Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e39372e3134342e302f32322d3232203d3e20313436383137.roa
File:                     3130332e39372e3134342e302f32322d3232203d3e20313436383137.roa (raw, json)
Hash identifier:          9qI076FmwPLysc2gHQf4N/pymvayZSUTjOofuD/aJrw=
Subject key identifier:   49:B9:DE:8D:A1:5C:BB:0C:9B:84:4D:63:8C:F6:17:A7:D0:93:01:DE
Certificate issuer:       /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial:       546CEA643232D3725E8775F8090270FD620DBAD0
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e39372e3134342e302f32322d3232203d3e20313436383137.roa
Signing time:             Fri 08 May 2026 09:41:54 +0000
ROA not before:           Fri 08 May 2026 09:36:54 +0000
ROA not after:            Fri 07 May 2027 09:41:54 +0000
asID:                     146817
IP address blocks:        103.97.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:6c:ea:64:32:32:d3:72:5e:87:75:f8:09:02:70:fd:62:0d:ba:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
        Validity
            Not Before: May  8 09:36:54 2026 GMT
            Not After : May  7 09:41:54 2027 GMT
        Subject: CN=49B9DE8DA15CBB0C9B844D638CF617A7D09301DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7c:d3:a4:c4:0f:f4:6b:0a:9d:28:8c:8c:fd:
                    ec:19:a6:82:96:66:98:5e:13:4a:22:90:8c:85:3d:
                    01:8d:c0:97:23:30:2a:1b:bb:dc:e3:01:87:a5:73:
                    07:51:d8:e1:89:cc:3d:5f:1e:9d:7b:bb:5a:b9:00:
                    45:2e:92:7b:ee:2c:b7:eb:d0:a7:97:d3:b6:93:03:
                    08:d2:a0:f2:98:e7:0b:a9:48:17:3f:ed:9f:22:e1:
                    f9:24:1e:98:04:fd:55:05:f2:ed:9b:d0:48:73:ef:
                    19:b7:8b:44:93:5f:be:c0:30:2d:7b:1e:72:04:c0:
                    b3:8c:12:09:b7:2e:a4:3c:da:58:05:52:09:d3:a2:
                    2e:91:35:b3:06:1f:8f:c1:fa:cb:58:84:12:e1:6a:
                    ed:5e:b6:25:0a:64:1a:4d:36:a0:98:7d:36:ce:35:
                    4b:55:43:73:a0:09:88:11:e2:55:d1:42:bb:90:7b:
                    2b:01:ad:75:b7:a9:87:45:05:f8:15:35:80:66:4e:
                    00:79:f7:70:98:71:c7:40:f6:41:e9:51:f7:99:e9:
                    be:fe:af:0f:70:a9:b4:21:5c:7e:8f:2e:02:e3:45:
                    a9:75:bc:81:56:d0:08:5f:b5:b1:9c:25:ce:97:6e:
                    3e:4f:e9:27:6f:31:97:22:6d:ab:df:c3:98:19:9e:
                    58:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B9:DE:8D:A1:5C:BB:0C:9B:84:4D:63:8C:F6:17:A7:D0:93:01:DE
            X509v3 Authority Key Identifier:
                keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e39372e3134342e302f32322d3232203d3e20313436383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:10:0e:a2:71:10:b7:f6:c2:6e:8f:49:7e:15:6c:08:d8:ab:
         43:da:74:11:d4:98:53:09:c6:8c:34:a5:3d:a5:c3:38:9c:84:
         e4:5b:16:7f:0e:8a:c1:1a:b5:20:94:69:37:5e:b9:f4:f0:0d:
         8e:10:3e:f9:cd:3a:d9:a8:55:f3:3d:28:36:3f:dd:1c:79:b5:
         ff:8e:d3:24:72:8c:fa:48:70:eb:85:6a:38:4a:39:a7:a3:f7:
         5c:43:b5:1f:80:b6:d6:f7:34:e4:73:d8:ec:89:39:6f:5f:a5:
         e8:91:21:04:df:a8:ff:18:e1:88:2b:45:5d:f4:01:2d:13:9f:
         09:b4:74:42:76:45:fc:7b:a0:33:5d:8c:15:b8:0b:ee:60:ed:
         e1:e9:62:e5:1f:9b:1c:fb:10:bf:05:4d:f9:e6:77:d8:64:9e:
         1f:79:d4:0e:2f:02:ee:41:70:ca:a8:d6:1d:6a:40:69:5b:97:
         54:94:29:0c:dc:9b:d6:19:21:c2:18:f4:6e:14:16:87:e0:12:
         bc:47:65:ab:13:1d:59:99:f2:b3:50:2d:c7:a4:e9:d3:b3:c2:
         f1:96:d9:7b:4c:52:41:c1:92:cd:51:c2:21:b4:9d:8e:0a:6a:
         72:5e:4e:d9:57:d0:93:d6:07:09:ee:96:35:0c:a8:30:64:31:
         05:cd:74:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:20 2026 by rpki-client