Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3136302e3230322e3233322e302f32322d3232203d3e20313436383137.roa
File:                     3136302e3230322e3233322e302f32322d3232203d3e20313436383137.roa (raw, json)
Hash identifier:          Ev1AtazUd17GbcSSVxbDwjjW8LG1JlOSCb0kjyNkgGk=
Subject key identifier:   BE:65:F6:3A:FE:73:80:54:A3:74:92:6C:F5:25:2A:10:25:0B:98:3E
Certificate issuer:       /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial:       0F042C06B00D34CD7BF93C7F5E5C6A9B394BC33C
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3136302e3230322e3233322e302f32322d3232203d3e20313436383137.roa
Signing time:             Fri 08 May 2026 09:34:29 +0000
ROA not before:           Fri 08 May 2026 09:29:29 +0000
ROA not after:            Fri 07 May 2027 09:34:29 +0000
asID:                     146817
IP address blocks:        160.202.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:04:2c:06:b0:0d:34:cd:7b:f9:3c:7f:5e:5c:6a:9b:39:4b:c3:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
        Validity
            Not Before: May  8 09:29:29 2026 GMT
            Not After : May  7 09:34:29 2027 GMT
        Subject: CN=BE65F63AFE738054A374926CF5252A10250B983E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:77:d5:aa:db:d8:ba:98:99:11:cc:a8:36:f1:
                    67:76:eb:2e:5f:19:64:af:aa:37:7c:79:fb:d8:df:
                    cf:0c:40:b9:57:62:85:e4:60:42:0d:1b:6d:fb:6e:
                    ee:e1:29:1f:c1:f9:9c:8e:1d:ab:14:55:f7:6f:53:
                    a2:ec:2b:5b:43:bb:2d:a5:8b:38:a9:45:14:fa:17:
                    a8:eb:09:76:cb:ba:6c:72:d7:2b:6f:84:78:0f:7a:
                    90:9a:d1:25:31:74:2a:ad:b4:4e:86:5d:51:80:65:
                    f1:c1:85:77:36:4c:da:5d:63:a7:53:f0:b8:69:40:
                    c9:20:bb:e8:46:11:7c:e6:7d:65:46:37:75:3d:51:
                    22:8e:4e:9e:d9:ca:86:8c:a1:02:2b:6f:23:f6:c5:
                    21:c1:1e:68:e6:c7:bf:4b:6c:71:f6:73:b5:23:79:
                    ca:da:b5:ea:a4:85:73:ce:14:b7:74:29:45:21:a8:
                    60:db:68:de:21:a3:84:c8:12:93:64:9b:f3:d8:ac:
                    91:32:c9:9f:1d:34:81:71:02:a9:ff:65:f1:e0:cb:
                    c5:d4:43:30:d6:08:dc:ff:64:fa:5f:09:98:5d:c1:
                    91:8c:6e:87:10:70:b5:94:a0:a4:e5:af:b6:42:bb:
                    60:43:5e:1e:22:56:f0:90:41:e2:b2:f6:6e:3b:ea:
                    68:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:65:F6:3A:FE:73:80:54:A3:74:92:6C:F5:25:2A:10:25:0B:98:3E
            X509v3 Authority Key Identifier:
                keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3136302e3230322e3233322e302f32322d3232203d3e20313436383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.202.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:53:3a:84:9e:e5:0c:66:9e:12:b4:34:e4:67:98:41:7c:97:
         c6:7a:56:3f:3e:48:43:e9:dc:ba:2e:19:7b:aa:d3:30:26:ac:
         e0:f9:29:f8:21:e3:ed:33:7d:ae:5f:e1:5f:42:bd:58:59:4a:
         0e:5f:76:69:d3:1c:a9:52:8b:f6:f0:41:86:ba:e0:c8:50:d0:
         79:7a:eb:cc:99:6f:81:9a:52:68:2d:13:5e:c3:53:03:0e:65:
         84:02:a0:a9:23:c0:0c:18:b9:96:22:a3:fe:47:00:b8:0f:93:
         ed:ce:18:e8:6b:26:ca:8e:26:72:9a:a8:95:77:aa:51:e4:1c:
         16:39:0a:47:7d:e7:ae:4e:68:0d:9c:6f:e8:e6:92:60:b1:59:
         4e:0c:a2:4c:c8:66:01:91:56:62:1c:1b:b5:60:ab:bb:73:94:
         e5:61:91:7f:18:f6:12:13:1b:7a:63:6b:33:47:f8:3d:f1:95:
         3d:e0:b4:08:eb:75:03:31:2f:ea:6e:10:51:4b:51:0f:0c:40:
         e9:c7:28:7a:cf:70:f0:d6:55:6d:14:b8:ac:27:e6:65:2e:f8:
         26:06:9f:b8:73:a1:0d:f2:82:23:02:ca:33:73:56:28:77:77:
         a0:73:ac:5b:cc:49:54:66:46:e6:af:9c:f0:37:b2:b5:42:47:
         65:07:e0:7d
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUDwQsBrANNM17+Tx/XlxqmzlLwzwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1
RUJFMDM2MjAeFw0yNjA1MDgwOTI5MjlaFw0yNzA1MDcwOTM0MjlaMDMxMTAvBgNV
BAMTKEJFNjVGNjNBRkU3MzgwNTRBMzc0OTI2Q0Y1MjUyQTEwMjUwQjk4M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvd9Wq29i6mJkRzKg28Wd26y5f
GWSvqjd8efvY388MQLlXYoXkYEING237bu7hKR/B+ZyOHasUVfdvU6LsK1tDuy2l
izipRRT6F6jrCXbLumxy1ytvhHgPepCa0SUxdCqttE6GXVGAZfHBhXc2TNpdY6dT
8LhpQMkgu+hGEXzmfWVGN3U9USKOTp7ZyoaMoQIrbyP2xSHBHmjmx79LbHH2c7Uj
ecrateqkhXPOFLd0KUUhqGDbaN4ho4TIEpNkm/PYrJEyyZ8dNIFxAqn/ZfHgy8XU
QzDWCNz/ZPpfCZhdwZGMbocQcLWUoKTlr7ZCu2BDXh4iVvCQQeKy9m476mh9AgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUvmX2Ov5zgFSjdJJs9SUqECULmD4wHwYDVR0j
BBgwFoAUgl5cc7dVI2Pg+SJhrcY3WF6+A2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NTA1ODA3Mjk0MzkxOTExNy8wLzgyNUU1QzczQjc1NTIzNjNFMEY5MjI2MUFEQzYz
NzU4NUVCRTAzNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1RUJFMDM2Mi5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMTA1MDU4MDcyOTQzOTE5MTE3LzAvMzEzNjMwMmUz
MjMwMzIyZTMyMzMzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzQzNjM4MzEz
Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqDK6DANBgkqhkiG9w0BAQsFAAOCAQEASVM6hJ7lDGaeErQ0
5GeYQXyXxnpWPz5IQ+ncui4Ze6rTMCas4Pkp+CHj7TN9rl/hX0K9WFlKDl92adMc
qVKL9vBBhrrgyFDQeXrrzJlvgZpSaC0TXsNTAw5lhAKgqSPADBi5liKj/kcAuA+T
7c4Y6Gsmyo4mcpqolXeqUeQcFjkKR33nrk5oDZxv6OaSYLFZTgyiTMhmAZFWYhwb
tWCru3OU5WGRfxj2EhMbemNrM0f4PfGVPeC0COt1AzEv6m4QUUtRDwxA6ccoes9w
8NZVbRS4rCfmZS74JgafuHOhDfKCIwLKM3NWKHd3oHOsW8xJVGZG5q+c8DeytUJH
ZQfgfQ==
-----END CERTIFICATE-----
Generated at Wed May 13 20:55:15 2026 by rpki-client