Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135332e302f32342d3234203d3e20313333303333.roa
File:                     3130332e3234382e3135332e302f32342d3234203d3e20313333303333.roa (raw, json)
Hash identifier:          zylkQSDdSSl6QtRcDZGJs7GJMA91i9cQsqPB36TdA1c=
Subject key identifier:   67:F4:86:B9:26:6A:08:4D:66:8D:AE:96:68:7F:14:3D:66:20:7A:E3
Certificate issuer:       /CN=25C6596195B162409A5AFAA92570F258BAD3C42D
Certificate serial:       6ECE3C849AEA41A899668472112FDE2B7285AE8D
Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135332e302f32342d3234203d3e20313333303333.roa
Signing time:             Wed 23 Sep 2026 07:47:53 +0000
ROA not before:           Wed 23 Sep 2026 07:42:53 +0000
ROA not after:            Wed 22 Sep 2027 07:47:53 +0000
asID:                     133033
IP address blocks:        103.248.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 07:23:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ce:3c:84:9a:ea:41:a8:99:66:84:72:11:2f:de:2b:72:85:ae:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D
        Validity
            Not Before: Sep 23 07:42:53 2026 GMT
            Not After : Sep 22 07:47:53 2027 GMT
        Subject: CN=67F486B9266A084D668DAE96687F143D66207AE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6b:4b:bb:2d:b9:0a:1c:a2:6b:41:cf:40:7d:
                    68:06:f8:b8:96:76:77:7c:a4:43:ec:57:e2:fb:07:
                    64:62:52:7f:2b:ed:62:c3:8f:6d:27:72:bb:0a:8d:
                    25:f8:93:dd:f3:84:19:e1:ff:98:80:85:10:0d:a6:
                    81:cd:ba:0a:2d:fd:03:99:03:b1:7c:7f:a8:e5:e2:
                    ea:82:93:58:2b:9d:03:ed:e6:a8:8a:2c:1e:f4:34:
                    34:75:b3:83:2c:cb:bd:2a:00:31:37:40:7e:51:2e:
                    ae:56:fe:5f:34:df:e4:9f:40:af:b8:23:c2:60:9d:
                    c5:10:c5:1e:e9:fe:e2:c0:47:b3:8e:e3:3a:8a:79:
                    47:d4:14:4f:25:07:1e:e5:6d:1c:22:78:84:d0:58:
                    94:f2:45:54:53:96:a3:5b:11:30:12:26:99:eb:5c:
                    67:80:56:8e:e1:75:22:81:9e:79:d0:ae:bb:8e:46:
                    13:41:42:8a:60:de:e4:4a:a8:3a:54:97:62:89:1e:
                    93:1c:b6:90:3e:f3:d0:c2:54:57:99:49:56:64:a7:
                    d4:fd:b2:29:2a:96:4e:e8:ad:7b:f5:e0:8c:e2:a0:
                    45:b6:59:40:c7:2c:91:11:49:92:70:d0:56:43:1d:
                    f2:61:13:73:f8:3c:e2:ba:0f:1f:7a:60:96:98:d3:
                    05:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F4:86:B9:26:6A:08:4D:66:8D:AE:96:68:7F:14:3D:66:20:7A:E3
            X509v3 Authority Key Identifier:
                keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135332e302f32342d3234203d3e20313333303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:ba:d3:ef:fb:17:4a:f7:b2:d7:8d:94:cf:3c:51:7f:54:4a:
         0a:95:b9:7b:82:a4:82:da:c0:64:0a:77:3c:c4:78:60:71:8e:
         30:3a:45:31:b5:3e:ce:e1:8c:62:b9:ee:30:e4:1f:c7:0c:3b:
         98:61:bb:ec:2d:5f:b3:64:e3:5f:25:cf:ef:80:3b:f1:73:32:
         6d:db:48:f5:e5:49:59:3d:e6:b1:cc:3f:90:81:9f:bd:50:35:
         5b:e3:7d:71:25:98:18:29:eb:56:84:cb:75:91:f0:8d:34:68:
         f3:ad:b3:45:29:b2:f1:02:25:1a:a9:07:45:58:6f:f1:e6:d3:
         f0:f3:0e:e3:82:de:fd:35:a1:bd:0c:58:07:0b:aa:ea:13:8a:
         b4:5a:a2:27:23:cd:40:be:ce:59:e6:85:bd:1c:8f:82:12:48:
         ed:8a:67:d4:58:d5:0d:b0:d5:a2:61:67:4d:44:9f:d4:c9:1e:
         51:04:81:56:7e:89:c7:17:66:b7:5d:d3:07:5b:b0:71:35:d4:
         35:3f:be:14:4b:bf:c0:3b:ce:a6:91:70:82:75:a9:0d:bb:45:
         64:b1:55:6d:b3:eb:8d:aa:22:15:f0:8d:3f:81:23:0a:b4:dd:
         c7:29:4c:d5:8f:62:a8:d9:8d:82:9c:e0:6c:0b:ae:0c:c9:37:
         44:04:6b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 18:36:12 2026 by rpki-client