Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e382e36382e302f32342d3234203d3e20313436383137.roa
File:                     3130332e382e36382e302f32342d3234203d3e20313436383137.roa (raw, json)
Hash identifier:          Hx2MXmijuaSPGBM1i/CzVPuvTPI12mllUdPXAJuFWeY=
Subject key identifier:   7B:DA:CD:F1:01:8B:23:7B:4C:47:D6:0E:3B:88:CE:15:A8:B8:64:E5
Certificate issuer:       /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial:       0580E73978D2166432F200326F77B77F34343CFD
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e382e36382e302f32342d3234203d3e20313436383137.roa
Signing time:             Fri 08 May 2026 09:34:29 +0000
ROA not before:           Fri 08 May 2026 09:29:29 +0000
ROA not after:            Fri 07 May 2027 09:34:29 +0000
asID:                     146817
IP address blocks:        103.8.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:80:e7:39:78:d2:16:64:32:f2:00:32:6f:77:b7:7f:34:34:3c:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
        Validity
            Not Before: May  8 09:29:29 2026 GMT
            Not After : May  7 09:34:29 2027 GMT
        Subject: CN=7BDACDF1018B237B4C47D60E3B88CE15A8B864E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:25:a3:80:2c:bc:8a:38:2f:e4:82:e4:97:0c:
                    24:8c:92:13:ac:84:86:90:a4:3d:8f:e6:84:a6:d1:
                    ce:19:12:fd:10:ad:42:7c:a4:67:6f:72:2b:58:6a:
                    4e:99:af:cd:01:15:91:22:1a:c6:0c:b7:50:0a:80:
                    52:f0:29:c9:b7:fe:2f:fa:a8:88:04:8c:45:0d:f6:
                    c3:c5:e7:65:0d:39:86:c7:68:5c:e1:60:49:c9:05:
                    62:bf:29:b5:4b:72:8f:4a:50:17:82:0f:dd:7c:d5:
                    41:67:e2:1d:ba:69:e4:04:e0:2e:3e:da:09:a6:d8:
                    92:dd:db:13:45:3c:36:99:c9:80:f8:67:41:c3:08:
                    7c:fa:44:ca:53:d3:ef:14:0e:8a:1b:2b:a5:6f:e7:
                    db:12:a0:46:ef:96:7c:d5:87:21:79:13:85:38:9b:
                    bc:7f:93:d8:ee:f7:ed:93:50:e4:5e:ac:ab:ab:c5:
                    a1:bc:5b:e1:40:16:98:cd:9c:1d:99:f5:84:2c:0c:
                    9a:48:cd:d2:8b:e5:33:d7:2b:b5:33:e9:0a:fc:13:
                    a0:c9:7c:9e:02:1e:58:72:90:97:44:2c:0c:23:d9:
                    da:48:7e:22:66:a1:a0:6d:a3:a6:f9:94:d2:99:7a:
                    b3:53:0a:5d:9e:5f:78:fd:25:b2:af:39:48:5f:ee:
                    d3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DA:CD:F1:01:8B:23:7B:4C:47:D6:0E:3B:88:CE:15:A8:B8:64:E5
            X509v3 Authority Key Identifier:
                keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e382e36382e302f32342d3234203d3e20313436383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.8.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ed:d1:15:c5:f1:5b:9c:ef:23:8c:67:a3:ca:ca:ed:7b:94:1e:
         62:70:92:61:da:24:62:23:62:a5:81:54:f3:67:aa:57:2f:f9:
         10:b4:03:1a:eb:48:a5:38:81:5f:7a:c6:c3:e9:2e:9b:74:81:
         31:d0:a9:4d:c0:ad:3b:8f:07:a8:f4:2c:0f:19:57:05:94:bb:
         d8:3b:82:ac:2f:74:8a:32:3f:f5:26:1d:d9:b0:7c:9e:b9:45:
         20:5d:2d:66:5b:55:ce:38:d3:7c:11:92:ef:ba:2e:52:0f:c8:
         b7:74:39:79:59:59:0c:fa:21:81:55:8d:c4:79:0e:9c:fe:60:
         87:f4:f4:38:c8:2b:81:6b:4d:15:ea:fc:ee:e3:b6:7b:fd:27:
         e5:1b:83:72:21:46:40:51:c3:32:b1:db:eb:b3:41:ae:42:de:
         a1:e4:cf:a5:52:4a:b3:ef:ae:82:00:c9:4b:29:48:ea:3f:01:
         3e:f5:59:36:64:7f:1f:61:45:88:e6:ca:71:89:88:59:01:c8:
         2a:7e:5c:99:26:d5:0a:54:5a:84:72:23:5c:0c:83:b3:ff:a2:
         bb:ca:1a:e6:36:68:d2:1b:1a:7f:1c:21:92:ee:a0:20:f4:93:
         f9:3d:00:1a:83:1a:13:30:8f:e6:d8:38:6a:4a:1c:8c:61:6a:
         f9:dd:98:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:27 2026 by rpki-client