Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3231302e31362e3138312e302f32342d3234203d3e20313436383137.roa
File:                     3231302e31362e3138312e302f32342d3234203d3e20313436383137.roa (raw, json)
Hash identifier:          AojAjDEStkNXEorssah5NzujjayFkDN4mx7kVEIgi00=
Subject key identifier:   40:F2:91:52:8D:3E:2F:C7:30:4E:79:BC:FB:9A:0D:C6:D4:89:6E:F6
Certificate issuer:       /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial:       6B728F4389D4A7D18EA1E12EC84E1CFFA30F4AF5
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3231302e31362e3138312e302f32342d3234203d3e20313436383137.roa
Signing time:             Fri 08 May 2026 09:41:55 +0000
ROA not before:           Fri 08 May 2026 09:36:55 +0000
ROA not after:            Fri 07 May 2027 09:41:55 +0000
asID:                     146817
IP address blocks:        210.16.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:72:8f:43:89:d4:a7:d1:8e:a1:e1:2e:c8:4e:1c:ff:a3:0f:4a:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
        Validity
            Not Before: May  8 09:36:55 2026 GMT
            Not After : May  7 09:41:55 2027 GMT
        Subject: CN=40F291528D3E2FC7304E79BCFB9A0DC6D4896EF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4a:09:11:6f:73:1a:51:cf:80:c9:84:e9:56:
                    98:b9:f0:44:de:57:4f:8a:25:1b:76:47:5d:50:bd:
                    46:0e:83:97:a4:8d:74:72:70:3f:58:93:55:b2:8f:
                    79:b4:2b:ac:64:4d:2c:b8:19:4b:83:62:f2:b4:33:
                    42:71:0b:7a:40:a5:b1:bb:60:4d:5e:63:5a:31:03:
                    35:26:6e:8d:58:a4:eb:12:df:81:31:df:1f:20:e4:
                    72:94:e5:01:8e:d9:27:c3:fe:06:ed:d6:fa:a5:29:
                    2a:35:3a:ea:3c:96:52:a7:b8:ef:5f:6f:39:28:6d:
                    97:ca:0a:cf:34:e2:2f:58:f0:c4:b5:90:06:3a:8e:
                    0b:2c:c5:ac:23:73:37:3a:1c:3a:13:51:d6:21:21:
                    e3:6e:cf:a6:e2:87:5b:11:96:6e:a7:00:99:fa:c8:
                    5e:73:7a:0d:72:5f:a1:f8:c5:f0:e6:2f:50:ba:d6:
                    e8:96:3e:ed:45:9e:e7:60:f2:82:ea:b9:1d:6d:b9:
                    32:8c:d7:34:3b:29:42:4c:ac:c0:4d:55:81:6b:dd:
                    98:70:83:47:27:29:f9:6b:97:5b:de:c8:b4:6e:ee:
                    2a:07:3b:1f:73:62:59:26:f2:b8:1f:df:04:0b:17:
                    87:24:3c:87:93:fa:5b:3d:6f:d4:ab:cb:78:96:5b:
                    f1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F2:91:52:8D:3E:2F:C7:30:4E:79:BC:FB:9A:0D:C6:D4:89:6E:F6
            X509v3 Authority Key Identifier:
                keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3231302e31362e3138312e302f32342d3234203d3e20313436383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.16.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:f0:6b:84:02:54:67:4f:d3:59:ef:44:7e:0e:5b:1e:c8:13:
         f1:bb:f6:f9:b5:42:4f:a5:68:c1:88:28:ae:d7:89:18:1d:51:
         ea:6d:d0:a8:54:42:09:1a:b3:7c:67:30:b8:98:d5:ec:b3:90:
         eb:5a:d7:fa:e2:5c:24:e3:7c:b7:8b:64:66:61:09:82:28:e4:
         50:4c:52:5f:bc:cd:7c:48:27:7d:09:0b:eb:21:84:bd:ce:9e:
         82:e6:59:7e:b4:36:d4:be:c0:59:40:ad:e4:66:f5:cd:45:4f:
         5f:f0:99:0a:8b:19:38:01:3f:1e:83:90:51:8c:f0:b5:cf:0c:
         df:84:d6:82:40:63:3b:2c:0a:a4:c5:f1:11:c9:01:dc:85:1f:
         d4:f7:31:57:7f:ec:cc:e8:2f:4c:d2:a0:54:cb:49:04:b3:73:
         55:4d:79:62:1b:9a:25:8f:a2:43:3a:55:d5:11:71:6c:7d:e5:
         41:c9:34:2a:51:6c:f6:75:8b:8e:1e:6f:f3:58:a1:67:24:4e:
         73:0d:f7:50:8f:32:18:bb:d3:73:92:ae:0f:65:0c:1b:a7:98:
         16:50:5d:b9:39:7c:90:8d:0b:7d:d0:a9:89:03:55:55:99:a6:
         3b:01:c3:98:7b:a9:96:81:f2:0f:4d:3d:de:ad:b6:05:90:1f:
         49:a8:0d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:19 2026 by rpki-client