Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135342e302f32342d3234203d3e20313331353136.roa
File:                     3130332e3234382e3135342e302f32342d3234203d3e20313331353136.roa (raw, json)
Hash identifier:          AbBhVMl/Tp7ypYL8yo65ASVOEdUu8CE2kxrufe7/zNo=
Subject key identifier:   1F:C9:39:52:FF:57:37:B9:7A:AC:F4:06:8E:29:2D:DE:F4:6A:72:EE
Certificate issuer:       /CN=25C6596195B162409A5AFAA92570F258BAD3C42D
Certificate serial:       1E376E8E226304FAC9D0B98985577C188498BA68
Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135342e302f32342d3234203d3e20313331353136.roa
Signing time:             Wed 15 Apr 2026 14:51:10 +0000
ROA not before:           Wed 15 Apr 2026 14:46:10 +0000
ROA not after:            Wed 14 Apr 2027 14:51:10 +0000
asID:                     131516
IP address blocks:        103.248.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 14:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:37:6e:8e:22:63:04:fa:c9:d0:b9:89:85:57:7c:18:84:98:ba:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D
        Validity
            Not Before: Apr 15 14:46:10 2026 GMT
            Not After : Apr 14 14:51:10 2027 GMT
        Subject: CN=1FC93952FF5737B97AACF4068E292DDEF46A72EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2f:55:e8:d5:b9:17:68:4b:d8:45:c9:00:db:
                    1b:ee:b6:ad:4f:92:06:b3:94:51:4c:df:eb:03:a0:
                    a5:7a:c7:ae:ea:2a:5b:08:11:63:44:27:c4:4e:ef:
                    6b:08:06:e9:38:ee:d8:49:6d:2e:9b:37:0b:2b:5e:
                    33:5c:29:c8:16:36:d9:d0:17:b3:ed:5b:ef:3d:83:
                    65:a4:f6:35:32:04:4b:af:24:24:20:48:f2:0c:b6:
                    08:ec:9c:7f:09:11:e4:75:7f:ed:c9:6d:d6:e2:9a:
                    8e:e9:b2:0a:99:a6:7a:27:8a:15:f0:a8:0d:38:29:
                    07:a4:f5:43:95:b5:4c:e9:88:e2:46:6f:3d:5d:5b:
                    39:02:79:bf:e3:17:22:c1:4f:e8:fd:9f:1a:75:32:
                    a9:9e:ed:d4:e2:00:25:13:6b:05:75:fc:fa:77:c1:
                    57:7a:2b:5b:f0:f6:83:ba:a9:2b:bc:1d:24:21:ac:
                    21:0b:ca:3d:7f:d8:7c:0f:f7:29:2c:e2:00:dd:72:
                    50:f9:bc:68:d1:f5:aa:e3:4b:82:86:96:08:5d:a1:
                    5e:c2:64:7a:a6:cc:a8:b3:55:03:79:9c:da:41:f4:
                    48:87:f0:96:ff:3b:d0:fe:81:37:48:5d:90:79:f7:
                    db:b3:29:34:f4:9b:30:e3:cd:e5:dd:c0:73:64:3b:
                    6b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C9:39:52:FF:57:37:B9:7A:AC:F4:06:8E:29:2D:DE:F4:6A:72:EE
            X509v3 Authority Key Identifier:
                keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135342e302f32342d3234203d3e20313331353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:22:14:6b:64:e7:f7:1f:57:b9:b7:d1:d1:76:1f:8e:f3:79:
         10:35:9e:1c:60:48:eb:d4:dc:a2:c2:3f:df:9c:5a:87:a5:3b:
         6b:03:f9:b5:56:c6:90:81:fb:a1:45:5f:4c:f0:df:12:a3:37:
         3f:d1:1b:e9:5f:c9:2a:31:54:6e:61:b0:a7:e1:23:34:06:9e:
         6d:21:0d:21:d3:e2:de:28:e1:22:cc:0a:31:b3:94:a1:1c:e7:
         c5:37:f0:62:fb:89:c5:51:cb:0a:e5:53:9d:cd:65:8b:4e:16:
         52:60:33:05:d8:20:78:ad:ed:88:c5:62:a2:f1:2c:23:68:a2:
         cb:68:b6:93:f7:41:93:ab:cd:43:e1:9f:81:4b:9b:3a:87:80:
         7e:fe:17:52:54:4a:6b:ef:43:09:68:91:84:2e:1d:56:2f:75:
         7e:6e:ed:f4:90:ff:3f:04:35:f1:fd:41:5c:ab:69:05:f3:e4:
         25:5c:98:89:cd:bf:90:8b:8d:31:53:99:32:b0:04:65:4b:17:
         6f:a2:33:64:5a:85:48:40:e1:90:55:6f:30:2e:eb:74:cb:08:
         e4:78:14:a0:8b:d0:5d:c1:8e:13:3a:ae:5c:20:f6:71:94:33:
         af:da:02:a5:c1:eb:21:9b:df:34:f4:be:45:9d:11:1c:9f:fc:
         4d:00:be:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:28:49 2026 by rpki-client