Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3136302e3230322e3234302e302f32322d3232203d3e20313436383137.roa
File:                     3136302e3230322e3234302e302f32322d3232203d3e20313436383137.roa (raw, json)
Hash identifier:          wep7TLSeg9Fv9ykX5U+L4HkGm4DB7GUrJaYsS374Ap4=
Subject key identifier:   6F:C4:F0:07:AB:BB:72:13:5E:F5:25:CA:68:07:35:57:AB:5F:16:AD
Certificate issuer:       /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial:       5C0749FCFFFB740182DFF4C3CC25DA097E8791DF
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3136302e3230322e3234302e302f32322d3232203d3e20313436383137.roa
Signing time:             Fri 08 May 2026 09:41:54 +0000
ROA not before:           Fri 08 May 2026 09:36:54 +0000
ROA not after:            Fri 07 May 2027 09:41:54 +0000
asID:                     146817
IP address blocks:        160.202.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:07:49:fc:ff:fb:74:01:82:df:f4:c3:cc:25:da:09:7e:87:91:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
        Validity
            Not Before: May  8 09:36:54 2026 GMT
            Not After : May  7 09:41:54 2027 GMT
        Subject: CN=6FC4F007ABBB72135EF525CA68073557AB5F16AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7f:e0:15:9e:04:67:e4:9b:69:22:5f:a3:39:
                    73:a0:5d:22:d7:af:0d:dd:18:77:7e:93:81:65:93:
                    2a:dc:3c:18:cd:82:8f:c4:4c:f1:44:06:d0:24:3f:
                    76:86:a4:2a:c8:b7:8b:9e:73:91:79:75:0f:98:b9:
                    58:cd:98:0b:2b:9b:f2:9b:a9:cd:a7:df:fc:3c:fc:
                    a7:0a:47:64:e0:65:50:37:e3:ad:32:0a:88:8e:00:
                    a1:e3:a7:1c:64:dd:03:04:22:55:95:ad:34:41:4d:
                    c2:7c:0c:90:6c:1f:12:ff:14:1d:99:dd:c0:f7:40:
                    61:88:71:b5:56:c7:e8:67:8c:ce:a3:10:aa:01:93:
                    1b:70:5b:f6:c1:59:4d:f5:2d:82:5c:08:22:65:9e:
                    ba:14:88:b2:35:25:09:03:91:be:f0:04:40:d6:f3:
                    9a:10:73:54:77:f1:0d:2e:99:db:db:92:dc:64:3b:
                    a4:cc:25:c3:f7:95:e4:26:24:4b:ea:af:c1:38:e5:
                    d8:bd:e7:a8:f4:5d:d0:66:59:0c:f3:0e:97:7d:44:
                    bc:ac:ce:d2:73:b1:53:d6:01:6c:f2:23:18:f7:b1:
                    bf:18:fb:b5:f8:6a:d5:9a:bf:9d:94:fb:e2:5a:b9:
                    95:29:94:fb:c7:0c:78:41:ac:1f:50:1e:5d:02:ff:
                    b0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C4:F0:07:AB:BB:72:13:5E:F5:25:CA:68:07:35:57:AB:5F:16:AD
            X509v3 Authority Key Identifier:
                keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3136302e3230322e3234302e302f32322d3232203d3e20313436383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.202.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:3a:80:d8:5b:41:fe:54:66:84:77:21:1a:fb:b0:28:9b:71:
         cc:e5:f6:95:b9:2b:8e:af:ca:87:d9:fe:7e:eb:1d:90:46:44:
         cd:a3:41:41:cb:8a:fe:02:c9:1d:03:92:7e:7a:20:26:eb:ed:
         a6:02:10:03:80:b2:35:69:ab:92:bb:f1:6e:02:e4:c7:39:7f:
         f1:0b:71:cb:20:bc:c5:75:4e:d4:6c:51:b1:4c:9a:08:95:1f:
         92:a1:c3:c1:53:c7:fb:69:d8:92:0d:e5:c8:c0:dd:0b:ba:1c:
         48:44:f8:2a:45:04:b1:40:02:67:8e:c3:69:7a:38:00:b3:32:
         fc:b3:61:1f:72:16:a5:75:20:3b:15:99:79:94:47:ab:5b:a7:
         67:c1:6a:8a:f4:f4:94:6e:f3:5c:4b:4f:96:e4:02:b3:97:fb:
         14:0c:0a:59:18:07:3f:d5:85:e3:ec:8b:16:0c:a1:17:19:29:
         12:ec:74:33:51:05:f4:d2:9e:8e:b6:2e:72:e5:1c:c9:4a:ff:
         c9:2d:80:39:d1:20:93:65:6c:e7:1a:80:1a:eb:c9:9e:66:56:
         a5:05:a8:4d:87:e1:1a:ae:fa:ee:26:b9:bf:83:74:4c:68:1e:
         43:f9:8b:dd:30:b4:3d:bf:18:94:10:93:10:1d:bf:4f:93:83:
         18:62:43:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:13 2026 by rpki-client