Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3130332e32352e32342e302f32322d3232203d3e203633363134.roa
File:                     3130332e32352e32342e302f32322d3232203d3e203633363134.roa (raw, json)
Hash identifier:          00/6JOZdkomWZNXgpcQVFz0wmg5iWQCIs2r23mxzWFA=
Subject key identifier:   79:71:65:06:16:09:B9:FE:2E:E9:13:29:36:F6:B9:CD:3B:D1:EC:83
Certificate issuer:       /CN=40D86726DB14F9E5E06610928FF6C77226F14874
Certificate serial:       67D4DF8C171EE693920F8CB6C4EC398614FD3347
Authority key identifier: 40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3130332e32352e32342e302f32322d3232203d3e203633363134.roa
Signing time:             Tue 12 May 2026 09:00:31 +0000
ROA not before:           Tue 12 May 2026 08:55:31 +0000
ROA not after:            Tue 11 May 2027 09:00:31 +0000
asID:                     63614
IP address blocks:        103.25.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:10:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:d4:df:8c:17:1e:e6:93:92:0f:8c:b6:c4:ec:39:86:14:fd:33:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40D86726DB14F9E5E06610928FF6C77226F14874
        Validity
            Not Before: May 12 08:55:31 2026 GMT
            Not After : May 11 09:00:31 2027 GMT
        Subject: CN=797165061609B9FE2EE9132936F6B9CD3BD1EC83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:50:04:a0:af:ca:f9:9e:0b:cd:c8:80:ce:57:
                    ff:e7:a1:42:8c:a0:56:8e:98:39:92:c9:64:d7:13:
                    22:ea:4e:2c:7f:7d:79:f9:70:3e:0f:53:17:58:96:
                    1d:6f:0a:da:b6:62:81:f1:cc:d9:79:e4:b5:5e:22:
                    23:cc:27:f8:d1:a9:27:a1:17:c5:59:26:ce:90:84:
                    64:cf:de:17:c6:5b:38:b2:5b:6a:ec:df:96:e9:c6:
                    97:85:38:9b:ba:ed:08:4e:20:bc:23:77:e0:05:38:
                    0a:ab:24:e4:80:e1:63:1e:04:ec:2c:8e:19:4a:6b:
                    f7:28:2a:5b:e9:b9:38:f4:c5:c5:34:5f:3b:35:fb:
                    bb:d2:62:5e:4a:39:28:30:5e:3c:1d:d3:58:2d:ef:
                    52:9c:f1:27:16:fc:6c:e4:28:15:39:68:f1:c6:2a:
                    d9:2e:82:80:c3:b5:1a:9c:2b:1b:29:e4:55:c4:7e:
                    20:0a:80:1b:39:8b:de:99:0d:ee:60:2f:a6:f6:fb:
                    f6:10:59:22:14:37:34:f9:54:5f:e4:44:6b:25:e1:
                    a5:cd:d0:b4:e8:c9:48:ba:2e:aa:7f:10:96:fa:a5:
                    80:c9:29:40:ef:6b:cf:4b:62:0a:93:ab:2e:24:a4:
                    ce:b9:f3:0f:fc:a7:42:56:68:dd:a1:e9:0b:03:2c:
                    81:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:71:65:06:16:09:B9:FE:2E:E9:13:29:36:F6:B9:CD:3B:D1:EC:83
            X509v3 Authority Key Identifier:
                keyid:40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3130332e32352e32342e302f32322d3232203d3e203633363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.25.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:bb:ca:45:25:0b:78:1a:dc:70:af:c3:52:b3:0a:6f:08:2f:
         57:70:eb:33:56:40:4e:5a:d8:6e:a3:52:93:b3:90:3f:af:f7:
         d4:d2:06:c2:55:71:bc:42:3e:c2:38:c9:c7:8b:82:34:44:6c:
         4a:62:49:b9:4f:01:4a:0c:38:c0:1e:05:4f:d1:45:9d:fa:4c:
         cc:58:dc:0c:b3:e1:56:06:ce:9f:6d:a3:69:3c:11:11:11:80:
         fa:e2:fb:64:7b:f4:a3:87:fa:bf:72:2a:05:7e:95:72:78:10:
         c6:8d:b2:8e:dd:ab:6a:a3:e7:15:a0:3b:d7:39:27:e1:9d:28:
         e3:3b:25:43:3a:23:04:1c:35:37:01:da:77:87:94:e2:ae:3a:
         ce:d6:a8:89:bd:f9:75:3d:35:1c:c2:7b:3b:53:de:fc:48:80:
         21:cf:82:30:af:de:d1:f6:c2:95:b2:7f:e1:44:50:91:14:16:
         d8:b3:83:e7:d0:37:b5:31:b8:4a:00:cb:28:6e:9b:c3:3a:04:
         37:62:a9:60:81:35:c6:9c:1c:99:59:e1:83:eb:18:86:2b:93:
         a4:ba:64:5b:34:84:b7:fe:fa:4d:0a:3e:f9:ef:b9:7f:2d:5a:
         ab:2b:df:f4:8e:50:ed:f7:10:b0:27:c7:15:43:aa:5e:06:c4:
         22:d3:c2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:31:23 2026 by rpki-client