Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e372e3134302e302f32342d3234203d3e20313436383137.roa
File:                     3130332e372e3134302e302f32342d3234203d3e20313436383137.roa (raw, json)
Hash identifier:          vEWq2IDCeVyfPWuthNJjiO2w/Kixygt8/NBcMcqFBCw=
Subject key identifier:   82:E1:B4:82:9D:99:28:6C:DD:13:27:1B:A6:A7:75:E6:96:CF:FF:DD
Certificate issuer:       /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial:       1A1FE4EE45D01599C94AEB0179F20A64A2FC0867
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e372e3134302e302f32342d3234203d3e20313436383137.roa
Signing time:             Fri 08 May 2026 09:48:49 +0000
ROA not before:           Fri 08 May 2026 09:43:49 +0000
ROA not after:            Fri 07 May 2027 09:48:49 +0000
asID:                     146817
IP address blocks:        103.7.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:1f:e4:ee:45:d0:15:99:c9:4a:eb:01:79:f2:0a:64:a2:fc:08:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
        Validity
            Not Before: May  8 09:43:49 2026 GMT
            Not After : May  7 09:48:49 2027 GMT
        Subject: CN=82E1B4829D99286CDD13271BA6A775E696CFFFDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:12:77:6f:28:59:95:56:70:2c:47:93:98:84:
                    5e:dd:17:01:da:ef:9c:5f:06:d4:d8:46:fd:b8:5c:
                    10:fc:fd:df:93:b7:dd:24:78:bd:38:fd:70:5d:a8:
                    53:5c:86:ff:46:f1:58:87:1a:ec:49:3e:c2:29:f8:
                    b4:71:d6:f9:4b:e5:bc:b6:b1:ac:18:e1:03:51:d2:
                    f2:d6:e7:e2:75:1a:8b:b5:3b:9f:6b:38:9e:6f:8e:
                    10:67:1a:46:2c:4b:1b:3f:bb:be:d3:ca:fe:a6:7a:
                    a8:a4:a6:9c:a7:30:b1:28:90:1d:80:9b:c4:ee:76:
                    5a:7b:09:c8:64:24:17:91:55:a9:62:2e:24:13:8f:
                    d2:26:fe:c3:dd:0c:53:31:6b:8b:80:9e:76:4f:9e:
                    1f:70:3f:67:32:3b:df:63:d1:da:d3:d8:88:dc:5a:
                    04:b5:f9:a8:ba:1b:5d:9e:e1:3b:82:44:99:f8:15:
                    4e:5e:3a:5c:4b:88:1e:df:1a:46:5d:e0:0f:fa:38:
                    9f:5a:92:92:c5:e8:40:c6:82:c1:54:1b:2c:17:c7:
                    cf:46:4e:b6:59:6e:b4:db:ea:e3:c6:61:a7:d0:c7:
                    32:00:c9:6a:f2:14:e5:a6:83:ce:95:e8:7b:d4:7d:
                    a8:d6:65:a7:37:27:44:ba:c6:56:1c:93:a5:ae:32:
                    ed:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E1:B4:82:9D:99:28:6C:DD:13:27:1B:A6:A7:75:E6:96:CF:FF:DD
            X509v3 Authority Key Identifier:
                keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e372e3134302e302f32342d3234203d3e20313436383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e1:58:d7:58:45:0f:25:36:ca:6b:2c:dc:4f:9b:4a:d6:3f:bf:
         73:42:1f:b0:ba:4f:c2:9e:2d:aa:71:af:06:38:ab:c4:ef:e0:
         f8:53:ff:1d:7a:19:56:fb:29:b6:57:c6:86:10:f7:2d:61:50:
         75:bc:31:5f:ba:0b:d0:3e:77:d7:85:b6:a0:37:de:aa:55:ad:
         2e:5a:c2:be:c9:36:04:af:53:85:a5:a2:8b:8b:de:1e:12:3f:
         42:07:7d:95:64:99:8b:8c:b8:ca:78:c5:0b:0b:28:84:62:86:
         f4:05:20:cb:20:bb:de:cc:49:66:d8:d7:38:d7:72:b3:5e:fd:
         e8:d9:8a:1e:1c:d8:ed:c1:75:27:9e:59:59:a0:c6:c8:db:d9:
         cb:9e:47:b4:ca:ea:64:07:59:a8:3e:0e:86:39:34:65:4c:37:
         69:95:c6:9c:8f:b0:90:83:e9:43:ed:21:3e:cb:2c:5c:5a:90:
         6c:e6:91:ac:ed:af:a3:43:7b:e2:23:b8:e6:bf:92:29:2e:44:
         6c:8c:7f:25:56:a1:90:fc:6a:48:1b:11:fa:70:e0:76:f1:fc:
         1e:d3:f4:70:55:65:6f:7b:1a:1f:9b:8e:5f:a5:c9:24:5d:8c:
         92:f4:79:f3:cd:e3:cc:f8:c7:01:1f:4e:bd:67:13:21:e4:aa:
         87:d2:04:cd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 20:55:25 2026 by rpki-client