Route Origin Authorization

$ rpki-client -vvf rpki.cernet.edu.cn/repo/cernet/2/3130332e3136352e3131302e302f32342d3234203d3e2034353338.roa
File:                     3130332e3136352e3131302e302f32342d3234203d3e2034353338.roa (raw, json)
Hash identifier:          4GNUb7g4foVVWkpdbjjuAmYvjUx/eQ01cUG+CD5JYfU=
Subject key identifier:   B2:19:24:19:F3:C8:35:D0:0D:8F:7D:6A:3D:F2:23:6A:01:B1:1D:27
Certificate issuer:       /CN=A91E5D610000/serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915
Certificate serial:       39109680791FFCA06E2494C5277596698268A880
Authority key identifier: 18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer
Subject info access:      rsync://rpki.cernet.edu.cn/repo/cernet/2/3130332e3136352e3131302e302f32342d3234203d3e2034353338.roa
Signing time:             Tue 14 Oct 2025 05:58:54 +0000
ROA not before:           Tue 14 Oct 2025 05:53:54 +0000
ROA not after:            Tue 13 Oct 2026 05:58:54 +0000
asID:                     4538
IP address blocks:        103.165.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl
                          rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Oct 2025 20:21:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:10:96:80:79:1f:fc:a0:6e:24:94:c5:27:75:96:69:82:68:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D610000, serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915
        Validity
            Not Before: Oct 14 05:53:54 2025 GMT
            Not After : Oct 13 05:58:54 2026 GMT
        Subject: CN=B2192419F3C835D00D8F7D6A3DF2236A01B11D27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9e:7e:50:f9:48:b9:d7:9c:4b:ea:a8:02:2e:
                    98:3e:b0:94:86:70:5d:61:92:d7:20:2f:b8:d1:df:
                    29:15:37:fd:fc:47:05:53:80:9b:d8:2e:8a:ec:bc:
                    99:54:f4:4b:05:df:c2:f2:50:e1:d9:4e:9b:35:aa:
                    5d:64:d8:2d:05:1d:52:c7:c6:ad:6e:ba:b2:bb:fa:
                    b3:37:6a:f3:ec:7d:48:00:18:86:72:f5:0a:a3:15:
                    eb:43:f0:e9:54:a7:fc:99:c2:eb:49:03:68:18:41:
                    b3:12:e1:ce:3a:60:b4:91:8c:f5:d2:3c:14:11:c7:
                    75:46:7f:e3:a9:46:46:ac:c9:e7:09:b2:41:fd:d8:
                    75:09:70:ab:80:15:03:76:07:2e:d7:d1:3e:be:2d:
                    a5:2d:db:62:12:3e:57:ed:4b:fd:c0:93:ca:47:fa:
                    5a:46:d7:0d:cf:58:3a:a5:18:23:7f:4d:2c:e2:5f:
                    af:5c:fa:69:94:34:1a:67:32:86:57:2a:88:bc:95:
                    b9:6a:32:5e:1c:fe:02:30:9f:0f:26:92:c0:96:3c:
                    6b:ce:b0:f4:e9:05:40:9d:60:3c:b9:bb:8d:b5:c2:
                    b8:61:89:69:bd:f3:6d:3b:de:26:69:96:c4:af:d5:
                    d5:ec:11:95:14:35:70:07:ef:33:5e:bf:bc:5d:86:
                    bd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:19:24:19:F3:C8:35:D0:0D:8F:7D:6A:3D:F2:23:6A:01:B1:1D:27
            X509v3 Authority Key Identifier:
                keyid:18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/3130332e3136352e3131302e302f32342d3234203d3e2034353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:2f:23:34:78:77:9c:f7:d3:6e:60:17:de:6d:c3:5d:6e:8f:
         31:bb:94:36:af:fd:a8:3c:e5:9c:39:00:9d:51:64:a3:dc:71:
         60:f1:64:02:ea:51:42:be:df:01:cc:05:4c:b8:81:84:e3:04:
         07:01:6f:e9:e1:4e:5d:1a:a8:ef:5f:5f:62:6e:8f:c8:a3:20:
         2d:11:4d:17:67:8a:ba:4f:e2:6e:3b:d5:22:cd:1a:af:98:63:
         c7:ac:d2:50:ae:61:11:74:f3:9d:c5:20:06:cb:97:64:23:f7:
         a9:43:8b:94:6f:7d:aa:e4:4a:cf:00:9c:ae:ef:38:18:a8:6d:
         39:ab:c8:14:ff:4a:60:a4:80:da:ff:e6:e1:ed:45:4f:59:b4:
         0b:d4:94:a8:db:f7:6c:29:a8:8f:53:dc:c1:f2:64:55:d7:64:
         90:06:56:b3:ce:58:1c:4b:8d:f0:66:75:b8:67:03:6c:92:1a:
         2e:4a:03:f6:a3:de:86:33:1d:da:c6:57:85:36:05:35:11:96:
         c4:5b:6c:af:25:cb:f0:fa:b9:dc:5e:5b:4d:ad:c9:84:fb:72:
         99:8d:a1:e2:b9:86:c4:ec:02:51:2b:a4:25:95:49:5c:ee:c9:
         9f:98:b2:f6:85:e9:77:24:07:e4:52:54:13:a6:10:45:02:96:
         ec:88:6e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:20:25 2025 by rpki-client