Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3230322e3134302e3134302e302f32322d3232203d3e20313436383137.roa
File:                     3230322e3134302e3134302e302f32322d3232203d3e20313436383137.roa (raw, json)
Hash identifier:          MyPCaNpeCTGuax7UOWdpDvFItF9K0GPrHKXIXODGBhE=
Subject key identifier:   EB:95:3A:33:AF:CC:3F:66:B5:45:CB:01:57:55:7F:FD:A5:ED:ED:AF
Certificate issuer:       /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial:       3E639E1A99D566A70A5B58230FDC28EDC4E709B9
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3230322e3134302e3134302e302f32322d3232203d3e20313436383137.roa
Signing time:             Fri 08 May 2026 09:34:30 +0000
ROA not before:           Fri 08 May 2026 09:29:30 +0000
ROA not after:            Fri 07 May 2027 09:34:30 +0000
asID:                     146817
IP address blocks:        202.140.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:63:9e:1a:99:d5:66:a7:0a:5b:58:23:0f:dc:28:ed:c4:e7:09:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
        Validity
            Not Before: May  8 09:29:30 2026 GMT
            Not After : May  7 09:34:30 2027 GMT
        Subject: CN=EB953A33AFCC3F66B545CB0157557FFDA5EDEDAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:84:72:05:75:17:32:c0:9f:b9:ef:9e:f9:7b:
                    2c:35:25:b1:58:3c:15:0b:f9:8e:ff:83:ee:12:fb:
                    18:cb:2f:f9:c1:89:c1:b5:2b:65:65:36:85:80:41:
                    1d:69:eb:d6:c4:35:9f:88:f4:0b:05:0d:31:36:34:
                    fe:6c:5f:89:96:bf:ba:75:93:4e:87:1d:6b:74:77:
                    e3:84:b6:b9:a0:a3:c8:a6:9e:86:36:5b:34:f6:91:
                    68:a7:5e:5c:5b:78:d6:c8:f7:3b:df:57:63:5f:6f:
                    4d:0b:ff:f8:3f:23:1a:5b:28:d3:08:4b:54:66:b0:
                    ff:d3:69:5f:4a:b5:cd:48:e9:a8:3c:cc:fd:2a:bf:
                    eb:09:49:5e:88:fb:02:cb:3f:3f:24:18:8c:57:50:
                    d1:a1:fe:08:d6:07:db:4f:59:27:4c:eb:ba:e7:ba:
                    4d:2f:12:63:25:5b:27:c5:44:c5:24:81:b4:52:6f:
                    18:f6:63:52:16:78:89:a7:1e:9f:0d:c2:80:47:01:
                    cc:39:b7:9f:de:18:1b:2b:94:62:82:01:31:c8:56:
                    1d:ae:28:7b:ae:a7:22:eb:0e:80:76:1c:20:ec:6d:
                    3f:14:8f:98:d6:e7:4e:a3:83:d4:6b:1f:a6:cb:56:
                    43:f4:fa:3d:d8:45:bc:75:9b:ae:a5:ef:96:41:88:
                    e0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:95:3A:33:AF:CC:3F:66:B5:45:CB:01:57:55:7F:FD:A5:ED:ED:AF
            X509v3 Authority Key Identifier:
                keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3230322e3134302e3134302e302f32322d3232203d3e20313436383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.140.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:72:77:00:73:0c:24:d0:9e:1b:12:c3:5a:fd:91:2d:99:30:
         14:c7:d3:de:83:d9:6b:64:6a:86:e7:ce:7f:c0:1d:52:63:e8:
         75:39:4c:4a:34:a6:ea:31:b8:bf:8c:10:68:2e:2a:45:05:8f:
         30:dd:58:9b:8b:37:8d:e6:75:b8:da:82:ab:da:67:d1:4d:ef:
         c1:89:f0:ce:06:bc:74:46:94:b3:66:6d:f5:3f:a8:51:8e:e5:
         fe:5b:6e:ac:3d:f5:67:b7:dc:a4:71:8e:09:da:32:68:34:44:
         50:56:29:72:84:74:72:0e:8b:67:ba:97:1d:55:6a:58:dc:32:
         9b:44:93:ea:6b:47:be:66:06:7e:fb:f3:df:a0:23:8e:60:e4:
         47:64:cc:7b:35:ea:52:9c:eb:8a:f6:4c:70:36:3d:fd:ee:c7:
         e2:f0:a3:ad:e6:fb:07:79:a4:96:ab:42:59:c9:d7:5f:6f:b6:
         2c:0f:c6:b5:c9:18:ad:5e:96:a0:52:53:b2:2f:3c:6a:eb:2e:
         74:42:44:41:37:da:ed:64:e9:fb:d9:a9:2f:40:a8:64:28:9e:
         d2:73:18:ae:1e:56:61:7a:51:42:89:36:ac:4f:8e:6e:b5:9f:
         72:6a:de:41:01:14:e1:b5:54:36:67:d3:03:4c:4b:4c:04:8b:
         5d:91:29:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:12 2026 by rpki-client