Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e37382e36302e302f32322d3232203d3e20313436383137.roa
File:                     3130332e37382e36302e302f32322d3232203d3e20313436383137.roa (raw, json)
Hash identifier:          TxUryOVRcpE/hznRaqlQEh6PBCmeq4mIo32u13+hA1s=
Subject key identifier:   42:FA:07:01:FA:36:79:B1:78:CD:C2:92:F7:DE:FB:2E:BB:19:35:B3
Certificate issuer:       /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial:       5B2FAB767CC0897DAC7D0A2A1F3CD402338FB7DC
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e37382e36302e302f32322d3232203d3e20313436383137.roa
Signing time:             Fri 08 May 2026 09:34:29 +0000
ROA not before:           Fri 08 May 2026 09:29:29 +0000
ROA not after:            Fri 07 May 2027 09:34:29 +0000
asID:                     146817
IP address blocks:        103.78.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:2f:ab:76:7c:c0:89:7d:ac:7d:0a:2a:1f:3c:d4:02:33:8f:b7:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
        Validity
            Not Before: May  8 09:29:29 2026 GMT
            Not After : May  7 09:34:29 2027 GMT
        Subject: CN=42FA0701FA3679B178CDC292F7DEFB2EBB1935B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:60:e6:54:a6:9a:66:9a:8e:2d:a7:2f:4d:9a:
                    96:8d:d3:35:6a:57:81:38:fd:64:60:ec:62:8f:14:
                    ec:6b:39:cf:ce:23:39:1d:ed:9c:be:29:46:ed:7d:
                    96:5d:43:d6:80:55:f8:87:57:33:7c:92:3f:ef:4a:
                    a1:14:5c:ca:44:ac:88:a6:7b:81:4d:98:ad:7a:1d:
                    16:a2:27:ce:5f:4c:76:cc:1d:23:ab:3f:06:45:2a:
                    a7:8e:82:ef:9c:60:dc:69:dd:17:f9:ec:1e:95:dc:
                    2d:9e:61:bc:3a:48:d9:33:6d:eb:8b:19:6c:64:78:
                    2c:9d:8e:59:9d:3b:73:06:a9:2b:61:d3:6d:3d:9f:
                    c7:52:2f:d0:95:fb:33:54:c7:df:94:98:cc:8f:14:
                    d6:7c:8b:54:18:7d:4e:06:0f:43:d6:02:d0:00:80:
                    40:46:bc:55:b8:da:d8:53:82:84:63:9f:1e:07:85:
                    d4:70:2c:63:28:4d:8a:7e:bb:6a:83:eb:68:ef:e7:
                    06:c0:6a:45:66:e5:13:44:a9:75:15:54:57:66:d2:
                    8d:c3:65:fd:28:12:9a:81:23:88:fa:a7:07:ec:99:
                    84:ba:ae:37:d9:55:4b:97:3c:ad:6c:25:14:08:49:
                    44:32:eb:a5:df:0e:e4:42:08:a9:d3:bc:d8:48:42:
                    71:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FA:07:01:FA:36:79:B1:78:CD:C2:92:F7:DE:FB:2E:BB:19:35:B3
            X509v3 Authority Key Identifier:
                keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e37382e36302e302f32322d3232203d3e20313436383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:6b:3b:3d:ee:48:c1:da:6c:99:a9:a5:a4:72:ea:3b:56:76:
         ed:39:9a:0d:75:13:00:d0:34:3c:ad:09:93:17:e5:2a:cf:1e:
         ea:02:09:cf:c7:d4:8a:45:d8:5a:4c:b2:46:d5:4c:aa:6f:b9:
         c2:1e:26:0b:58:77:bd:ef:33:f6:c8:71:74:a8:5a:ce:78:06:
         a8:ef:22:0b:7b:c8:2e:68:a0:76:42:43:07:24:46:89:25:32:
         0c:55:98:4c:0c:16:97:26:1b:fd:6f:00:a2:00:58:28:49:8e:
         32:3a:9d:df:3a:21:86:7b:3b:51:6e:9b:91:52:2e:44:4d:83:
         26:2c:a2:4c:84:91:4c:92:33:5d:1f:7b:e7:e8:92:ad:8c:e6:
         4b:c3:fa:4a:d7:d8:5b:a2:3a:3d:6a:29:d6:3f:a2:aa:3f:87:
         38:b0:4a:cc:80:cb:70:c5:5f:98:7c:39:82:b6:72:fe:2b:c5:
         e4:e7:e4:96:64:e7:e4:f3:2e:23:2e:97:79:bd:8b:ca:31:39:
         54:df:28:6f:d4:aa:23:63:b4:dd:1b:4c:a7:ab:5b:fc:1e:a7:
         4d:e9:57:98:f2:8c:a6:92:e5:0f:77:32:43:42:6c:f0:73:cf:
         ca:70:9d:a7:67:d3:ef:b7:c2:b1:51:a6:23:1e:65:af:37:db:
         88:bc:35:d6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 20:55:28 2026 by rpki-client