Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3231302e31362e3138322e302f32342d3234203d3e20313436383137.roa
File:                     3231302e31362e3138322e302f32342d3234203d3e20313436383137.roa (raw, json)
Hash identifier:          lES7YRBzAI64/el0kli5agp2bouKSt4o0WpSofi9bsE=
Subject key identifier:   6F:46:E7:D4:8E:9D:C4:FF:AF:5D:E4:1F:8B:C3:66:58:BD:06:FE:ED
Certificate issuer:       /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial:       3F7446FD193B6D6F5341E21C54EC08D39D0B9021
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3231302e31362e3138322e302f32342d3234203d3e20313436383137.roa
Signing time:             Fri 08 May 2026 09:41:54 +0000
ROA not before:           Fri 08 May 2026 09:36:54 +0000
ROA not after:            Fri 07 May 2027 09:41:54 +0000
asID:                     146817
IP address blocks:        210.16.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:74:46:fd:19:3b:6d:6f:53:41:e2:1c:54:ec:08:d3:9d:0b:90:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
        Validity
            Not Before: May  8 09:36:54 2026 GMT
            Not After : May  7 09:41:54 2027 GMT
        Subject: CN=6F46E7D48E9DC4FFAF5DE41F8BC36658BD06FEED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:41:45:35:10:b4:db:03:7c:99:bd:0f:5c:5c:
                    c4:a3:7c:7f:ff:4d:71:42:51:f7:4e:85:35:ba:75:
                    af:a8:a9:ee:f6:4f:cc:24:6f:c9:f4:4c:77:65:d7:
                    c1:58:fe:28:62:06:b8:14:ca:bc:60:de:99:11:68:
                    62:20:96:ae:f7:a1:7c:5c:d1:ea:c3:21:c9:04:92:
                    f8:f6:78:68:d2:c8:f9:79:61:7d:0e:52:10:8f:fa:
                    9e:e2:fb:ec:6e:b6:5c:dc:48:19:6d:fb:21:b9:f5:
                    96:cb:6e:21:53:57:65:5f:dd:08:04:af:01:5c:14:
                    b2:d6:e8:e1:2b:f4:23:fc:66:77:c5:46:28:2a:0c:
                    c4:44:01:2d:a8:4a:a9:ac:97:9e:22:80:65:ca:07:
                    bf:89:ef:b9:7d:bc:e4:2c:c6:42:c8:3f:de:83:b6:
                    f0:e7:a8:68:84:8f:6b:80:de:85:30:ce:c3:72:3f:
                    f3:c1:52:70:76:db:8d:00:b0:57:da:29:50:ab:79:
                    b3:13:df:1a:2d:39:8b:72:1c:a9:5b:04:b4:a9:c6:
                    eb:ee:d7:aa:ab:ae:7b:24:09:d5:66:8c:20:8b:f3:
                    f5:b2:4a:c0:5d:25:e1:7d:bf:35:3a:23:79:b9:91:
                    17:37:37:7e:9a:bb:91:aa:d9:cf:55:7a:57:93:98:
                    f4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:46:E7:D4:8E:9D:C4:FF:AF:5D:E4:1F:8B:C3:66:58:BD:06:FE:ED
            X509v3 Authority Key Identifier:
                keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3231302e31362e3138322e302f32342d3234203d3e20313436383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.16.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:50:e3:c3:46:27:1a:ab:ea:3e:bc:9a:54:cd:7e:b4:b2:53:
         22:70:58:b0:0c:e0:fb:94:dd:9a:b5:79:df:44:53:3c:f9:10:
         c3:9f:67:14:39:54:01:f5:2a:38:1f:dc:9c:f4:6f:9b:8d:6d:
         db:6a:40:22:b0:15:d8:b9:29:89:09:77:5f:68:da:70:84:6c:
         1b:c8:42:cd:e9:6a:18:65:ee:01:35:c1:f2:83:bc:3f:b5:72:
         18:fd:3b:5a:38:b8:dd:37:7b:89:bb:21:be:21:d2:44:17:e5:
         68:22:cf:fd:4a:fa:e5:66:da:dd:42:a8:5b:c4:e9:08:c2:dc:
         f4:9b:68:b3:22:ed:45:25:27:f1:5e:2c:2b:64:e1:9e:b2:91:
         09:53:c5:09:bf:39:bd:76:15:3f:e1:b0:93:e2:a1:4f:40:03:
         df:92:3b:eb:48:78:ea:6a:bb:44:47:20:4c:01:e3:11:ed:10:
         8b:3b:1f:40:12:82:59:cf:e0:6c:e2:80:5d:6d:2e:2f:bf:fe:
         b4:25:11:48:ac:99:b5:f9:42:0b:16:34:4e:eb:d9:61:25:c4:
         bc:96:0b:9c:c4:8c:aa:ff:8e:fb:36:ee:f4:fe:a7:a3:9a:4b:
         5f:d6:e3:09:af:28:13:98:9f:b4:fd:65:4c:38:58:7d:3a:ce:
         5b:b8:36:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:18 2026 by rpki-client