Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e39392e3130342e302f32322d3232203d3e20313436383137.roa
File:                     3130332e39392e3130342e302f32322d3232203d3e20313436383137.roa (raw, json)
Hash identifier:          +QtBZWfH67MKuKQeoUp/ay8mRFZbdn+E47woNclsP5A=
Subject key identifier:   7F:18:C2:8C:A1:64:E4:3A:BF:C1:76:78:81:66:1F:76:EE:B2:E0:22
Certificate issuer:       /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial:       607FEA028E17A21F05C509C7396E3AED1FD2867C
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e39392e3130342e302f32322d3232203d3e20313436383137.roa
Signing time:             Fri 08 May 2026 09:41:54 +0000
ROA not before:           Fri 08 May 2026 09:36:54 +0000
ROA not after:            Fri 07 May 2027 09:41:54 +0000
asID:                     146817
IP address blocks:        103.99.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:7f:ea:02:8e:17:a2:1f:05:c5:09:c7:39:6e:3a:ed:1f:d2:86:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
        Validity
            Not Before: May  8 09:36:54 2026 GMT
            Not After : May  7 09:41:54 2027 GMT
        Subject: CN=7F18C28CA164E43ABFC1767881661F76EEB2E022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7e:ff:ce:51:92:b8:b5:0d:d1:19:5b:95:99:
                    96:73:f3:f1:a6:43:e4:ed:5f:65:e7:af:bd:7e:17:
                    2e:a1:8b:61:8c:67:3a:2e:4a:67:94:f9:73:81:90:
                    36:6a:66:5d:7c:1b:81:8e:11:7f:c9:00:c8:50:96:
                    11:b4:62:4d:13:3d:48:40:d7:9f:e2:1d:a2:e2:5a:
                    24:e2:b7:e2:21:67:bf:12:65:21:aa:c3:97:88:7e:
                    8d:0b:51:ce:ce:58:70:ef:6f:12:95:7f:85:bd:85:
                    9a:0a:da:87:23:b1:bb:18:da:b1:77:7b:22:df:8b:
                    4d:33:dc:df:c2:7f:61:d1:5b:ad:29:f2:4a:75:70:
                    9b:00:0b:7e:7b:16:d6:15:6e:ce:5d:08:50:38:f9:
                    b1:9a:8b:78:98:03:d7:49:58:30:cb:fa:71:c7:c5:
                    12:61:df:3d:01:ad:4a:48:fd:cc:6c:00:52:21:94:
                    d7:64:10:4e:48:30:ca:af:80:9d:46:3e:fa:4e:13:
                    36:95:19:b3:4a:5f:58:4d:d8:cb:a2:22:c2:05:c5:
                    cf:3c:a7:ff:e5:d2:de:e2:91:2a:cb:0c:1b:5a:25:
                    07:b7:0f:e8:72:d3:9c:4d:ba:e9:79:ce:72:1f:c7:
                    6d:69:77:f9:54:1c:3f:ee:9c:9b:b5:79:37:60:8b:
                    f1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:18:C2:8C:A1:64:E4:3A:BF:C1:76:78:81:66:1F:76:EE:B2:E0:22
            X509v3 Authority Key Identifier:
                keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e39392e3130342e302f32322d3232203d3e20313436383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:27:3b:7e:b0:06:81:d2:6e:b1:c6:4a:54:07:7c:b9:e0:96:
         00:b9:71:1b:37:29:9b:17:2d:38:2f:9a:72:f4:81:37:52:32:
         6a:7a:23:d8:c0:5a:b6:77:84:58:74:40:0f:51:05:2a:4a:93:
         ee:8f:6c:a0:6c:80:10:d5:9d:b5:4e:f9:3b:b0:b4:a5:a7:6a:
         38:6f:f9:6b:96:f1:98:c0:1b:9a:48:33:2f:e1:9b:a9:90:17:
         0e:cc:42:d0:75:62:29:33:ab:20:79:b9:41:44:d1:ae:f7:cc:
         c4:aa:51:12:42:44:99:0d:4c:d3:b1:9f:dd:78:64:61:71:b0:
         36:d2:b9:2d:02:bb:0c:54:1d:80:97:da:dd:1e:cd:a6:8f:ba:
         9f:5f:a2:f6:c4:08:73:9a:26:e0:8c:43:e2:8c:83:57:1e:aa:
         a7:71:19:ce:0f:ac:39:6a:f5:ca:7b:6c:6e:21:7e:fe:f9:1e:
         ba:87:75:0c:91:ad:74:23:67:34:00:4f:cd:9e:ab:ab:ec:2e:
         d8:cc:2d:02:c8:91:db:a5:47:3d:ac:8a:77:95:e1:18:ba:7a:
         a4:96:44:46:5f:25:08:ab:c4:ba:03:15:8b:0d:53:75:fb:1d:
         44:70:84:41:ef:09:f8:01:0d:4a:af:79:88:c7:ba:26:d4:9f:
         8e:66:c3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:20 2026 by rpki-client