Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3131352e39322e302f32322d3232203d3e20313438393831.roa
File:                     3130332e3131352e39322e302f32322d3232203d3e20313438393831.roa (raw, json)
Hash identifier:          eOo9V3O807wN2PwqITvJHT+WU7SLBKJjyWgPwtqT8oU=
Subject key identifier:   39:35:44:8E:25:60:24:92:76:BE:DD:0F:87:2D:D8:37:04:98:05:55
Certificate issuer:       /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial:       0B5C980E0A3B56BE0462E5A52096B0097ED7E01D
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3131352e39322e302f32322d3232203d3e20313438393831.roa
Signing time:             Fri 29 May 2026 07:34:04 +0000
ROA not before:           Fri 29 May 2026 07:29:04 +0000
ROA not after:            Fri 28 May 2027 07:34:04 +0000
asID:                     148981
IP address blocks:        103.115.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 07:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:5c:98:0e:0a:3b:56:be:04:62:e5:a5:20:96:b0:09:7e:d7:e0:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
        Validity
            Not Before: May 29 07:29:04 2026 GMT
            Not After : May 28 07:34:04 2027 GMT
        Subject: CN=3935448E2560249276BEDD0F872DD83704980555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:dc:0a:7b:f2:5f:46:49:98:df:76:8c:65:e7:
                    d2:5c:0e:d6:10:7a:46:e6:74:ac:bb:7f:ed:2f:cd:
                    b9:56:95:6e:8d:b5:c6:c6:b4:fe:47:22:cb:5d:c2:
                    b0:c6:07:d9:5f:22:01:da:f7:25:00:4d:92:02:84:
                    b8:fe:84:0a:8a:e5:af:7d:98:18:ad:74:47:a5:f5:
                    23:08:5f:c3:bc:f9:6f:30:18:91:6b:7d:bb:0e:3b:
                    da:5d:52:48:f3:56:32:b1:c4:87:16:04:a0:62:91:
                    cb:3c:81:d5:42:74:e6:71:4e:3c:e3:13:12:ac:3b:
                    39:84:03:14:07:64:1a:d7:95:6b:45:44:5a:b1:1a:
                    b9:e5:fa:c8:55:df:67:25:8c:dc:8f:95:87:c3:93:
                    04:8a:83:cb:15:6e:58:a8:ef:86:a2:68:31:e8:a1:
                    30:81:53:78:d8:d7:1a:e1:13:a0:cf:40:d1:a9:c6:
                    e7:c3:94:a3:22:39:2a:b0:6a:da:68:5d:e9:68:cc:
                    53:2f:21:72:59:65:4d:f8:49:84:7e:f0:51:83:48:
                    2f:6f:c7:2d:b3:71:8c:7c:08:f1:dd:29:d3:6e:db:
                    9d:3f:87:ac:49:7c:01:44:fe:e8:a0:08:1e:46:a6:
                    fa:43:07:89:09:95:93:93:5e:6e:70:0e:e1:23:ac:
                    2d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:35:44:8E:25:60:24:92:76:BE:DD:0F:87:2D:D8:37:04:98:05:55
            X509v3 Authority Key Identifier:
                keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3131352e39322e302f32322d3232203d3e20313438393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:11:cd:81:bf:95:c3:ca:54:df:4c:5d:90:1b:35:9e:c1:36:
         9f:b9:cc:f6:d9:84:25:ad:03:c2:94:30:25:f1:9f:97:48:d8:
         ae:5b:e8:5d:14:9f:5b:20:6f:07:55:0b:26:dc:56:bb:a2:df:
         8d:cc:e9:10:0e:c3:88:03:32:6a:33:a9:73:bc:56:d7:ee:72:
         18:3b:c6:91:61:02:99:03:a1:79:8d:67:67:7b:74:f9:d1:fb:
         ad:10:f9:06:58:ca:0c:31:23:93:2e:bd:f8:83:d9:0b:10:8d:
         5c:a6:fb:1f:a2:1a:f3:ee:66:e0:1e:67:c4:bf:73:ec:1e:c5:
         45:f1:51:ec:3b:bd:3d:2c:d2:df:4e:c7:2e:a9:9f:67:80:74:
         6c:51:a8:da:9c:67:b8:d1:ec:f1:1b:5e:5a:2c:8f:73:20:da:
         a7:02:63:e3:94:14:89:1a:90:26:c2:6e:bd:b0:5f:7f:80:91:
         cc:da:25:96:84:97:36:5b:c3:da:02:f7:f6:a0:fd:d2:07:a9:
         8c:dd:aa:98:7b:92:fa:d6:40:58:7c:37:17:ba:27:1d:ea:7e:
         2c:f3:95:57:d6:9f:d7:77:9c:74:06:48:9f:03:65:5e:9a:af:
         3a:1b:2c:ea:ed:08:e0:1d:d2:b1:9e:e7:5a:aa:92:7c:5f:fe:
         5e:a5:b1:3b
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUC1yYDgo7Vr4EYuWlIJawCX7X4B0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1
RUJFMDM2MjAeFw0yNjA1MjkwNzI5MDRaFw0yNzA1MjgwNzM0MDRaMDMxMTAvBgNV
BAMTKDM5MzU0NDhFMjU2MDI0OTI3NkJFREQwRjg3MkREODM3MDQ5ODA1NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS3Ap78l9GSZjfdoxl59JcDtYQ
ekbmdKy7f+0vzblWlW6NtcbGtP5HIstdwrDGB9lfIgHa9yUATZIChLj+hAqK5a99
mBitdEel9SMIX8O8+W8wGJFrfbsOO9pdUkjzVjKxxIcWBKBikcs8gdVCdOZxTjzj
ExKsOzmEAxQHZBrXlWtFRFqxGrnl+shV32cljNyPlYfDkwSKg8sVblio74aiaDHo
oTCBU3jY1xrhE6DPQNGpxufDlKMiOSqwatpoXelozFMvIXJZZU34SYR+8FGDSC9v
xy2zcYx8CPHdKdNu250/h6xJfAFE/uigCB5GpvpDB4kJlZOTXm5wDuEjrC2lAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUOTVEjiVgJJJ2vt0Phy3YNwSYBVUwHwYDVR0j
BBgwFoAUgl5cc7dVI2Pg+SJhrcY3WF6+A2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NTA1ODA3Mjk0MzkxOTExNy8wLzgyNUU1QzczQjc1NTIzNjNFMEY5MjI2MUFEQzYz
NzU4NUVCRTAzNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1RUJFMDM2Mi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMDUwNTgwNzI5NDM5MTkxMTcvMC8zMTMwMzMyZTMx
MzEzNTJlMzkzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzQzODM5MzgzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmdzXDANBgkqhkiG9w0BAQsFAAOCAQEAdxHNgb+Vw8pU30xdkBs1
nsE2n7nM9tmEJa0DwpQwJfGfl0jYrlvoXRSfWyBvB1ULJtxWu6LfjczpEA7DiAMy
ajOpc7xW1+5yGDvGkWECmQOheY1nZ3t0+dH7rRD5BljKDDEjky69+IPZCxCNXKb7
H6Ia8+5m4B5nxL9z7B7FRfFR7Du9PSzS307HLqmfZ4B0bFGo2pxnuNHs8RteWiyP
cyDapwJj45QUiRqQJsJuvbBff4CRzNolloSXNlvD2gL39qD90gepjN2qmHuS+tZA
WHw3F7onHep+LPOVV9af13ecdAZInwNlXpqvOhss6u0I4B3SsZ7nWqqSfF/+XqWx
Ow==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:50 2026 by rpki-client