Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3139322e3134302e3138302e302f32322d3232203d3e20313436383137.roa
File:                     3139322e3134302e3138302e302f32322d3232203d3e20313436383137.roa (raw, json)
Hash identifier:          Sy+ckxZI6K4TLKp+vfCtIDN1zgeemHGV3AfNn3ZD4xc=
Subject key identifier:   64:FC:0E:53:B3:39:F9:75:32:6F:59:C5:D3:4C:11:FF:9C:48:B7:27
Certificate issuer:       /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial:       50AAA1922AD4625140FF44189BCDAAA8ACD1500F
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3139322e3134302e3138302e302f32322d3232203d3e20313436383137.roa
Signing time:             Fri 08 May 2026 09:47:16 +0000
ROA not before:           Fri 08 May 2026 09:42:16 +0000
ROA not after:            Fri 07 May 2027 09:47:16 +0000
asID:                     146817
IP address blocks:        192.140.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:aa:a1:92:2a:d4:62:51:40:ff:44:18:9b:cd:aa:a8:ac:d1:50:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
        Validity
            Not Before: May  8 09:42:16 2026 GMT
            Not After : May  7 09:47:16 2027 GMT
        Subject: CN=64FC0E53B339F975326F59C5D34C11FF9C48B727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:65:6b:19:9f:33:b9:17:8f:37:f1:a9:b4:c9:
                    74:e6:be:38:c6:55:78:3f:77:d0:b0:77:20:56:f4:
                    9e:7b:70:1c:ad:63:cc:9b:59:ea:8d:51:bb:e4:32:
                    47:ca:26:fa:ff:46:75:6a:b4:95:23:96:2f:f9:9f:
                    05:23:36:63:77:bb:b8:80:d8:67:94:4f:28:a1:0c:
                    30:e3:9d:ec:ee:d8:99:b8:80:ef:f7:8c:b9:67:5d:
                    f5:5c:c4:70:f9:df:96:6e:3b:3d:b2:38:07:b2:7c:
                    f9:75:d2:94:63:51:70:65:b7:42:dc:eb:5a:bd:82:
                    83:09:7a:dd:99:da:98:36:49:9d:66:05:f5:99:41:
                    e8:b7:5a:ce:ce:02:ed:fb:1e:ea:f1:31:75:b6:34:
                    02:50:45:9c:2b:24:3c:b7:1c:2b:1a:5b:bf:a2:90:
                    eb:63:f9:ad:b0:84:b7:0a:8a:8c:d9:6e:ef:db:93:
                    f0:dd:64:f7:8c:60:18:af:b4:df:7c:c1:e8:56:0f:
                    84:39:14:d5:92:f5:ff:fb:ff:9e:38:08:db:bd:2b:
                    42:cd:21:88:00:44:6c:e2:35:9e:81:6d:85:a2:9f:
                    29:7c:06:81:68:82:c4:f8:73:cc:cf:84:89:d1:93:
                    56:a8:c1:49:6a:90:b9:e2:ae:73:39:ab:73:b0:fd:
                    f0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:FC:0E:53:B3:39:F9:75:32:6F:59:C5:D3:4C:11:FF:9C:48:B7:27
            X509v3 Authority Key Identifier:
                keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3139322e3134302e3138302e302f32322d3232203d3e20313436383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ed:d5:dc:20:7b:6b:25:86:2d:a7:a2:0f:27:b5:49:67:17:e4:
         7e:d0:04:1a:3c:d8:7a:07:93:e8:37:c2:17:53:55:33:fc:60:
         ac:d4:6d:9c:76:7a:50:9e:12:3c:1a:22:6a:40:cd:c9:c1:87:
         46:6d:a9:67:0e:1b:f3:a3:e7:ce:2b:85:e8:70:bc:33:80:01:
         c6:9b:00:30:5d:21:1c:19:92:a1:4e:87:a2:26:e8:2b:38:74:
         3c:39:ff:7c:c3:79:ac:64:9f:92:17:14:90:1e:2e:8a:87:88:
         a2:9d:33:66:57:59:77:99:ef:8e:e7:52:4c:4f:1e:11:c0:d2:
         21:f3:c1:95:1b:be:54:1e:02:21:4d:57:28:31:fc:dd:13:f8:
         a5:a1:e1:5e:d2:a7:f6:bb:a7:69:dc:4e:4a:98:6f:91:e6:9d:
         47:f2:71:a4:2c:2d:3c:05:61:58:4d:0d:dd:64:33:f5:ac:c7:
         a8:63:27:d4:93:de:53:c2:5e:89:a2:b2:ba:bf:95:21:6f:e6:
         fb:27:d6:1b:f1:9d:2a:2a:10:32:37:ca:1d:f5:22:80:62:58:
         48:e4:83:8b:fc:8e:80:38:e9:8c:60:fe:4e:0b:63:35:8d:49:
         0e:21:77:a3:6c:dc:5f:6c:b9:8b:d9:3e:52:72:f1:08:88:af:
         18:88:ec:c8
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUUKqhkirUYlFA/0QYm82qqKzRUA8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1
RUJFMDM2MjAeFw0yNjA1MDgwOTQyMTZaFw0yNzA1MDcwOTQ3MTZaMDMxMTAvBgNV
BAMTKDY0RkMwRTUzQjMzOUY5NzUzMjZGNTlDNUQzNEMxMUZGOUM0OEI3MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPZWsZnzO5F4838am0yXTmvjjG
VXg/d9CwdyBW9J57cBytY8ybWeqNUbvkMkfKJvr/RnVqtJUjli/5nwUjNmN3u7iA
2GeUTyihDDDjnezu2Jm4gO/3jLlnXfVcxHD535ZuOz2yOAeyfPl10pRjUXBlt0Lc
61q9goMJet2Z2pg2SZ1mBfWZQei3Ws7OAu37HurxMXW2NAJQRZwrJDy3HCsaW7+i
kOtj+a2whLcKiozZbu/bk/DdZPeMYBivtN98wehWD4Q5FNWS9f/7/544CNu9K0LN
IYgARGziNZ6BbYWinyl8BoFogsT4c8zPhInRk1aowUlqkLnirnM5q3Ow/fDBAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUZPwOU7M5+XUyb1nF00wR/5xItycwHwYDVR0j
BBgwFoAUgl5cc7dVI2Pg+SJhrcY3WF6+A2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NTA1ODA3Mjk0MzkxOTExNy8wLzgyNUU1QzczQjc1NTIzNjNFMEY5MjI2MUFEQzYz
NzU4NUVCRTAzNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1RUJFMDM2Mi5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMTA1MDU4MDcyOTQzOTE5MTE3LzAvMzEzOTMyMmUz
MTM0MzAyZTMxMzgzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzQzNjM4MzEz
Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAsCMtDANBgkqhkiG9w0BAQsFAAOCAQEA7dXcIHtrJYYtp6IP
J7VJZxfkftAEGjzYegeT6DfCF1NVM/xgrNRtnHZ6UJ4SPBoiakDNycGHRm2pZw4b
86PnziuF6HC8M4ABxpsAMF0hHBmSoU6HoiboKzh0PDn/fMN5rGSfkhcUkB4uioeI
op0zZldZd5nvjudSTE8eEcDSIfPBlRu+VB4CIU1XKDH83RP4paHhXtKn9runadxO
SphvkeadR/JxpCwtPAVhWE0N3WQz9azHqGMn1JPeU8JeiaKyur+VIW/m+yfWG/Gd
KioQMjfKHfUigGJYSOSDi/yOgDjpjGD+TgtjNY1JDiF3o2zcX2y5i9k+UnLxCIiv
GIjsyA==
-----END CERTIFICATE-----
Generated at Wed May 13 20:55:13 2026 by rpki-client