Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3130332e32352e32362e302f32342d3234203d3e203633363134.roa
File:                     3130332e32352e32362e302f32342d3234203d3e203633363134.roa (raw, json)
Hash identifier:          Y36h7EsI0CzZ1VO8KJhB8fR0g7kvGS1N86G8x1f8YM4=
Subject key identifier:   D0:B5:14:12:17:F1:5C:2F:F2:0E:F4:AD:DE:9E:C3:02:08:1B:58:A9
Certificate issuer:       /CN=40D86726DB14F9E5E06610928FF6C77226F14874
Certificate serial:       33E0003F1C113B520C90F7AAC97E9A724BF9F41C
Authority key identifier: 40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3130332e32352e32362e302f32342d3234203d3e203633363134.roa
Signing time:             Mon 15 Jun 2026 01:55:57 +0000
ROA not before:           Mon 15 Jun 2026 01:50:57 +0000
ROA not after:            Mon 14 Jun 2027 01:55:57 +0000
asID:                     63614
IP address blocks:        103.25.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 08:29:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:e0:00:3f:1c:11:3b:52:0c:90:f7:aa:c9:7e:9a:72:4b:f9:f4:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40D86726DB14F9E5E06610928FF6C77226F14874
        Validity
            Not Before: Jun 15 01:50:57 2026 GMT
            Not After : Jun 14 01:55:57 2027 GMT
        Subject: CN=D0B5141217F15C2FF20EF4ADDE9EC302081B58A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a6:7d:80:d5:42:75:f1:27:cf:8d:2a:a5:69:
                    1e:09:89:d7:69:82:4e:2f:53:92:2b:05:ca:1c:7e:
                    c7:c0:a8:7a:f6:ef:2d:cb:37:5e:55:b6:9e:64:c0:
                    48:11:64:f4:2d:1f:e8:40:cf:5e:4e:ec:2e:19:9e:
                    2b:51:e6:be:02:e8:ed:9c:b4:b1:3c:d9:a7:f1:a4:
                    cb:2f:d1:bf:72:f5:ba:2d:56:4a:fa:27:45:72:f7:
                    62:80:f9:2c:e9:69:f5:a4:c8:3b:fd:87:f7:32:a1:
                    0c:ac:6e:e8:29:03:85:e8:0c:5a:ff:54:a3:1f:97:
                    c8:b8:bf:bd:ec:c1:ab:ef:a6:a8:70:14:21:2e:47:
                    76:a9:fe:0a:7f:94:c0:36:ae:fb:b8:f3:cc:f5:a7:
                    24:4e:00:70:db:72:62:3e:e4:4d:b1:b9:58:7e:cb:
                    95:78:5c:5e:48:09:ba:11:db:84:9f:4d:ff:17:0f:
                    c8:69:6b:ee:6b:2b:b0:9b:a8:fd:1d:4c:fa:1f:f1:
                    9b:49:86:08:d4:b8:93:7c:21:ab:f0:99:53:f1:2c:
                    34:62:f3:90:0b:62:5b:4d:35:f7:ec:f5:a9:dc:4f:
                    5a:5c:06:59:63:6f:bd:6c:a7:f1:02:f4:46:72:f7:
                    0a:72:60:44:cc:2a:96:a7:c5:18:12:ef:ce:40:0f:
                    66:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B5:14:12:17:F1:5C:2F:F2:0E:F4:AD:DE:9E:C3:02:08:1B:58:A9
            X509v3 Authority Key Identifier:
                keyid:40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3130332e32352e32362e302f32342d3234203d3e203633363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.25.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:08:05:58:13:4d:66:ad:fe:31:b5:ca:41:c9:de:d5:46:df:
         3c:7f:2f:a6:d9:87:cf:44:ed:5b:7d:8c:dd:01:fe:a4:c2:c3:
         e2:38:c6:50:47:09:a8:4b:20:10:c7:f2:40:b2:3f:67:e9:ac:
         13:18:ca:2b:85:6c:d6:a5:17:b6:55:32:a0:c5:1f:10:c5:8d:
         2e:9e:28:cf:e8:7a:5e:08:c3:cb:e7:3a:91:0a:ce:36:3f:dd:
         26:12:b3:a1:54:12:aa:c2:c8:57:ac:99:a3:90:07:33:bb:f2:
         08:84:d3:70:a9:aa:97:15:c0:81:4d:80:b5:80:18:fb:9f:33:
         6e:64:3d:bf:19:4c:82:f6:f3:0c:f3:81:e3:4d:f6:08:39:9c:
         b2:9e:ee:e3:b8:2c:bb:1f:d2:74:07:d7:f2:83:a6:6b:48:08:
         2c:95:f4:e3:9a:1e:cb:53:61:72:86:be:47:48:58:ea:7f:ab:
         a4:ee:2a:e8:d8:06:20:1b:ce:5d:d6:77:49:c5:f7:59:be:4c:
         bf:04:38:ec:1d:c7:79:30:95:6a:4d:ee:ae:ba:33:9a:98:dd:
         83:62:7c:04:71:a9:0c:b2:44:f0:1b:3c:62:cb:f0:c3:46:5a:
         68:61:ea:ef:93:2a:62:e2:61:e3:99:21:dc:31:33:ad:c0:09:
         0c:eb:97:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:51 2026 by rpki-client