Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e33392e36352e302f32342d3234203d3e20313436383137.roa
File:                     3130332e33392e36352e302f32342d3234203d3e20313436383137.roa (raw, json)
Hash identifier:          5ooTkS4lirBj6J4pQQnMZ9VUUJsU3PBfWlAhaQO42u8=
Subject key identifier:   53:9D:63:D1:00:98:A1:B1:E5:AD:C4:E3:3A:03:98:6D:A3:4E:B3:C4
Certificate issuer:       /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial:       798B09A72501CDBCF0F5D723249051044DE3DADB
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e33392e36352e302f32342d3234203d3e20313436383137.roa
Signing time:             Fri 08 May 2026 09:48:49 +0000
ROA not before:           Fri 08 May 2026 09:43:49 +0000
ROA not after:            Fri 07 May 2027 09:48:49 +0000
asID:                     146817
IP address blocks:        103.39.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:8b:09:a7:25:01:cd:bc:f0:f5:d7:23:24:90:51:04:4d:e3:da:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
        Validity
            Not Before: May  8 09:43:49 2026 GMT
            Not After : May  7 09:48:49 2027 GMT
        Subject: CN=539D63D10098A1B1E5ADC4E33A03986DA34EB3C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8e:f1:43:56:e6:3b:a0:f8:9e:62:f2:e8:63:
                    13:57:a7:94:6a:2a:13:31:e9:d3:b4:86:6b:87:c3:
                    39:dd:84:e8:5a:47:f3:d2:9d:c2:ec:8c:45:ce:95:
                    5e:d5:11:14:21:87:e5:fe:8b:f2:3b:a2:e6:b2:43:
                    a4:64:7b:39:c8:ac:7b:dc:a0:ac:14:c4:55:9e:66:
                    32:44:ef:49:ef:be:ef:f7:44:9c:28:09:dc:87:e9:
                    53:78:fd:e0:a6:f5:19:60:2c:67:c4:da:b1:22:73:
                    6e:af:4c:f8:ae:b6:85:44:c5:43:0c:02:c7:03:99:
                    ed:0d:88:92:89:45:ee:f0:c6:53:d9:ea:09:93:46:
                    6c:37:e5:ae:83:e0:61:3d:84:e9:75:99:53:99:24:
                    f7:7a:9f:0c:fe:6d:96:39:77:29:51:ca:7b:70:4d:
                    22:cc:be:40:3c:90:50:95:a7:1d:d4:09:e5:48:0b:
                    6d:fb:60:60:14:d1:52:b5:c9:15:c5:83:94:a5:a4:
                    31:cd:90:4f:56:e0:cc:ef:74:55:c3:74:d7:6e:96:
                    1b:21:b9:6a:79:c2:80:92:dd:0c:61:aa:ee:e9:24:
                    bb:41:9e:44:c6:ed:89:31:1d:44:55:d1:f3:13:8f:
                    06:49:84:cf:f9:51:5b:ef:40:88:3e:d1:01:07:f0:
                    df:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:9D:63:D1:00:98:A1:B1:E5:AD:C4:E3:3A:03:98:6D:A3:4E:B3:C4
            X509v3 Authority Key Identifier:
                keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e33392e36352e302f32342d3234203d3e20313436383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:48:c8:60:e5:f8:bb:1f:99:eb:ad:a7:73:2e:44:d6:bc:8e:
         5d:e2:d6:88:0a:4f:89:db:34:78:3f:d3:7b:a8:03:a0:b1:03:
         02:0e:86:2a:aa:a1:0c:55:34:18:c5:63:cd:24:50:be:50:82:
         c3:23:dc:8b:14:f2:36:85:80:1e:dd:1e:10:1c:5e:36:64:df:
         ba:9c:c3:ac:c0:2c:0a:6d:f8:59:60:d0:15:91:99:0a:48:71:
         6d:dd:d1:65:d3:a5:fa:13:be:1e:ef:4d:03:fd:d2:c6:30:53:
         25:bc:be:74:f2:ec:09:50:b6:f0:5d:f8:63:67:13:be:f1:d2:
         dd:f2:fe:47:f3:70:cf:70:4a:45:5b:09:b0:cc:d0:b2:30:bc:
         98:71:2c:e7:be:37:4f:e6:a7:27:04:ec:ec:28:c2:f3:25:0c:
         57:ba:60:35:d6:f7:be:0d:ed:64:b0:1e:51:5a:23:5c:e7:dc:
         ca:0d:94:73:4f:2f:5e:79:63:8f:37:61:81:eb:54:b5:94:36:
         ac:c0:7d:9b:cc:1d:c3:c2:63:52:47:91:10:a2:da:8b:e0:cf:
         9e:6c:6e:1b:ec:94:fa:26:8d:07:b6:88:0b:90:1c:19:05:d1:
         b7:83:ef:ff:4d:65:b5:79:9f:80:0d:29:a9:6e:88:71:b3:c8:
         e8:ad:70:72
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 20:55:26 2026 by rpki-client