Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e372e3134322e302f32342d3234203d3e20313436383137.roa
File:                     3130332e372e3134322e302f32342d3234203d3e20313436383137.roa (raw, json)
Hash identifier:          Bc0l6Rn51vfXi+K6h0jYyOxnuIGMG73GAA/FXsN/dmg=
Subject key identifier:   93:50:52:AD:B5:29:22:B7:12:35:36:46:1C:FC:5F:EB:7A:08:52:AD
Certificate issuer:       /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial:       0489E4EB30ECCE842CA4C032A44AEE16EA8BCA5A
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e372e3134322e302f32342d3234203d3e20313436383137.roa
Signing time:             Fri 08 May 2026 09:48:49 +0000
ROA not before:           Fri 08 May 2026 09:43:49 +0000
ROA not after:            Fri 07 May 2027 09:48:49 +0000
asID:                     146817
IP address blocks:        103.7.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:89:e4:eb:30:ec:ce:84:2c:a4:c0:32:a4:4a:ee:16:ea:8b:ca:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
        Validity
            Not Before: May  8 09:43:49 2026 GMT
            Not After : May  7 09:48:49 2027 GMT
        Subject: CN=935052ADB52922B7123536461CFC5FEB7A0852AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:39:3b:fd:cf:8c:31:9a:79:05:b2:3b:42:93:
                    d9:1e:64:29:d6:d0:0f:05:5e:2c:86:6b:46:61:02:
                    7a:e0:26:49:63:d1:c7:db:25:61:2e:df:35:54:f9:
                    79:79:3c:f7:b4:0b:74:22:e0:50:9f:41:16:64:28:
                    7d:e5:c2:ad:1d:e2:cb:a8:c3:aa:75:0e:2c:47:7f:
                    68:06:c5:39:1a:e1:f7:32:a5:b4:05:f5:d6:0c:a7:
                    4d:54:2c:c0:58:af:b3:54:52:05:ad:7b:86:69:90:
                    76:77:34:b9:72:c6:be:0e:99:29:6a:10:1c:24:ee:
                    9f:02:36:31:93:44:7c:8c:fc:8b:ee:ee:83:a9:a8:
                    83:ab:84:7d:6a:64:88:c0:57:13:6d:88:42:60:4a:
                    85:c1:00:ed:7d:0e:4c:4b:e9:23:0f:1e:76:de:06:
                    af:fb:8b:23:54:a7:54:e0:f4:35:6a:24:23:1b:54:
                    86:9d:6d:eb:d6:b2:ab:95:61:c4:75:92:6b:85:c9:
                    10:98:d6:d1:3e:9d:96:a3:03:af:1c:c6:56:70:e3:
                    6e:a3:d9:ea:7e:25:d7:53:af:52:97:0c:53:5d:bd:
                    26:70:fd:82:cf:a3:7e:81:b2:94:55:ac:66:01:84:
                    2c:99:2b:26:ff:e7:e6:dc:fb:6e:1b:dd:a3:76:10:
                    76:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:50:52:AD:B5:29:22:B7:12:35:36:46:1C:FC:5F:EB:7A:08:52:AD
            X509v3 Authority Key Identifier:
                keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e372e3134322e302f32342d3234203d3e20313436383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:58:21:8e:a6:e4:1f:5c:c5:bb:c6:42:f3:f0:90:1f:08:cc:
         ab:36:d9:be:e8:6f:da:87:f7:83:6a:a0:82:e4:40:ec:24:f0:
         a8:d1:d1:e0:0f:fc:6e:aa:62:a6:1d:a1:52:12:24:cc:6c:ae:
         e1:f4:07:bb:43:1b:b5:45:b8:a6:73:40:06:20:d4:55:8b:4f:
         17:39:51:2f:38:33:b1:54:fc:bf:a3:00:37:42:52:de:72:f5:
         57:76:85:e8:64:c5:80:e4:a8:c6:30:5f:23:1f:bd:57:07:dc:
         e6:d6:f0:27:27:a9:4c:b7:a1:46:8f:bf:ff:fe:e4:bb:b5:e7:
         2d:91:3b:23:20:31:4b:90:40:d3:64:54:49:68:d6:fc:d5:27:
         14:38:8b:3a:18:02:c6:ac:d5:14:61:87:57:bb:cc:4c:ae:ac:
         d2:84:38:b4:5d:bd:ba:6b:6d:c6:8a:52:d1:6b:67:b6:a4:74:
         31:df:8a:c0:e6:99:ba:69:6f:01:b2:ab:d7:f9:aa:cf:a2:39:
         2e:02:08:66:77:a0:fe:c4:5b:24:52:09:bb:ed:28:b2:b6:53:
         b0:97:e7:ad:df:14:17:af:f2:93:c9:9a:a6:9f:69:2f:b3:e3:
         58:6b:44:3a:46:8a:7a:89:34:75:40:a9:a4:2c:ca:3d:2b:d8:
         fe:7b:ea:f0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 20:55:25 2026 by rpki-client