Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e33392e36342e302f32342d3234203d3e20313436383137.roa
File:                     3130332e33392e36342e302f32342d3234203d3e20313436383137.roa (raw, json)
Hash identifier:          Ch0NDH3hPSsd8H8VtiCK1KzZLqEjFRMzbPLG9CzVsC0=
Subject key identifier:   E8:6C:74:FA:D1:88:E0:2C:7F:9A:9D:04:87:F0:53:87:2F:BE:D1:72
Certificate issuer:       /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial:       18B0507F899CE8E7F95599603E38CAF73074E373
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e33392e36342e302f32342d3234203d3e20313436383137.roa
Signing time:             Fri 08 May 2026 09:48:50 +0000
ROA not before:           Fri 08 May 2026 09:43:50 +0000
ROA not after:            Fri 07 May 2027 09:48:50 +0000
asID:                     146817
IP address blocks:        103.39.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b0:50:7f:89:9c:e8:e7:f9:55:99:60:3e:38:ca:f7:30:74:e3:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
        Validity
            Not Before: May  8 09:43:50 2026 GMT
            Not After : May  7 09:48:50 2027 GMT
        Subject: CN=E86C74FAD188E02C7F9A9D0487F053872FBED172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:63:0c:10:2e:12:47:e8:9a:e2:8c:67:35:17:
                    99:6e:f4:7b:dc:0a:d8:ec:b7:ae:a3:79:da:14:31:
                    36:b9:19:1a:a3:1f:25:68:26:0b:27:f7:7e:4c:48:
                    72:57:1b:3e:3a:ff:9e:a5:0d:dd:34:a3:84:b8:da:
                    7d:a3:a5:80:43:d8:d9:a5:7e:eb:49:77:70:1a:26:
                    98:5c:50:25:00:8d:29:07:0b:41:23:da:a6:8b:e5:
                    c8:9e:f4:a8:84:e5:01:35:55:9b:28:10:7e:2c:47:
                    d5:29:a6:72:77:f1:6d:93:63:20:7d:0c:cc:55:ab:
                    8a:5e:fe:ba:b4:1f:d4:85:2b:16:61:52:2e:d0:0b:
                    52:da:ac:34:d1:ed:cd:e9:7f:6a:fd:df:64:fb:57:
                    fe:1c:b3:04:47:47:a7:f4:77:86:9d:e5:00:29:81:
                    c6:f8:b4:8c:f5:79:ab:23:71:63:71:e7:89:a4:ca:
                    f7:4b:3e:51:6b:f8:c9:70:15:44:b9:8a:fc:20:ae:
                    ed:b1:6e:23:3c:ea:1d:09:b5:05:16:57:c4:04:89:
                    d1:e8:c3:77:9a:50:0e:65:ac:46:c6:7e:da:c1:e4:
                    e9:6c:78:83:02:b0:d2:f8:bb:06:16:e0:21:6e:98:
                    3e:39:37:79:9c:70:f1:bf:cb:9b:20:ee:99:04:33:
                    53:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6C:74:FA:D1:88:E0:2C:7F:9A:9D:04:87:F0:53:87:2F:BE:D1:72
            X509v3 Authority Key Identifier:
                keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e33392e36342e302f32342d3234203d3e20313436383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:bc:15:31:d4:e6:38:f2:58:ea:3d:a4:e2:12:cc:46:13:61:
         a8:d7:b0:79:83:59:26:38:ad:fe:56:67:be:62:4a:37:b0:8b:
         a6:9a:75:1e:a2:5f:65:db:13:a9:d2:70:a0:93:ad:3e:8d:78:
         3d:00:0e:a0:24:89:97:3c:e5:a4:00:0a:28:c0:33:ab:a9:4a:
         b8:4a:a6:34:56:58:87:bf:af:b2:8b:5d:a8:c2:55:0a:9f:e1:
         5e:2b:69:96:6a:fa:de:7c:1c:86:07:5d:e5:9c:3f:44:e0:31:
         82:73:fb:86:c3:89:04:32:24:79:ba:a0:74:78:d4:00:f6:84:
         ed:cb:4c:ae:76:9b:62:f5:03:b5:db:3a:e6:f8:86:1c:6c:3b:
         ba:46:6e:cf:f6:e6:32:1e:97:c9:33:e1:04:1e:9f:73:16:e4:
         38:be:29:36:30:dc:a3:14:15:9e:8e:dc:08:38:7c:a2:5a:59:
         e5:4a:f8:a6:0d:8c:87:87:23:0a:18:ca:3f:5a:40:d8:f7:d7:
         dd:30:55:53:e3:e4:0c:64:57:4f:a8:3f:cd:ce:b2:32:d0:5a:
         4e:d5:7d:d5:cd:5f:1e:14:17:41:92:40:85:27:b9:bd:47:51:
         c8:91:30:e6:08:5e:3b:e2:08:7f:ed:47:02:7a:26:b8:50:60:
         4e:24:ec:9e
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUGLBQf4mc6Of5VZlgPjjK9zB043MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1
RUJFMDM2MjAeFw0yNjA1MDgwOTQzNTBaFw0yNzA1MDcwOTQ4NTBaMDMxMTAvBgNV
BAMTKEU4NkM3NEZBRDE4OEUwMkM3RjlBOUQwNDg3RjA1Mzg3MkZCRUQxNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZYwwQLhJH6JrijGc1F5lu9Hvc
Ctjst66jedoUMTa5GRqjHyVoJgsn935MSHJXGz46/56lDd00o4S42n2jpYBD2Nml
futJd3AaJphcUCUAjSkHC0Ej2qaL5cie9KiE5QE1VZsoEH4sR9UppnJ38W2TYyB9
DMxVq4pe/rq0H9SFKxZhUi7QC1LarDTR7c3pf2r932T7V/4cswRHR6f0d4ad5QAp
gcb4tIz1easjcWNx54mkyvdLPlFr+MlwFUS5ivwgru2xbiM86h0JtQUWV8QEidHo
w3eaUA5lrEbGftrB5OlseIMCsNL4uwYW4CFumD45N3mccPG/y5sg7pkEM1MPAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU6Gx0+tGI4Cx/mp0Eh/BThy++0XIwHwYDVR0j
BBgwFoAUgl5cc7dVI2Pg+SJhrcY3WF6+A2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NTA1ODA3Mjk0MzkxOTExNy8wLzgyNUU1QzczQjc1NTIzNjNFMEY5MjI2MUFEQzYz
NzU4NUVCRTAzNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1RUJFMDM2Mi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwNTA1ODA3Mjk0MzkxOTExNy8wLzMxMzAzMzJlMzMz
OTJlMzYzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM4MzEzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGcnQDANBgkqhkiG9w0BAQsFAAOCAQEAQrwVMdTmOPJY6j2k4hLMRhNh
qNeweYNZJjit/lZnvmJKN7CLppp1HqJfZdsTqdJwoJOtPo14PQAOoCSJlzzlpAAK
KMAzq6lKuEqmNFZYh7+vsotdqMJVCp/hXitplmr63nwchgdd5Zw/ROAxgnP7hsOJ
BDIkebqgdHjUAPaE7ctMrnabYvUDtds65viGHGw7ukZuz/bmMh6XyTPhBB6fcxbk
OL4pNjDcoxQVno7cCDh8olpZ5Ur4pg2Mh4cjChjKP1pA2PfX3TBVU+PkDGRXT6g/
zc6yMtBaTtV91c1fHhQXQZJAhSe5vUdRyJEw5gheO+IIf+1HAnomuFBgTiTsng==
-----END CERTIFICATE-----
Generated at Wed May 13 20:55:25 2026 by rpki-client