Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3139322e3134302e3136302e302f32322d3232203d3e20313436383137.roa
File:                     3139322e3134302e3136302e302f32322d3232203d3e20313436383137.roa (raw, json)
Hash identifier:          X0naB5KGB/WmiLiyNiG/M+kBrlHiJ5FnQtKXehbLTTE=
Subject key identifier:   87:14:A4:10:7B:E6:CE:5A:15:23:07:6D:81:A0:93:21:A8:57:FD:37
Certificate issuer:       /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial:       7D78214840DCE6AC6F53BE072C74D42C754A8CD0
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3139322e3134302e3136302e302f32322d3232203d3e20313436383137.roa
Signing time:             Fri 08 May 2026 09:47:16 +0000
ROA not before:           Fri 08 May 2026 09:42:16 +0000
ROA not after:            Fri 07 May 2027 09:47:16 +0000
asID:                     146817
IP address blocks:        192.140.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:78:21:48:40:dc:e6:ac:6f:53:be:07:2c:74:d4:2c:75:4a:8c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
        Validity
            Not Before: May  8 09:42:16 2026 GMT
            Not After : May  7 09:47:16 2027 GMT
        Subject: CN=8714A4107BE6CE5A1523076D81A09321A857FD37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:99:f8:3d:96:c4:11:ce:e1:4a:dc:62:f7:22:
                    36:c7:f0:13:d4:e4:2e:f4:ca:41:e4:88:e1:33:d1:
                    5c:f4:a4:fe:fd:12:c1:dc:c3:4c:6c:fc:3f:c4:c3:
                    a0:73:26:d7:91:34:39:e8:dd:81:28:3e:85:a1:9e:
                    68:9e:c2:94:5a:a1:19:9f:fb:20:8f:e7:c2:21:67:
                    0c:fb:83:bf:cd:8a:0f:cb:fe:47:5e:7e:1b:6b:93:
                    03:59:8d:90:7c:09:c6:78:3b:8a:2f:26:a0:68:50:
                    45:dc:d0:c3:df:82:bf:e2:54:e9:b1:27:a7:cc:13:
                    10:54:35:d3:4e:eb:51:fc:1a:19:ad:73:02:7f:d9:
                    76:d9:68:18:1d:d2:1e:78:6b:73:35:70:56:8d:05:
                    65:ba:48:3a:17:1a:6e:fa:3f:ca:4d:cb:5a:fb:e4:
                    28:2a:8f:ec:73:a8:6c:6a:7f:bc:de:10:bd:dc:6c:
                    72:c2:af:b9:b5:c4:ab:33:a5:e5:ea:7f:28:5d:dc:
                    93:4c:b3:98:99:ec:60:00:6f:e9:b7:11:cf:eb:6e:
                    b2:82:0e:b9:06:aa:29:42:56:7a:06:53:60:ff:1b:
                    80:28:cf:30:e6:dd:3d:64:cc:24:d8:ad:a1:98:44:
                    c7:22:d8:f3:96:c8:67:64:57:09:cc:db:4c:96:b8:
                    07:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:14:A4:10:7B:E6:CE:5A:15:23:07:6D:81:A0:93:21:A8:57:FD:37
            X509v3 Authority Key Identifier:
                keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3139322e3134302e3136302e302f32322d3232203d3e20313436383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:78:9f:27:5a:66:f0:cd:e4:be:83:c0:14:39:bc:f5:b1:8d:
         7d:15:46:b9:76:21:dd:15:ae:a4:49:3b:60:60:2d:33:c5:7b:
         f9:ee:dd:b9:32:66:3f:fc:0d:20:3b:ed:e8:1b:17:d9:53:eb:
         76:7c:8e:af:07:22:0e:e6:1e:a4:c5:7c:4d:30:23:7f:c2:c5:
         4c:9b:11:ce:93:91:f3:a6:dc:e2:b3:f6:dc:85:8d:59:4d:b1:
         15:55:17:a8:c0:f8:dc:70:08:90:04:cb:c6:13:e8:a5:6d:8a:
         3f:ba:98:9a:99:b7:61:b3:5b:e5:e9:c5:18:72:65:b4:a4:3b:
         52:ce:c2:4d:ef:9a:6d:9c:c0:e0:02:2f:78:15:8b:68:2e:36:
         74:46:e1:69:52:05:1d:94:1e:c1:2b:ec:59:2c:46:30:38:d4:
         7e:64:77:bb:ec:85:bf:2e:cf:0e:91:fe:c2:65:10:69:5d:3c:
         d5:5f:31:45:e1:bc:53:d4:b0:f8:2a:2a:ed:cd:82:04:ab:b4:
         10:cc:16:91:28:20:df:17:d9:6d:0a:e4:82:c9:e9:03:c0:cd:
         55:fc:a0:ef:e3:79:0e:c4:6a:80:c8:a5:da:9b:ce:d0:a3:d8:
         7d:d6:5f:ea:e8:78:26:8f:6f:92:ee:c3:18:62:36:eb:a1:ea:
         d8:a3:6c:1e
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUfXghSEDc5qxvU74HLHTULHVKjNAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1
RUJFMDM2MjAeFw0yNjA1MDgwOTQyMTZaFw0yNzA1MDcwOTQ3MTZaMDMxMTAvBgNV
BAMTKDg3MTRBNDEwN0JFNkNFNUExNTIzMDc2RDgxQTA5MzIxQTg1N0ZEMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdmfg9lsQRzuFK3GL3IjbH8BPU
5C70ykHkiOEz0Vz0pP79EsHcw0xs/D/Ew6BzJteRNDno3YEoPoWhnmiewpRaoRmf
+yCP58IhZwz7g7/Nig/L/kdefhtrkwNZjZB8CcZ4O4ovJqBoUEXc0MPfgr/iVOmx
J6fMExBUNdNO61H8GhmtcwJ/2XbZaBgd0h54a3M1cFaNBWW6SDoXGm76P8pNy1r7
5Cgqj+xzqGxqf7zeEL3cbHLCr7m1xKszpeXqfyhd3JNMs5iZ7GAAb+m3Ec/rbrKC
DrkGqilCVnoGU2D/G4AozzDm3T1kzCTYraGYRMci2POWyGdkVwnM20yWuAdRAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUhxSkEHvmzloVIwdtgaCTIahX/TcwHwYDVR0j
BBgwFoAUgl5cc7dVI2Pg+SJhrcY3WF6+A2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NTA1ODA3Mjk0MzkxOTExNy8wLzgyNUU1QzczQjc1NTIzNjNFMEY5MjI2MUFEQzYz
NzU4NUVCRTAzNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1RUJFMDM2Mi5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMTA1MDU4MDcyOTQzOTE5MTE3LzAvMzEzOTMyMmUz
MTM0MzAyZTMxMzYzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzQzNjM4MzEz
Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAsCMoDANBgkqhkiG9w0BAQsFAAOCAQEAgXifJ1pm8M3kvoPA
FDm89bGNfRVGuXYh3RWupEk7YGAtM8V7+e7duTJmP/wNIDvt6BsX2VPrdnyOrwci
DuYepMV8TTAjf8LFTJsRzpOR86bc4rP23IWNWU2xFVUXqMD43HAIkATLxhPopW2K
P7qYmpm3YbNb5enFGHJltKQ7Us7CTe+abZzA4AIveBWLaC42dEbhaVIFHZQewSvs
WSxGMDjUfmR3u+yFvy7PDpH+wmUQaV081V8xReG8U9Sw+Coq7c2CBKu0EMwWkSgg
3xfZbQrkgsnpA8DNVfyg7+N5DsRqgMil2pvO0KPYfdZf6uh4Jo9vku7DGGI266Hq
2KNsHg==
-----END CERTIFICATE-----
Generated at Wed May 13 20:55:14 2026 by rpki-client