Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135352e302f32342d3234203d3e2034383337.roa
File:                     3130332e3234382e3135352e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier:          GSWkomBBmIiUvBccJZTo7QIT4Kh/QztIyW9ekDjdNho=
Subject key identifier:   0C:67:7E:42:4B:AE:23:48:7D:34:E7:AE:96:35:DF:27:87:6E:CE:96
Certificate issuer:       /CN=25C6596195B162409A5AFAA92570F258BAD3C42D
Certificate serial:       1AB12CC4C33D3420573AA56A81FDC97CBE399D45
Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135352e302f32342d3234203d3e2034383337.roa
Signing time:             Wed 15 Apr 2026 14:51:09 +0000
ROA not before:           Wed 15 Apr 2026 14:46:09 +0000
ROA not after:            Wed 14 Apr 2027 14:51:09 +0000
asID:                     4837
IP address blocks:        103.248.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 14:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b1:2c:c4:c3:3d:34:20:57:3a:a5:6a:81:fd:c9:7c:be:39:9d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D
        Validity
            Not Before: Apr 15 14:46:09 2026 GMT
            Not After : Apr 14 14:51:09 2027 GMT
        Subject: CN=0C677E424BAE23487D34E7AE9635DF27876ECE96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a5:c8:93:1a:c3:4d:96:ed:e8:39:1f:c2:3d:
                    03:7d:8d:68:58:a0:84:74:58:07:18:60:ed:86:37:
                    e4:3d:b8:32:63:82:02:fb:9d:52:41:73:29:a2:e2:
                    35:30:a1:39:9e:0b:4e:02:b6:ec:fc:b1:b2:66:89:
                    13:72:2e:33:20:bb:11:52:a7:2f:73:f5:65:79:e2:
                    14:46:74:49:b6:6b:c3:43:cf:43:c6:c6:42:e3:c4:
                    1f:6b:34:6e:93:8d:34:22:49:b9:ca:8a:a4:9f:3d:
                    ba:3c:71:d2:7c:43:c3:6f:04:a0:fe:1f:d5:7c:19:
                    d4:83:db:f6:d5:da:98:0e:45:4e:8c:52:23:61:72:
                    36:64:48:27:46:cd:9b:79:45:df:e5:77:a7:a6:af:
                    36:52:36:8a:f9:7a:ef:28:5e:30:eb:64:c2:32:83:
                    29:c7:ce:e4:58:23:5b:4c:96:96:83:6b:e7:29:88:
                    bf:d3:dc:97:40:b8:7e:d2:8a:3c:5d:48:3f:27:5a:
                    6f:8c:aa:cc:24:d3:da:20:8c:31:27:0b:04:31:45:
                    a8:24:ed:c3:b6:ba:1d:4a:64:2d:1c:d4:b5:1c:8f:
                    22:8c:ae:98:97:83:e2:75:02:19:63:75:7c:a1:0e:
                    13:69:5d:98:d0:b5:4c:20:8a:98:b8:30:00:b0:71:
                    5d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:67:7E:42:4B:AE:23:48:7D:34:E7:AE:96:35:DF:27:87:6E:CE:96
            X509v3 Authority Key Identifier:
                keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135352e302f32342d3234203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:74:46:1e:b6:9c:f9:0b:63:dd:75:54:aa:07:8f:08:26:7f:
         40:e3:b2:dd:15:c3:5d:54:0c:0e:24:26:0e:1e:e8:20:c2:de:
         31:d4:29:c6:5f:04:d8:e3:54:28:ac:01:36:5c:6d:a3:7f:37:
         a7:9e:f8:5a:35:e2:71:43:ad:80:89:49:6f:f1:7a:cf:cd:24:
         28:6a:e2:9d:bb:de:c3:36:a0:01:98:11:c0:97:70:f1:c6:4b:
         1d:93:0f:14:6f:ee:48:2c:da:cc:9d:21:4f:90:fa:b1:b1:c9:
         58:17:95:8c:d4:ea:5c:3e:4a:da:0f:23:1e:ff:5c:ef:49:34:
         d8:bc:c8:d4:c5:b4:af:e7:15:0f:89:fb:71:55:c1:9f:69:27:
         2d:81:7f:72:bd:fc:f6:2c:e2:5d:34:27:27:c9:7c:4d:bc:ea:
         04:9b:88:79:a5:31:b2:17:2d:6c:a0:23:0b:cd:4e:fd:43:15:
         33:51:72:86:45:04:94:e1:a3:6f:28:ba:c8:2e:b0:c2:24:4d:
         fb:00:71:5f:48:90:a4:cb:dd:a8:e0:fd:ef:79:bb:fc:48:b9:
         84:9b:df:a5:3d:48:ee:9f:71:46:2c:19:45:6c:af:4d:9f:73:
         bb:cc:3a:07:a4:9d:e1:f8:cb:e5:3a:12:42:cd:cd:02:97:01:
         f3:1f:10:4d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:52:22 2026 by rpki-client