Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e33392e36342e302f32322d3232203d3e20313436383137.roa
File:                     3130332e33392e36342e302f32322d3232203d3e20313436383137.roa (raw, json)
Hash identifier:          wOuQlt/FgN7JePvHzwK9ocNlznLMfT1frycDzxpR6eY=
Subject key identifier:   E8:8A:02:36:AF:75:0C:3A:A1:14:1C:44:2F:D7:6D:C7:98:87:7B:83
Certificate issuer:       /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial:       2A2E9E4174A84194CC00FC6A01904B56FAF7079B
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e33392e36342e302f32322d3232203d3e20313436383137.roa
Signing time:             Fri 08 May 2026 09:48:49 +0000
ROA not before:           Fri 08 May 2026 09:43:49 +0000
ROA not after:            Fri 07 May 2027 09:48:49 +0000
asID:                     146817
IP address blocks:        103.39.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:2e:9e:41:74:a8:41:94:cc:00:fc:6a:01:90:4b:56:fa:f7:07:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
        Validity
            Not Before: May  8 09:43:49 2026 GMT
            Not After : May  7 09:48:49 2027 GMT
        Subject: CN=E88A0236AF750C3AA1141C442FD76DC798877B83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:86:d1:f1:b7:1f:9a:0d:9e:f3:e2:0a:b3:5e:
                    6d:a4:63:03:fb:a9:62:f0:cb:b9:ca:2b:5d:48:a5:
                    e7:c9:5d:4e:ca:ae:e1:0c:b4:7c:8b:0b:c9:bf:d9:
                    dd:2d:2b:ca:0f:84:53:45:fc:43:36:da:3b:6b:bd:
                    19:27:fe:e1:b9:63:fc:91:35:bc:c9:58:4e:0d:22:
                    c1:fd:b3:49:86:86:e3:70:cd:94:03:b8:96:a0:2e:
                    f8:9f:95:50:89:91:93:00:13:1f:ec:f5:5d:fb:ee:
                    c1:da:e7:ce:4a:c4:b4:79:de:93:c7:2e:c0:73:f9:
                    48:d1:07:30:9c:fa:45:e1:20:48:be:0a:56:80:9d:
                    f0:0b:3e:6f:d7:0d:78:f5:68:a8:0b:60:a4:20:72:
                    1e:4e:f1:73:66:94:b9:75:f4:ab:52:66:5b:6e:77:
                    25:4b:63:33:ed:ff:a6:fe:2e:9f:c9:b5:c1:0a:21:
                    06:ba:25:40:d5:08:fd:8c:62:ce:d1:23:06:2a:2f:
                    d7:16:d7:1e:37:8c:23:b1:ff:83:33:96:99:d7:ee:
                    c6:72:a6:d3:e9:91:ff:92:a5:93:89:ce:d5:40:80:
                    77:35:b5:19:b1:71:29:fe:db:51:01:a2:fa:83:09:
                    b5:b8:6c:c5:61:9f:b9:5f:a8:57:1a:cc:02:63:65:
                    fb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8A:02:36:AF:75:0C:3A:A1:14:1C:44:2F:D7:6D:C7:98:87:7B:83
            X509v3 Authority Key Identifier:
                keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e33392e36342e302f32322d3232203d3e20313436383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:4a:92:c9:f3:46:73:72:f6:a3:a5:2f:b4:af:ff:d4:9b:d3:
         5b:0c:60:28:20:47:04:f4:63:31:be:52:36:58:a6:62:af:f9:
         09:90:49:42:cb:0b:6e:5d:5a:83:4e:a7:d3:1f:1a:0f:ad:7a:
         57:44:b7:32:24:99:d7:a2:91:11:83:53:2d:1e:cd:84:cd:a1:
         65:51:b7:76:95:c5:f1:ae:01:8b:38:c1:2d:43:b6:e0:21:ba:
         31:96:72:d3:32:4f:42:fd:90:fb:b1:a2:33:1c:50:6a:09:b4:
         6e:48:49:30:83:05:63:d2:66:3b:42:11:49:90:c5:95:36:87:
         c0:e6:3c:7f:c1:4c:b4:c6:52:1b:95:82:79:45:30:0b:e7:a0:
         0e:36:c5:30:ff:3d:cc:6a:d9:fb:f9:88:ea:fb:6f:c5:9b:55:
         2b:d2:52:ea:25:3d:df:87:91:35:38:74:df:0d:da:ff:99:b7:
         16:1d:a2:cd:55:cc:d9:26:a9:7b:d3:b8:61:e1:36:64:30:4d:
         a3:bb:8b:a6:52:4a:ba:8f:38:b3:5e:4c:ca:24:3c:52:55:5f:
         14:74:7d:dc:84:3b:e9:20:d6:45:93:b1:70:2a:3b:55:d9:9b:
         d5:4a:e1:ca:ff:2a:14:19:da:0f:5d:f9:5e:36:02:02:35:4e:
         c6:6a:6b:ed
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 20:55:27 2026 by rpki-client