Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135332e302f32342d3234203d3e2034383337.roa
File:                     3130332e3234382e3135332e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier:          YySm2cg/E+3trgCgazleVF/zeEgC2VFWmTffoSCCZPM=
Subject key identifier:   EE:25:AF:99:1E:FD:F2:5D:F2:C3:CD:E1:DE:E2:25:07:DC:74:99:CE
Certificate issuer:       /CN=25C6596195B162409A5AFAA92570F258BAD3C42D
Certificate serial:       18D21AD7471F80ED0A93D87C41B1E25560AE2D68
Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135332e302f32342d3234203d3e2034383337.roa
Signing time:             Wed 15 Apr 2026 14:51:09 +0000
ROA not before:           Wed 15 Apr 2026 14:46:09 +0000
ROA not after:            Wed 14 Apr 2027 14:51:09 +0000
asID:                     4837
IP address blocks:        103.248.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 14:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d2:1a:d7:47:1f:80:ed:0a:93:d8:7c:41:b1:e2:55:60:ae:2d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D
        Validity
            Not Before: Apr 15 14:46:09 2026 GMT
            Not After : Apr 14 14:51:09 2027 GMT
        Subject: CN=EE25AF991EFDF25DF2C3CDE1DEE22507DC7499CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:92:19:00:4e:c6:35:b4:48:e9:df:1c:63:91:
                    27:2d:81:49:7f:29:db:5c:82:fe:37:04:cd:7a:98:
                    dc:ff:07:d3:1c:4d:65:e1:98:c6:51:2b:77:84:6e:
                    be:dc:94:1e:87:29:37:68:44:a3:cb:e4:b7:c5:ef:
                    e6:5f:bf:be:e5:0d:2b:56:c7:db:f2:64:5e:1f:b8:
                    07:c7:18:0a:e5:4d:de:54:bf:ac:e8:2f:ec:15:e2:
                    67:e8:ed:8e:fe:45:a6:74:24:65:66:a5:82:b7:a0:
                    29:0c:98:fc:a5:d9:93:6a:77:69:b6:ff:09:55:71:
                    ec:d8:03:8a:9f:43:7f:3d:71:39:ac:c0:e4:fa:5d:
                    31:27:3a:ed:03:c3:83:77:3b:45:8b:1a:c1:f6:b6:
                    f8:81:f4:3a:c1:53:fb:ef:a6:ba:cb:62:78:bf:04:
                    71:49:3d:6e:10:d7:f4:83:4e:98:c9:6c:44:49:1e:
                    0a:18:28:3f:f3:27:77:b2:24:d1:27:c9:58:d4:8a:
                    f3:85:5d:76:bc:5d:54:b5:83:8a:10:86:ef:d0:6a:
                    53:7e:1b:ca:c1:90:09:ac:f6:21:c0:66:ef:4b:5d:
                    ff:d5:bf:65:18:a8:23:e2:9e:a5:e5:19:54:a4:04:
                    7f:8c:19:3c:a7:b3:ef:5a:f7:f7:32:59:f3:cb:09:
                    10:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:25:AF:99:1E:FD:F2:5D:F2:C3:CD:E1:DE:E2:25:07:DC:74:99:CE
            X509v3 Authority Key Identifier:
                keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135332e302f32342d3234203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:03:59:5f:ca:67:d1:ac:09:32:be:28:97:93:3a:56:9c:77:
         11:ea:48:c7:87:b2:e2:4d:3d:9d:06:2e:d3:3d:39:68:95:03:
         f2:a5:b3:2d:4a:32:97:02:3d:54:ab:21:bd:67:0f:cf:24:3c:
         97:77:d6:8e:31:32:79:71:b5:cb:b0:67:e0:44:3d:75:be:42:
         ad:47:5c:b5:14:18:d2:3f:6a:1f:d7:da:80:8b:d4:52:c7:4b:
         39:95:5d:c0:fc:d9:ca:db:7f:08:93:2a:bb:51:ba:55:66:42:
         7a:09:be:dd:85:4e:74:be:a4:76:cb:01:8a:b9:12:9b:7a:be:
         57:88:bb:68:6a:bb:ad:46:b1:7f:5d:ad:9d:2e:5a:d3:0c:d8:
         75:82:4b:11:17:cd:45:39:72:84:03:03:bf:cb:fb:41:75:cb:
         38:a5:c3:78:3c:0e:81:fd:8c:af:f3:2a:01:82:ef:87:3d:26:
         ef:21:bb:3b:e4:fe:8a:2b:1f:71:62:90:43:81:a5:92:10:9c:
         cb:32:58:0d:ed:e1:75:46:6b:29:a1:f1:95:0a:b9:68:a0:32:
         ab:76:91:89:4f:9f:06:a5:92:82:9a:47:b3:9a:86:9c:14:1e:
         c8:6c:26:e2:4c:2e:9b:e3:b4:09:2e:d7:fe:cc:62:a7:af:85:
         97:c1:96:a2
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUGNIa10cfgO0Kk9h8QbHiVWCuLWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThC
QUQzQzQyRDAeFw0yNjA0MTUxNDQ2MDlaFw0yNzA0MTQxNDUxMDlaMDMxMTAvBgNV
BAMTKEVFMjVBRjk5MUVGREYyNURGMkMzQ0RFMURFRTIyNTA3REM3NDk5Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDukhkATsY1tEjp3xxjkSctgUl/
Kdtcgv43BM16mNz/B9McTWXhmMZRK3eEbr7clB6HKTdoRKPL5LfF7+Zfv77lDStW
x9vyZF4fuAfHGArlTd5Uv6zoL+wV4mfo7Y7+RaZ0JGVmpYK3oCkMmPyl2ZNqd2m2
/wlVcezYA4qfQ389cTmswOT6XTEnOu0Dw4N3O0WLGsH2tviB9DrBU/vvprrLYni/
BHFJPW4Q1/SDTpjJbERJHgoYKD/zJ3eyJNEnyVjUivOFXXa8XVS1g4oQhu/QalN+
G8rBkAms9iHAZu9LXf/Vv2UYqCPinqXlGVSkBH+MGTyns+9a9/cyWfPLCRCfAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU7iWvmR798l3yw83h3uIlB9x0mc4wHwYDVR0j
BBgwFoAUJcZZYZWxYkCaWvqpJXDyWLrTxC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNjk5NjM1NS8wLzI1QzY1OTYxOTVCMTYyNDA5QTVBRkFBOTI1NzBG
MjU4QkFEM0M0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThCQUQzQzQyRC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4NTkxMTIxNjk5NjM1NS8wLzMxMzAzMzJlMzIz
NDM4MmUzMTM1MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzMzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGf4mTANBgkqhkiG9w0BAQsFAAOCAQEAtgNZX8pn0awJMr4ol5M6Vpx3
EepIx4ey4k09nQYu0z05aJUD8qWzLUoylwI9VKshvWcPzyQ8l3fWjjEyeXG1y7Bn
4EQ9db5CrUdctRQY0j9qH9fagIvUUsdLOZVdwPzZytt/CJMqu1G6VWZCegm+3YVO
dL6kdssBirkSm3q+V4i7aGq7rUaxf12tnS5a0wzYdYJLERfNRTlyhAMDv8v7QXXL
OKXDeDwOgf2Mr/MqAYLvhz0m7yG7O+T+iisfcWKQQ4GlkhCcyzJYDe3hdUZrKaHx
lQq5aKAyq3aRiU+fBqWSgppHs5qGnBQeyGwm4kwum+O0CS7X/sxip6+Fl8GWog==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:52:05 2026 by rpki-client