Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135352e302f32342d3234203d3e20313331353136.roa
File:                     3130332e3234382e3135352e302f32342d3234203d3e20313331353136.roa (raw, json)
Hash identifier:          1V11KSH8ZO65QDHqe59FXALQdIKmYboBt78naZPL0Gk=
Subject key identifier:   C8:E3:F4:23:B7:EF:2F:5E:12:7B:4F:86:8D:51:87:1F:8C:F9:55:0D
Certificate issuer:       /CN=25C6596195B162409A5AFAA92570F258BAD3C42D
Certificate serial:       37DBC40EBDF5FA392246E65582D18E3C9080737D
Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135352e302f32342d3234203d3e20313331353136.roa
Signing time:             Wed 15 Apr 2026 14:51:09 +0000
ROA not before:           Wed 15 Apr 2026 14:46:09 +0000
ROA not after:            Wed 14 Apr 2027 14:51:09 +0000
asID:                     131516
IP address blocks:        103.248.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 14:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:db:c4:0e:bd:f5:fa:39:22:46:e6:55:82:d1:8e:3c:90:80:73:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D
        Validity
            Not Before: Apr 15 14:46:09 2026 GMT
            Not After : Apr 14 14:51:09 2027 GMT
        Subject: CN=C8E3F423B7EF2F5E127B4F868D51871F8CF9550D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:20:87:0f:eb:bd:a1:35:05:a4:e5:93:f4:4a:
                    f8:0e:bc:c1:57:8e:2b:a1:5f:3b:3e:96:db:4f:f3:
                    25:00:1d:c8:01:f6:2b:e5:48:fc:20:ae:42:aa:2a:
                    33:81:16:a5:0c:d6:eb:31:1a:6b:ea:85:94:78:a6:
                    28:7a:30:82:b2:a8:9b:28:e9:b8:ef:38:c4:79:bb:
                    58:42:65:4e:55:1d:3d:50:13:e7:8c:c6:eb:f5:86:
                    26:46:27:9b:ce:12:a6:9a:7f:4e:ba:5b:2d:36:22:
                    ae:9a:9d:9f:25:f7:0b:4b:da:1e:57:0b:c0:e3:ef:
                    53:e6:79:18:3e:30:67:64:59:8d:17:14:87:fc:fe:
                    af:f5:dc:b8:b7:60:16:ec:f9:32:2d:10:80:18:fa:
                    a8:23:b8:ad:5d:ba:51:26:73:7b:a5:56:c1:65:ff:
                    37:f5:24:54:a8:5b:3a:62:a8:57:d9:cf:d3:34:9e:
                    3f:94:98:01:28:c9:55:7b:18:79:97:cb:2d:da:23:
                    d3:b9:5a:93:6f:86:dc:49:88:87:8b:1b:43:e2:36:
                    62:57:98:6c:6f:e1:4c:d9:4a:2b:26:ad:d2:5d:39:
                    19:ca:1c:5a:48:96:98:98:ba:b6:55:46:a4:08:31:
                    92:1b:69:3d:9c:d0:63:3a:00:47:2c:93:d6:87:34:
                    2e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E3:F4:23:B7:EF:2F:5E:12:7B:4F:86:8D:51:87:1F:8C:F9:55:0D
            X509v3 Authority Key Identifier:
                keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135352e302f32342d3234203d3e20313331353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:ca:7c:07:1b:1b:af:32:2d:b9:73:87:15:dd:4c:c8:31:63:
         67:63:66:ac:f8:1d:1c:cb:99:46:90:2f:98:7d:36:f4:4f:bc:
         08:d9:db:4a:78:c3:1d:61:fe:21:14:cd:bd:57:35:43:6a:16:
         81:24:e5:ae:cb:05:3a:c0:19:a5:9a:4a:60:62:6f:15:65:60:
         60:44:e6:7e:3b:a7:c6:da:38:4a:ad:9f:22:98:82:cf:67:60:
         c2:39:24:14:ea:0d:08:93:85:4d:04:54:96:8e:7e:95:61:3b:
         8d:20:c2:32:2c:ec:f1:32:91:46:8f:22:a2:e0:00:73:45:f2:
         12:af:bb:93:dc:f7:0b:ee:56:44:6f:ee:17:7e:62:a0:fd:e7:
         01:e1:c5:c6:45:0d:01:3f:9a:cf:38:98:b9:ce:44:79:6d:2e:
         7c:12:eb:13:3b:12:39:45:55:0c:54:eb:41:1e:4f:a6:cf:b0:
         d7:85:3f:51:8f:ca:23:22:01:e2:3e:b9:20:ef:51:99:5a:5d:
         b5:1f:7f:7b:11:3c:91:f4:f3:7d:68:26:61:d5:89:f9:db:3a:
         2c:02:3b:e9:24:62:3d:bb:83:df:98:ce:e5:d6:53:94:53:fc:
         63:67:85:96:c6:92:aa:ae:b6:d0:ed:a9:52:73:9d:c0:49:f9:
         59:b4:57:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:28:45 2026 by rpki-client