Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e33392e36362e302f32342d3234203d3e20313436383137.roa
File:                     3130332e33392e36362e302f32342d3234203d3e20313436383137.roa (raw, json)
Hash identifier:          Z74XvIU3SsJHkgzv/u4K+k5FCDshvCoTuhTyzMUS8hE=
Subject key identifier:   A8:1D:D0:79:71:F1:5E:DC:57:3C:83:D9:A2:ED:AD:96:13:4B:5B:C6
Certificate issuer:       /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial:       4F1AAC5D555A3C2E9921E89EF53EAE774DF71A23
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e33392e36362e302f32342d3234203d3e20313436383137.roa
Signing time:             Fri 08 May 2026 09:48:50 +0000
ROA not before:           Fri 08 May 2026 09:43:50 +0000
ROA not after:            Fri 07 May 2027 09:48:50 +0000
asID:                     146817
IP address blocks:        103.39.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:1a:ac:5d:55:5a:3c:2e:99:21:e8:9e:f5:3e:ae:77:4d:f7:1a:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
        Validity
            Not Before: May  8 09:43:50 2026 GMT
            Not After : May  7 09:48:50 2027 GMT
        Subject: CN=A81DD07971F15EDC573C83D9A2EDAD96134B5BC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9a:33:f4:ea:d3:95:ec:ba:77:20:eb:d2:e8:
                    1c:9e:14:31:5d:2a:54:59:94:e3:84:58:d4:73:98:
                    f9:ad:f2:41:dc:f7:f1:99:85:1d:17:6e:2e:ee:5d:
                    e4:f3:64:5f:a6:05:f1:04:49:00:8f:0c:38:10:d5:
                    b9:20:01:d7:85:3a:9d:0c:52:72:f3:3c:24:e1:aa:
                    4d:11:09:43:23:25:d5:d6:a8:21:71:d7:98:9d:97:
                    e4:f1:6d:ca:13:c3:88:b0:48:98:b3:35:59:51:3c:
                    f3:30:7e:a7:4f:4b:2b:38:0d:89:c6:2f:0e:3f:64:
                    39:40:dd:eb:05:fd:81:29:86:43:ea:f9:ef:1e:0e:
                    ed:da:dd:c2:0f:d9:5d:c9:47:b2:a0:d1:ad:5e:5a:
                    6f:9d:a9:63:12:e3:34:a6:a0:ed:ae:77:8e:6b:96:
                    df:b3:69:86:2d:ca:f9:e3:a7:c0:d8:20:33:2f:fe:
                    30:24:98:2f:54:23:b6:9a:73:c0:c5:7f:e4:b2:a1:
                    1c:7a:3a:8c:6e:cb:c7:cc:51:2f:4d:be:b6:8d:49:
                    32:3f:79:ea:6b:ad:aa:ed:12:37:21:d2:bd:e0:7c:
                    9e:17:33:af:72:52:50:4f:cb:72:23:43:01:a1:de:
                    8a:3b:bd:13:96:c7:bf:37:3a:f2:4b:1d:96:e0:29:
                    2e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:1D:D0:79:71:F1:5E:DC:57:3C:83:D9:A2:ED:AD:96:13:4B:5B:C6
            X509v3 Authority Key Identifier:
                keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e33392e36362e302f32342d3234203d3e20313436383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:ed:f1:50:6b:64:29:d8:79:97:29:b3:e0:b5:8d:c6:9f:f1:
         04:68:4d:0e:3c:c3:d6:05:e7:7f:0c:40:e5:63:a0:0c:d9:e0:
         cc:fc:89:96:2c:02:68:19:80:51:ff:8c:94:82:14:5b:93:cf:
         7c:1c:85:82:cc:62:d0:ae:9e:d1:9f:e7:e5:62:34:a3:d9:de:
         d6:0e:ec:05:1c:63:5e:ad:0b:86:a6:1b:84:b7:f7:e6:f5:c9:
         0e:65:dc:33:67:00:93:4b:79:8d:22:7b:c6:d7:fb:7d:b8:ec:
         13:74:18:b3:5c:ed:f0:b4:c1:46:0e:91:b5:90:e9:b2:73:f2:
         55:55:e9:db:e8:f1:67:8c:99:af:3b:b8:78:1c:eb:54:ef:de:
         5a:ef:ce:19:01:13:9a:e4:01:65:3b:bc:8f:f7:59:48:96:e9:
         56:d4:21:b0:8d:fc:0b:1f:14:2e:8b:38:53:41:fd:cb:d4:5c:
         78:7f:7a:a9:95:02:9b:bf:8c:8e:e5:48:66:9e:e5:86:0a:ab:
         55:cc:ea:75:26:83:85:a3:0a:72:a9:d3:ad:0f:5f:c0:ba:ab:
         5d:99:a7:88:e2:22:e4:d5:b0:3e:db:9a:43:e5:04:9d:75:ee:
         34:c5:26:b9:8b:61:b0:dd:86:7c:94:00:b8:ac:06:af:62:b6:
         f5:25:d2:be
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 20:55:25 2026 by rpki-client