Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3136302e3230322e3234342e302f32322d3232203d3e20313436383137.roa
File:                     3136302e3230322e3234342e302f32322d3232203d3e20313436383137.roa (raw, json)
Hash identifier:          IB/dOqtodYGlI1C0VMaXbRG6N8D98GNw9JHa9OWacTw=
Subject key identifier:   F6:B5:18:79:65:CF:1E:1C:E5:49:B2:75:44:41:22:34:85:FB:FA:BA
Certificate issuer:       /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial:       71E90E5ECE3D300DDBE45726AB6AE628EA3225E3
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3136302e3230322e3234342e302f32322d3232203d3e20313436383137.roa
Signing time:             Fri 08 May 2026 09:41:54 +0000
ROA not before:           Fri 08 May 2026 09:36:54 +0000
ROA not after:            Fri 07 May 2027 09:41:54 +0000
asID:                     146817
IP address blocks:        160.202.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:e9:0e:5e:ce:3d:30:0d:db:e4:57:26:ab:6a:e6:28:ea:32:25:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
        Validity
            Not Before: May  8 09:36:54 2026 GMT
            Not After : May  7 09:41:54 2027 GMT
        Subject: CN=F6B5187965CF1E1CE549B2754441223485FBFABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0b:98:59:c5:15:bd:90:ed:30:dd:1f:7e:41:
                    99:11:ae:5f:c0:d9:7c:0d:9a:90:3a:f9:bc:fc:f7:
                    86:dd:95:de:ab:c0:82:de:68:b2:58:9c:e7:44:c3:
                    75:f6:e7:83:37:33:b6:45:7a:69:09:92:6c:73:44:
                    cd:99:41:55:61:ad:37:fc:42:42:b6:7d:2f:08:33:
                    f3:8c:d8:0a:b9:8c:ca:c9:20:db:03:bf:71:b0:96:
                    2d:16:65:8d:45:ef:4d:93:74:10:d3:ac:c2:d8:8d:
                    2d:0a:71:82:0f:8e:81:cc:4d:60:1e:73:5b:99:f5:
                    b4:36:79:fb:e9:80:68:c6:45:e2:1e:5d:08:a9:b2:
                    f5:d2:e7:85:b5:35:61:58:b1:53:fb:b6:fe:ce:63:
                    18:88:03:1e:78:b2:6f:95:be:b0:b1:18:45:40:5f:
                    c0:7d:84:74:46:46:3c:14:24:24:5d:01:7a:3a:df:
                    80:44:8d:3f:83:ee:78:39:ea:47:98:0e:be:3e:84:
                    fb:fd:d3:da:fa:fd:5a:64:40:f4:a9:e9:94:3c:46:
                    87:6a:74:ae:22:22:53:3a:1f:76:1c:9a:38:95:db:
                    5b:42:8e:1a:8d:42:65:cf:e4:62:1a:df:90:0e:1e:
                    60:9b:5a:d3:a6:96:37:10:2d:cc:50:a2:35:63:2e:
                    05:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B5:18:79:65:CF:1E:1C:E5:49:B2:75:44:41:22:34:85:FB:FA:BA
            X509v3 Authority Key Identifier:
                keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3136302e3230322e3234342e302f32322d3232203d3e20313436383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.202.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:87:fb:43:d6:c4:fa:51:87:fe:d5:f6:ec:16:ee:75:5c:15:
         c8:7b:3f:03:7b:f3:a7:63:15:6a:ca:9d:4d:8c:88:cc:1e:0c:
         bb:97:6e:be:d9:80:3d:ae:06:97:9b:d3:5b:70:1c:b5:97:d9:
         14:b8:d1:5f:17:d1:26:4b:37:e6:cd:56:58:96:3d:4d:9d:bc:
         f5:69:da:fb:b8:4a:6f:ac:36:df:0d:b2:e1:1b:6a:0e:0b:6f:
         18:dc:7d:3d:c0:bb:23:59:4a:ca:8d:d6:92:c5:b6:dd:8f:b4:
         7c:f7:bc:75:7b:c2:23:7c:b0:99:0d:83:20:fc:69:2b:8b:38:
         68:08:02:7c:9f:f3:2d:07:35:09:89:f8:e2:06:90:a0:f7:08:
         09:7f:bf:35:4e:6b:87:cd:9a:91:b4:b4:b6:e6:8a:0d:fc:5e:
         04:65:7c:12:8b:81:b6:12:72:ed:c8:c6:e9:7b:59:62:e8:78:
         22:59:3c:f2:6b:96:8c:9b:6d:1b:d6:9d:ef:ab:1d:5e:55:82:
         68:cd:27:14:78:6a:16:de:9c:2b:5e:be:3e:16:9f:d3:34:af:
         a0:99:37:93:9e:1f:96:b2:b1:eb:05:3e:40:7e:c4:51:52:30:
         b9:46:ff:55:33:92:70:d4:66:20:f7:52:62:77:cb:4f:3b:9f:
         a7:9a:fd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:13 2026 by rpki-client