Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135322e302f32332d3233203d3e2034383337.roa
File:                     3130332e3234382e3135322e302f32332d3233203d3e2034383337.roa (raw, json)
Hash identifier:          RjJHANjcAdvy65zfoA1JZXtiUKo0l8e+tJU+O7hVZOg=
Subject key identifier:   34:33:7C:63:27:61:C2:67:37:4F:23:FC:29:CB:FF:FB:37:40:52:38
Certificate issuer:       /CN=25C6596195B162409A5AFAA92570F258BAD3C42D
Certificate serial:       4D7FECFC359492707E84F2E455E447259152E592
Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135322e302f32332d3233203d3e2034383337.roa
Signing time:             Wed 03 Jun 2026 02:38:10 +0000
ROA not before:           Wed 03 Jun 2026 02:33:10 +0000
ROA not after:            Wed 02 Jun 2027 02:38:10 +0000
asID:                     4837
IP address blocks:        103.248.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 01:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:7f:ec:fc:35:94:92:70:7e:84:f2:e4:55:e4:47:25:91:52:e5:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D
        Validity
            Not Before: Jun  3 02:33:10 2026 GMT
            Not After : Jun  2 02:38:10 2027 GMT
        Subject: CN=34337C632761C267374F23FC29CBFFFB37405238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5e:b7:39:27:ca:f8:23:51:aa:50:e6:23:60:
                    4b:fb:a5:51:82:34:0e:bd:5c:00:91:0b:c9:aa:58:
                    49:6d:36:37:e7:4c:78:dd:34:26:e1:cf:b0:01:9d:
                    3e:92:c3:26:b5:b7:75:4a:d1:82:2d:99:fd:8a:27:
                    07:89:b0:62:49:0f:f9:3c:8f:2f:f7:63:7d:d4:e9:
                    22:d6:91:57:a2:f0:56:14:d4:c7:16:0c:40:23:65:
                    c5:a1:58:15:3c:45:e8:e7:9f:27:8f:fe:b2:53:6b:
                    2f:25:fa:fc:be:4c:ca:1f:b8:1e:9a:fd:19:fe:1e:
                    b7:f7:53:47:42:5c:dc:c1:30:dc:d8:e6:7d:f8:73:
                    40:65:a8:f8:53:09:9e:91:2d:fc:37:18:8d:ed:c9:
                    d8:70:f6:64:a2:e5:1b:ca:8c:df:06:ff:85:bf:93:
                    af:9b:a8:6e:de:02:e1:5d:32:ea:1c:3a:6a:2d:7d:
                    c9:c3:b0:50:cc:88:84:95:6f:a3:1c:4d:3f:e4:67:
                    b7:33:6e:25:a9:43:eb:ea:7e:44:57:43:03:87:12:
                    7a:2f:28:c6:cc:5e:56:1b:b0:62:0a:3f:30:03:cd:
                    0a:44:19:e8:6d:30:0f:07:18:8c:d8:30:8b:75:9e:
                    b0:f9:6b:39:6e:80:84:12:ba:23:e0:8c:52:16:25:
                    5f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:33:7C:63:27:61:C2:67:37:4F:23:FC:29:CB:FF:FB:37:40:52:38
            X509v3 Authority Key Identifier:
                keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135322e302f32332d3233203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:ee:0a:da:19:c2:33:e3:21:0c:e6:fb:e9:ff:23:11:99:4e:
         f3:d1:58:97:4a:2d:b9:63:8b:8c:03:bc:50:a9:6c:90:9d:d6:
         36:b9:c8:d9:50:64:83:f2:b7:e5:94:87:32:1a:75:3c:37:ba:
         78:50:66:42:3d:6c:07:fd:0f:93:4d:91:1c:00:e8:99:75:63:
         3a:40:c1:04:3c:11:66:13:23:55:65:e1:b3:a2:05:de:72:bf:
         cb:50:bb:d1:67:b9:fd:22:ea:ed:a8:e5:f8:42:4e:0a:ad:f0:
         f8:39:17:96:18:b6:cb:db:fe:8e:51:d6:19:47:00:5b:dd:db:
         23:b6:59:91:b3:5d:95:73:74:6b:a5:a5:04:85:77:fb:3c:73:
         ef:8b:ff:07:63:d8:d9:73:56:a5:10:da:b1:9b:ae:92:b9:7f:
         73:80:c3:5e:ae:a3:03:df:d5:34:a6:50:ae:ce:fd:0d:07:10:
         74:1f:e7:63:a4:2b:f7:6c:cf:57:77:47:0b:ee:15:02:41:2c:
         1b:30:be:f7:57:6f:22:04:69:a4:1b:a2:5c:2b:f3:ec:5c:f3:
         28:36:4a:f3:62:cb:b1:f5:cf:ac:e4:8f:be:21:65:d1:e6:23:
         98:91:6b:7f:68:7e:8b:4f:fa:ca:84:28:d8:0a:be:73:c4:e7:
         76:23:fe:31
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:31 2026 by rpki-client