Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e33392e36372e302f32342d3234203d3e20313436383137.roa
File:                     3130332e33392e36372e302f32342d3234203d3e20313436383137.roa (raw, json)
Hash identifier:          4BrId0ha4NIMn7Wbont3p/AHQtaK3QoQbjhwLk2SpM8=
Subject key identifier:   85:04:4C:34:70:E8:E1:B4:B5:00:44:BE:4C:B4:6A:4D:D3:17:A1:FE
Certificate issuer:       /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial:       2BD99B206EB0389214D3B369969CECEEA790BB5D
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e33392e36372e302f32342d3234203d3e20313436383137.roa
Signing time:             Fri 08 May 2026 09:48:49 +0000
ROA not before:           Fri 08 May 2026 09:43:49 +0000
ROA not after:            Fri 07 May 2027 09:48:49 +0000
asID:                     146817
IP address blocks:        103.39.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d9:9b:20:6e:b0:38:92:14:d3:b3:69:96:9c:ec:ee:a7:90:bb:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
        Validity
            Not Before: May  8 09:43:49 2026 GMT
            Not After : May  7 09:48:49 2027 GMT
        Subject: CN=85044C3470E8E1B4B50044BE4CB46A4DD317A1FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f4:4c:f1:67:f3:06:6c:b1:ce:c8:90:29:af:
                    54:e0:4f:a3:f0:a8:4b:e8:47:92:5f:93:a8:de:16:
                    60:05:48:4d:4d:91:83:0e:cc:a6:da:f1:e1:d4:ce:
                    f8:e9:0c:68:f6:e9:8d:ed:b8:af:17:9e:a0:8f:69:
                    09:d7:6a:0b:9b:de:8c:0e:cf:bb:21:b6:11:30:f5:
                    14:d3:f2:d8:c7:67:93:fa:11:91:e2:70:c3:17:09:
                    a5:ca:82:73:b6:11:58:2d:8c:73:31:b9:93:1b:48:
                    32:91:95:6b:d3:e4:4f:b3:60:c3:fe:77:92:4b:06:
                    f2:ec:f1:96:31:df:c1:b9:9b:60:25:e9:84:fe:66:
                    e9:10:63:69:5b:fc:17:51:ec:4e:0a:fb:18:56:15:
                    3f:b7:a3:b3:eb:04:31:99:ce:bb:75:ec:d1:e0:b1:
                    82:9b:02:ce:e5:31:77:f1:c4:ad:37:af:04:3e:12:
                    a8:d4:58:2f:8b:59:43:7c:37:59:6a:d7:ad:8c:1d:
                    63:88:ef:5b:b9:b3:51:ee:15:c6:75:32:0a:74:91:
                    ad:2e:b2:69:c7:24:c7:5f:ec:20:96:ae:c7:c8:99:
                    2c:f8:2a:39:50:9c:6a:aa:16:e8:55:d6:91:f0:34:
                    5d:10:9c:c0:70:27:64:05:17:0a:ec:b9:8f:5f:81:
                    0b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:04:4C:34:70:E8:E1:B4:B5:00:44:BE:4C:B4:6A:4D:D3:17:A1:FE
            X509v3 Authority Key Identifier:
                keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e33392e36372e302f32342d3234203d3e20313436383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:7a:29:94:a5:2f:54:c7:4a:c9:a2:7a:d7:8c:3e:99:13:6f:
         32:ed:ea:c0:ad:91:a0:c0:d1:e4:ab:90:a5:d7:55:c8:ed:ef:
         3c:39:22:17:13:cf:4b:59:c4:90:c5:c8:b7:7e:26:b3:80:24:
         c3:fe:70:b9:50:cd:51:1b:e0:1a:ff:69:b9:93:52:fa:94:ca:
         13:ef:05:48:99:db:fe:87:d7:d5:e9:b9:fb:90:de:42:96:6a:
         b1:f1:2b:4c:39:be:8b:09:c5:fb:c7:11:d2:18:d2:93:5f:06:
         2a:69:6a:b3:37:06:e1:b4:2f:8d:a9:04:a3:bf:a4:98:64:73:
         2f:97:05:79:e2:c8:f0:35:96:22:43:87:5a:89:50:81:d8:7f:
         e7:ac:7b:e2:07:23:38:26:6c:d7:af:bf:6f:e0:2b:53:3a:29:
         45:3e:be:65:65:f9:7a:0e:76:0a:25:92:46:80:2c:7a:ff:bb:
         1a:31:a3:0b:a7:fb:3d:99:81:50:54:99:41:1e:7e:20:7a:82:
         28:a3:14:33:b3:39:21:77:03:5e:b7:36:62:03:f7:09:52:f5:
         2b:b7:81:5e:49:57:52:c9:0a:6a:b5:4f:76:e9:21:2e:5a:82:
         92:19:38:5e:97:05:c2:4a:93:3e:f1:8f:3b:f5:77:b5:56:83:
         62:82:f3:b7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 20:55:26 2026 by rpki-client