (raw, json)
Hash identifier:          /01GQUWcxsjDfJCRWEhhCAnG7HyeNs3buxuE/h451QA=
Subject key identifier:   49:B0:44:C7:21:51:83:D8:73:0B:A7:0C:83:9E:34:28:93:E1:FB:6B
Certificate issuer:       /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial:       5D3D3A466CEAD78E67CF8DDFA2426EA45164C11E
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e33382e37382e302f32342d3234203d3e20313436383137.roa
Signing time:             Fri 08 May 2026 09:47:16 +0000
ROA not before:           Fri 08 May 2026 09:42:16 +0000
ROA not after:            Fri 07 May 2027 09:47:16 +0000
asID:                     146817
IP address blocks:        103.38.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:3d:3a:46:6c:ea:d7:8e:67:cf:8d:df:a2:42:6e:a4:51:64:c1:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
        Validity
            Not Before: May  8 09:42:16 2026 GMT
            Not After : May  7 09:47:16 2027 GMT
        Subject: CN=49B044C7215183D8730BA70C839E342893E1FB6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e5:e4:94:95:58:e9:0b:20:ec:b7:0a:da:74:
                    e8:1e:77:c0:7b:91:4e:0c:26:5d:1b:45:0f:5b:22:
                    51:fe:37:dd:ed:08:eb:b5:5b:b2:50:92:d1:18:0a:
                    00:cb:f4:58:47:03:59:0a:71:33:38:75:14:5e:70:
                    db:24:77:2a:99:00:6a:60:e4:a9:6e:41:31:00:6d:
                    b6:ff:b8:cf:34:53:4a:4b:55:a4:c3:4b:26:db:51:
                    cf:aa:aa:86:6d:9d:f6:5d:92:b0:10:e9:38:e4:85:
                    80:6d:aa:dd:89:06:f4:4f:90:1c:3b:f0:27:18:da:
                    87:58:98:92:a0:59:f5:d8:74:4d:97:b6:94:1e:5f:
                    9b:73:31:cf:c1:58:ef:9b:99:af:aa:f6:4e:bd:12:
                    b5:e5:8d:f2:6a:49:2c:ea:bf:d9:b4:b2:6d:51:58:
                    9b:4e:03:65:16:3e:76:80:d1:dc:45:4c:c7:3f:ee:
                    18:b7:79:e9:41:c8:2f:23:fb:da:03:17:0a:ab:36:
                    22:da:cc:f7:a4:8d:1b:47:79:3f:39:e8:e5:7f:34:
                    6f:22:c0:e3:41:24:37:d9:0b:92:b0:4b:c9:18:a5:
                    6f:08:45:0a:40:f2:9a:a5:27:9b:cd:5c:47:d4:fc:
                    93:83:10:cd:e6:6f:bb:c4:7c:fb:43:69:21:2e:c6:
                    d2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B0:44:C7:21:51:83:D8:73:0B:A7:0C:83:9E:34:28:93:E1:FB:6B
            X509v3 Authority Key Identifier:
                keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e33382e37382e302f32342d3234203d3e20313436383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.38.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:76:64:a3:1b:7a:c8:cc:c0:d2:54:e3:f8:04:99:2a:4e:0e:
         cf:20:1e:e5:a0:bd:b7:9b:24:ba:92:75:45:d4:f1:90:f0:3a:
         0a:6a:b0:5a:2a:0a:4b:6d:de:23:61:62:21:e3:bb:67:3f:33:
         bd:d0:9c:47:1a:1d:dc:c8:a0:d6:06:46:92:d5:ea:81:64:fe:
         6e:f5:49:5d:3e:13:c9:64:10:04:12:f0:79:be:22:04:1d:4f:
         8d:2e:0e:4b:95:d2:a2:22:e6:76:f8:64:d8:11:74:ae:72:2d:
         1a:3b:03:07:b0:a7:29:1d:0e:63:99:b1:c1:8a:77:46:f8:a1:
         e7:86:e7:a2:3e:8a:56:de:9b:bf:bf:e0:7e:26:6b:4a:40:00:
         65:a3:83:74:31:75:05:fb:8e:ff:cd:25:e5:75:00:28:86:50:
         74:26:12:6f:96:b5:cd:e6:e4:a0:46:a3:19:46:1d:d5:b6:e3:
         f1:7a:4d:b9:1e:9f:a1:c5:b7:ab:f7:9d:d0:5f:21:8e:9b:cc:
         62:4d:b3:78:37:cd:c2:13:0a:c0:1c:cf:f4:bd:24:f1:59:1f:
         93:d5:79:74:95:b9:c1:29:f0:4f:f9:6b:9f:52:50:cf:64:5d:
         59:7e:44:67:9e:e7:70:5f:32:bd:3b:2d:e6:61:35:fb:c3:0f:
         66:cf:68:a7
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUXT06Rmzq145nz43fokJupFFkwR4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1
RUJFMDM2MjAeFw0yNjA1MDgwOTQyMTZaFw0yNzA1MDcwOTQ3MTZaMDMxMTAvBgNV
BAMTKDQ5QjA0NEM3MjE1MTgzRDg3MzBCQTcwQzgzOUUzNDI4OTNFMUZCNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx5eSUlVjpCyDstwradOged8B7
kU4MJl0bRQ9bIlH+N93tCOu1W7JQktEYCgDL9FhHA1kKcTM4dRRecNskdyqZAGpg
5KluQTEAbbb/uM80U0pLVaTDSybbUc+qqoZtnfZdkrAQ6TjkhYBtqt2JBvRPkBw7
8CcY2odYmJKgWfXYdE2XtpQeX5tzMc/BWO+bma+q9k69ErXljfJqSSzqv9m0sm1R
WJtOA2UWPnaA0dxFTMc/7hi3eelByC8j+9oDFwqrNiLazPekjRtHeT856OV/NG8i
wONBJDfZC5KwS8kYpW8IRQpA8pqlJ5vNXEfU/JODEM3mb7vEfPtDaSEuxtKHAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUSbBExyFRg9hzC6cMg540KJPh+2swHwYDVR0j
BBgwFoAUgl5cc7dVI2Pg+SJhrcY3WF6+A2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NTA1ODA3Mjk0MzkxOTExNy8wLzgyNUU1QzczQjc1NTIzNjNFMEY5MjI2MUFEQzYz
NzU4NUVCRTAzNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1RUJFMDM2Mi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwNTA1ODA3Mjk0MzkxOTExNy8wLzMxMzAzMzJlMzMz
ODJlMzczODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM4MzEzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGcmTjANBgkqhkiG9w0BAQsFAAOCAQEAo3Zkoxt6yMzA0lTj+ASZKk4O
zyAe5aC9t5skupJ1RdTxkPA6CmqwWioKS23eI2FiIeO7Zz8zvdCcRxod3Mig1gZG
ktXqgWT+bvVJXT4TyWQQBBLweb4iBB1PjS4OS5XSoiLmdvhk2BF0rnItGjsDB7Cn
KR0OY5mxwYp3Rvih54bnoj6KVt6bv7/gfiZrSkAAZaODdDF1BfuO/80l5XUAKIZQ
dCYSb5a1zebkoEajGUYd1bbj8XpNuR6focW3q/ed0F8hjpvMYk2zeDfNwhMKwBzP
9L0k8Vkfk9V5dJW5wSnwT/lrn1JQz2RdWX5EZ57ncF8yvTst5mE1+8MPZs9opw==
-----END CERTIFICATE-----
Generated at Wed May 13 20:55:24 2026 by rpki-client