Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135342e302f32342d3234203d3e2034383131.roa
File:                     3130332e3234382e3135342e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier:          KAjdya8x+2gN63TLVyS7AqFJkMdT4MHE18PLMVeWd8k=
Subject key identifier:   97:7D:A3:8C:A4:46:FB:38:52:AF:F5:E0:1D:61:02:16:34:65:B0:7A
Certificate issuer:       /CN=25C6596195B162409A5AFAA92570F258BAD3C42D
Certificate serial:       6B12B8514225D4AB4B4A33705C71AA3A7905CD53
Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135342e302f32342d3234203d3e2034383131.roa
Signing time:             Wed 15 Apr 2026 14:51:10 +0000
ROA not before:           Wed 15 Apr 2026 14:46:10 +0000
ROA not after:            Wed 14 Apr 2027 14:51:10 +0000
asID:                     4811
IP address blocks:        103.248.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 14:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:12:b8:51:42:25:d4:ab:4b:4a:33:70:5c:71:aa:3a:79:05:cd:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D
        Validity
            Not Before: Apr 15 14:46:10 2026 GMT
            Not After : Apr 14 14:51:10 2027 GMT
        Subject: CN=977DA38CA446FB3852AFF5E01D6102163465B07A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bd:bb:f7:46:45:51:73:ba:4f:ca:0c:8e:85:
                    6b:ee:39:eb:fb:da:cf:2c:e1:33:b5:59:56:ae:f3:
                    25:d1:74:16:40:76:7a:0b:9b:84:b0:95:08:88:ba:
                    ca:8a:f9:bf:53:10:c2:37:f2:68:ab:21:98:23:25:
                    00:cb:76:22:4f:5e:a2:37:37:03:a7:7b:7b:6c:27:
                    65:b6:51:24:ca:1a:13:a4:c8:30:21:1a:86:fe:62:
                    cc:07:72:e7:6e:28:d3:60:a8:e1:04:8c:f9:1d:26:
                    d9:96:69:82:90:e2:4d:0f:96:a8:85:42:0e:0a:6c:
                    16:cb:b7:38:7e:00:b4:18:ad:38:dd:c2:cb:5d:65:
                    de:e5:ee:50:23:5c:46:b1:77:52:53:d2:e6:6a:81:
                    6e:ad:96:4c:71:89:89:54:39:9b:21:84:4f:7a:61:
                    bd:6f:91:65:ed:28:4d:f3:64:5c:a1:7b:9c:5d:98:
                    98:32:8e:27:bd:f1:01:5b:67:4f:37:37:bb:cf:75:
                    9a:7c:5d:c8:61:d9:04:5d:41:4e:46:0c:b2:7b:cb:
                    8f:1d:59:e4:47:4d:9a:81:c5:ad:f1:46:5f:56:cf:
                    95:54:5a:53:38:f5:24:90:c3:72:1e:78:6d:a8:a6:
                    60:00:f6:a6:a1:97:2b:9a:32:8a:37:57:5f:66:b7:
                    2f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7D:A3:8C:A4:46:FB:38:52:AF:F5:E0:1D:61:02:16:34:65:B0:7A
            X509v3 Authority Key Identifier:
                keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135342e302f32342d3234203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:a3:10:1a:75:2f:0e:b5:0b:8c:bc:f5:fb:61:73:d9:ab:95:
         ab:3f:34:d8:3f:16:74:d4:0e:b1:61:33:ac:c4:9b:1c:bc:7e:
         aa:dd:f3:2d:c9:8d:63:5d:d2:85:7e:b9:c6:01:d3:2f:77:8c:
         e4:93:48:9a:2a:a3:2d:83:7f:91:17:1a:bc:7d:9e:5e:e2:70:
         41:c5:ca:a3:61:92:0f:d2:2b:83:ce:a4:5c:c6:3f:5b:9a:9d:
         8a:d4:74:ef:96:84:ef:06:31:09:77:9a:ba:ab:41:d8:f4:a6:
         74:e2:8a:86:62:06:02:e7:2a:ae:1d:6d:99:70:6c:2e:27:90:
         c7:1f:6d:f4:fc:a2:fa:57:3a:67:6c:22:bb:54:36:02:70:f4:
         ce:dd:ec:0f:b9:42:5b:46:1d:27:26:4c:b7:10:5f:7b:e4:8f:
         36:94:2d:a2:37:06:4e:77:f6:0c:f5:36:21:a0:5b:e0:98:ec:
         17:4b:e3:ad:3d:7f:f1:46:ea:bc:e4:2b:b8:35:25:e8:45:f3:
         e0:2e:3f:53:0e:3b:90:38:77:42:c2:89:0e:ba:fb:a1:be:2d:
         e5:6b:95:df:4d:b8:73:27:15:0c:63:89:0f:85:33:86:8b:a9:
         9d:aa:a4:b2:1e:cd:32:32:23:de:99:72:02:54:73:ff:70:ad:
         c1:88:54:e1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:18:16 2026 by rpki-client