Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098791527330611202/0/3130332e32352e36342e302f32332d3233203d3e2034383132.roa
File:                     3130332e32352e36342e302f32332d3233203d3e2034383132.roa (raw, json)
Hash identifier:          Nq6gNiMaaKFWixnw61ZZIDSmy1W/Glh2AAvq8ITBxjk=
Subject key identifier:   2C:E5:31:AB:37:17:61:63:EF:2E:F4:AA:94:75:4D:AC:F3:B7:92:30
Certificate issuer:       /CN=65339B7A6B7988AA6EF40EF864D58BFE051E018B
Certificate serial:       0A80622250C80C528EE2926B832CC87395C4DA91
Authority key identifier: 65:33:9B:7A:6B:79:88:AA:6E:F4:0E:F8:64:D5:8B:FE:05:1E:01:8B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/3130332e32352e36342e302f32332d3233203d3e2034383132.roa
Signing time:             Tue 21 Apr 2026 02:39:08 +0000
ROA not before:           Tue 21 Apr 2026 02:34:08 +0000
ROA not after:            Tue 20 Apr 2027 02:39:08 +0000
asID:                     4812
IP address blocks:        103.25.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 06:40:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:80:62:22:50:c8:0c:52:8e:e2:92:6b:83:2c:c8:73:95:c4:da:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65339B7A6B7988AA6EF40EF864D58BFE051E018B
        Validity
            Not Before: Apr 21 02:34:08 2026 GMT
            Not After : Apr 20 02:39:08 2027 GMT
        Subject: CN=2CE531AB37176163EF2EF4AA94754DACF3B79230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:36:e8:59:2d:94:61:9a:5b:20:94:99:ee:8d:
                    33:d3:57:d9:69:ee:f7:15:fd:5c:74:62:88:5b:36:
                    46:f9:48:5d:d0:92:f9:d7:ed:24:23:19:a5:78:4b:
                    3c:31:7b:bb:67:cb:aa:e8:52:2f:2c:d5:f4:7c:26:
                    49:8f:9e:8b:1c:c5:9c:6b:8d:df:6a:b7:31:eb:10:
                    81:df:93:d1:53:67:ad:56:87:6e:28:cd:50:08:ef:
                    e9:23:33:b6:2e:0b:54:cd:91:1d:54:b1:b9:88:9c:
                    c8:9b:74:21:72:12:17:1e:20:46:f7:08:7b:bd:41:
                    f2:46:97:b8:c0:86:01:63:0b:4c:7b:8d:f5:f4:5c:
                    0c:23:1b:d5:da:6f:36:7c:80:0a:30:61:81:c0:59:
                    fb:64:bd:d5:7c:23:73:1a:53:d7:e6:16:11:d1:84:
                    57:4e:96:b1:f5:72:e5:35:ac:20:db:7d:f4:6f:70:
                    1f:c5:1e:80:e4:66:c9:14:fd:a8:2a:ba:b1:aa:d8:
                    de:7d:e6:07:2f:e9:fd:03:06:ec:8c:27:9f:c4:7c:
                    5f:20:bf:e0:55:8e:09:04:ec:2a:c5:f5:47:7b:ed:
                    d3:cc:0d:32:fc:b8:e5:90:4b:f3:9a:b6:47:d4:e2:
                    5e:27:1b:fd:c8:59:e2:e8:9a:05:a8:9b:d9:9c:72:
                    b4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E5:31:AB:37:17:61:63:EF:2E:F4:AA:94:75:4D:AC:F3:B7:92:30
            X509v3 Authority Key Identifier:
                keyid:65:33:9B:7A:6B:79:88:AA:6E:F4:0E:F8:64:D5:8B:FE:05:1E:01:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/3130332e32352e36342e302f32332d3233203d3e2034383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.25.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:12:d7:e0:6d:ef:0c:6b:6f:ab:d4:ec:95:9b:7b:12:cd:f6:
         5f:16:e9:34:b9:65:77:2c:af:b0:c5:2d:86:e7:41:81:dc:2d:
         ba:d5:73:13:b8:66:eb:91:a6:cc:74:a2:2f:e7:ed:89:15:17:
         6b:ea:b3:6e:be:46:f6:4b:64:61:63:93:90:95:a0:59:ce:bc:
         07:0b:35:48:9a:2a:53:1a:b8:c5:16:9a:c4:39:4c:b3:98:78:
         30:fe:d2:c6:84:c0:78:c7:31:9e:d8:20:48:0e:bb:e0:c0:7c:
         c3:af:97:ea:66:2a:87:25:7a:d5:c7:15:3c:73:24:9d:96:85:
         06:2d:7e:19:90:31:be:12:af:6a:dd:b1:42:27:34:68:57:67:
         96:69:38:ec:f2:43:eb:f3:26:53:85:4a:c2:55:04:23:8b:4e:
         96:20:53:8e:7e:91:01:e9:9a:22:3f:4a:b4:0d:71:9c:19:ba:
         d0:5f:35:cd:f3:0d:da:a5:17:29:c0:61:65:48:fb:f8:ea:64:
         8b:07:84:35:7a:6b:5b:b4:97:30:fc:9d:b6:30:bc:9a:fb:cf:
         5a:1d:66:bb:e4:92:df:9d:d4:ae:ad:2c:83:02:0c:62:6b:99:
         74:7d:fa:27:e3:dd:ff:81:c4:26:3d:eb:e7:02:18:12:63:4f:
         6c:2b:55:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 08:24:36 2026 by rpki-client