Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3132352e3230382e31362e302f32312d3231203d3e20313436383137.roa
File:                     3132352e3230382e31362e302f32312d3231203d3e20313436383137.roa (raw, json)
Hash identifier:          Dlk6g1NHDrBSf4QjX8iyAsqfUdTBneZ30Pa+3zSlElU=
Subject key identifier:   6E:57:F8:7F:EA:4E:91:1F:FB:80:1D:22:D8:90:E6:AD:D6:48:CB:45
Certificate issuer:       /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial:       5CF3A7986FBA5F9AD7D935F0FA7D104255900066
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3132352e3230382e31362e302f32312d3231203d3e20313436383137.roa
Signing time:             Fri 08 May 2026 09:47:16 +0000
ROA not before:           Fri 08 May 2026 09:42:16 +0000
ROA not after:            Fri 07 May 2027 09:47:16 +0000
asID:                     146817
IP address blocks:        125.208.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f3:a7:98:6f:ba:5f:9a:d7:d9:35:f0:fa:7d:10:42:55:90:00:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
        Validity
            Not Before: May  8 09:42:16 2026 GMT
            Not After : May  7 09:47:16 2027 GMT
        Subject: CN=6E57F87FEA4E911FFB801D22D890E6ADD648CB45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b7:03:47:16:40:b5:a0:06:81:7d:92:ca:05:
                    56:3c:5e:88:43:cd:c7:b8:df:3d:93:ff:7d:b3:42:
                    d4:02:32:00:01:41:55:40:c4:12:bb:46:1e:51:d5:
                    2d:ea:02:92:c3:34:18:24:7b:0b:74:36:e0:7c:3f:
                    6d:9c:23:20:c3:cc:90:d3:5c:93:0e:e6:6e:16:46:
                    ef:68:8f:57:ab:5d:01:47:55:cb:2c:25:ac:55:03:
                    f8:84:eb:e1:68:84:04:a8:d5:33:b0:d7:35:78:de:
                    fc:f1:e5:b7:06:9a:6c:ba:f9:45:ba:33:57:05:c5:
                    e2:4b:b7:fe:c3:56:08:dd:7a:8a:34:00:2f:2d:43:
                    bb:69:88:8b:b2:03:4e:17:ac:ce:e4:04:62:cf:01:
                    13:f0:e7:0f:dd:2c:c4:8c:a6:a2:00:6e:b5:85:f9:
                    10:37:8f:e1:b5:32:af:b5:f8:5c:09:54:09:00:d7:
                    e8:e9:c8:93:d6:c7:f8:8c:14:ad:eb:68:51:fd:98:
                    4a:13:66:50:45:03:17:76:96:bb:56:f3:a3:5a:b7:
                    50:f6:30:9f:d1:76:d1:b6:1e:e6:56:e6:ac:05:f5:
                    13:6f:bd:7d:e4:17:02:f7:fc:87:38:ed:13:61:0d:
                    9f:65:20:bd:da:95:57:dd:ea:95:ec:c7:a7:9e:d8:
                    a2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:57:F8:7F:EA:4E:91:1F:FB:80:1D:22:D8:90:E6:AD:D6:48:CB:45
            X509v3 Authority Key Identifier:
                keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3132352e3230382e31362e302f32312d3231203d3e20313436383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.208.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d6:ef:8a:94:af:12:b0:b3:e4:34:43:95:63:6c:a6:6c:5c:49:
         01:88:f4:2c:d0:21:10:a9:34:1b:29:98:3a:06:10:99:de:5b:
         6d:7b:f1:66:a2:b7:ea:10:40:58:d7:7c:73:c9:4a:62:4a:7c:
         58:5a:18:df:34:8c:df:45:03:d3:88:ef:ef:1c:cb:f9:85:ed:
         56:49:9e:31:d2:00:7b:41:70:4e:2c:9e:2f:c8:80:20:00:42:
         32:da:c4:cb:c0:96:3e:b7:45:bd:a7:10:52:68:50:ba:1a:14:
         a7:e0:b3:af:4a:d0:e8:2b:80:61:dc:e3:64:7d:0e:2e:07:aa:
         9a:7c:f5:3c:dd:51:a4:e3:53:56:e3:d4:72:bc:fb:f5:07:e1:
         aa:5a:9b:26:b5:3a:b5:6a:96:ac:8e:86:84:31:37:87:50:2a:
         7a:b6:10:18:06:33:60:af:0e:ae:ad:65:95:80:c3:00:40:6b:
         81:7a:8a:87:c5:1f:43:0e:ae:9d:b8:fd:4d:33:50:b2:8a:37:
         2b:c3:2c:4f:52:04:07:1c:f8:1d:65:2d:16:a8:a7:7e:44:98:
         08:b1:b4:cb:b7:6c:96:ca:9d:a0:f3:5d:2c:39:65:85:cb:7e:
         fc:6d:ea:04:52:ce:72:87:24:67:09:41:99:b2:61:51:69:f6:
         16:9c:5f:dd
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUXPOnmG+6X5rX2TXw+n0QQlWQAGYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1
RUJFMDM2MjAeFw0yNjA1MDgwOTQyMTZaFw0yNzA1MDcwOTQ3MTZaMDMxMTAvBgNV
BAMTKDZFNTdGODdGRUE0RTkxMUZGQjgwMUQyMkQ4OTBFNkFERDY0OENCNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDtwNHFkC1oAaBfZLKBVY8XohD
zce43z2T/32zQtQCMgABQVVAxBK7Rh5R1S3qApLDNBgkewt0NuB8P22cIyDDzJDT
XJMO5m4WRu9oj1erXQFHVcssJaxVA/iE6+FohASo1TOw1zV43vzx5bcGmmy6+UW6
M1cFxeJLt/7DVgjdeoo0AC8tQ7tpiIuyA04XrM7kBGLPARPw5w/dLMSMpqIAbrWF
+RA3j+G1Mq+1+FwJVAkA1+jpyJPWx/iMFK3raFH9mEoTZlBFAxd2lrtW86Nat1D2
MJ/RdtG2HuZW5qwF9RNvvX3kFwL3/Ic47RNhDZ9lIL3alVfd6pXsx6ee2KKTAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUblf4f+pOkR/7gB0i2JDmrdZIy0UwHwYDVR0j
BBgwFoAUgl5cc7dVI2Pg+SJhrcY3WF6+A2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NTA1ODA3Mjk0MzkxOTExNy8wLzgyNUU1QzczQjc1NTIzNjNFMEY5MjI2MUFEQzYz
NzU4NUVCRTAzNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1RUJFMDM2Mi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMDUwNTgwNzI5NDM5MTkxMTcvMC8zMTMyMzUyZTMy
MzAzODJlMzEzNjJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMxMzQzNjM4MzEzNy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEA33QEDANBgkqhkiG9w0BAQsFAAOCAQEA1u+KlK8SsLPkNEOVY2ym
bFxJAYj0LNAhEKk0GymYOgYQmd5bbXvxZqK36hBAWNd8c8lKYkp8WFoY3zSM30UD
04jv7xzL+YXtVkmeMdIAe0FwTiyeL8iAIABCMtrEy8CWPrdFvacQUmhQuhoUp+Cz
r0rQ6CuAYdzjZH0OLgeqmnz1PN1RpONTVuPUcrz79QfhqlqbJrU6tWqWrI6GhDE3
h1AqerYQGAYzYK8Orq1llYDDAEBrgXqKh8UfQw6unbj9TTNQsoo3K8MsT1IEBxz4
HWUtFqinfkSYCLG0y7dslsqdoPNdLDllhct+/G3qBFLOcockZwlBmbJhUWn2Fpxf
3Q==
-----END CERTIFICATE-----
Generated at Wed May 13 20:55:20 2026 by rpki-client