Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3130332e3139362e38382e302f32312d3231203d3e2034383038.roa
File:                     3130332e3139362e38382e302f32312d3231203d3e2034383038.roa (raw, json)
Hash identifier:          APJaFNxQRg6Dn/91z5uTQjOHDylXgTlfMZYVN20xnWw=
Subject key identifier:   1E:05:3F:8E:66:F6:E5:81:47:F5:77:52:1E:F9:21:67:4E:F0:A5:56
Certificate issuer:       /CN=40D86726DB14F9E5E06610928FF6C77226F14874
Certificate serial:       1AACD3AEA4879FD61E64126760005F4FBF1815A7
Authority key identifier: 40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3130332e3139362e38382e302f32312d3231203d3e2034383038.roa
Signing time:             Tue 12 May 2026 09:04:03 +0000
ROA not before:           Tue 12 May 2026 08:59:03 +0000
ROA not after:            Tue 11 May 2027 09:04:03 +0000
asID:                     4808
IP address blocks:        103.196.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:10:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ac:d3:ae:a4:87:9f:d6:1e:64:12:67:60:00:5f:4f:bf:18:15:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40D86726DB14F9E5E06610928FF6C77226F14874
        Validity
            Not Before: May 12 08:59:03 2026 GMT
            Not After : May 11 09:04:03 2027 GMT
        Subject: CN=1E053F8E66F6E58147F577521EF921674EF0A556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:52:c0:b3:f9:c6:04:3f:15:d6:9c:ad:0b:1a:
                    65:57:94:3d:86:5d:91:23:da:08:91:d4:88:f2:fb:
                    ca:5b:01:aa:59:99:39:3a:8b:f6:70:1d:75:25:ee:
                    60:e9:dc:0e:69:49:74:ed:81:5d:8a:43:99:3c:ed:
                    7d:b7:2b:49:87:62:d3:f9:6e:20:b0:61:1f:df:ea:
                    1e:c6:77:5f:bd:3c:13:49:dd:57:f8:0b:b2:c5:cf:
                    87:76:9c:01:50:fa:8d:ea:f4:03:0c:62:8c:b4:00:
                    aa:0a:08:33:25:81:51:16:42:7a:c7:50:0e:6e:cb:
                    c3:cc:89:27:f7:f3:87:60:61:76:da:74:09:20:02:
                    1c:16:32:a3:68:90:34:3b:ec:86:98:f6:ba:fb:c7:
                    5c:63:4b:8d:65:7c:af:e1:fd:f9:80:36:fc:7e:de:
                    04:c9:b2:c7:24:ce:02:87:00:d4:65:a5:e8:22:b1:
                    25:76:eb:da:ba:ed:2f:a9:16:b2:e1:22:62:67:28:
                    9a:3a:24:25:95:1f:70:c1:cc:b4:18:fb:af:6f:95:
                    ba:11:c6:af:27:5d:58:e1:1b:63:26:2a:cb:a4:5b:
                    27:03:ea:de:0a:dd:82:59:ab:43:0e:3d:d5:b1:6d:
                    a8:19:79:29:11:5d:ba:91:fb:f3:73:27:90:92:fc:
                    ee:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:05:3F:8E:66:F6:E5:81:47:F5:77:52:1E:F9:21:67:4E:F0:A5:56
            X509v3 Authority Key Identifier:
                keyid:40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/3130332e3139362e38382e302f32312d3231203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.196.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         98:a6:36:b8:ba:46:b1:63:cc:5d:91:ba:1a:bc:c9:a9:c2:7c:
         c3:08:89:53:ef:b2:e1:44:be:83:28:df:ca:5e:2e:95:70:da:
         2d:98:c7:e4:10:93:0a:7c:93:80:48:96:29:0c:b4:68:26:0d:
         b5:07:52:e5:01:5f:39:2a:e0:9d:9c:67:84:9c:c5:50:3c:a2:
         5a:ca:20:bb:46:79:b8:77:73:2d:eb:7d:ad:ea:7d:c2:d6:69:
         3f:80:d0:a6:30:75:61:c9:a9:9d:9d:67:20:4f:2c:bb:b0:83:
         ff:36:71:2f:f2:4b:9e:f2:0f:98:68:86:b1:e9:93:f1:77:68:
         af:45:12:b7:48:e2:b0:a1:29:25:dd:56:06:16:99:bb:01:9f:
         f9:4f:e3:72:40:f8:79:51:93:15:32:f3:e7:41:60:71:f8:21:
         66:97:1d:da:15:d1:d3:88:ab:89:da:ce:cf:f0:2d:13:a4:77:
         34:c1:00:28:14:cf:af:a4:f7:19:8b:75:8b:4d:32:15:98:66:
         48:18:fb:3a:ad:e8:d3:7c:96:2b:cf:9e:9b:fe:2d:12:2d:66:
         1a:eb:a5:de:68:83:a2:05:24:e6:22:21:15:8b:8d:a6:fd:d3:
         73:70:52:38:40:af:7a:e9:9f:7c:7f:cd:8c:62:12:d9:70:c4:
         33:72:ad:c9
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUGqzTrqSHn9YeZBJnYABfT78YFacwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBEODY3MjZEQjE0RjlFNUUwNjYxMDkyOEZGNkM3NzIy
NkYxNDg3NDAeFw0yNjA1MTIwODU5MDNaFw0yNzA1MTEwOTA0MDNaMDMxMTAvBgNV
BAMTKDFFMDUzRjhFNjZGNkU1ODE0N0Y1Nzc1MjFFRjkyMTY3NEVGMEE1NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtUsCz+cYEPxXWnK0LGmVXlD2G
XZEj2giR1Ijy+8pbAapZmTk6i/ZwHXUl7mDp3A5pSXTtgV2KQ5k87X23K0mHYtP5
biCwYR/f6h7Gd1+9PBNJ3Vf4C7LFz4d2nAFQ+o3q9AMMYoy0AKoKCDMlgVEWQnrH
UA5uy8PMiSf384dgYXbadAkgAhwWMqNokDQ77IaY9rr7x1xjS41lfK/h/fmANvx+
3gTJssckzgKHANRlpegisSV269q67S+pFrLhImJnKJo6JCWVH3DBzLQY+69vlboR
xq8nXVjhG2MmKsukWycD6t4K3YJZq0MOPdWxbagZeSkRXbqR+/NzJ5CS/O7zAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUHgU/jmb25YFH9XdSHvkhZ07wpVYwHwYDVR0j
BBgwFoAUQNhnJtsU+eXgZhCSj/bHcibxSHQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NjUwMzE1NTY2MDYxOTc5My8wLzQwRDg2NzI2REIxNEY5RTVFMDY2MTA5MjhGRjZD
NzcyMjZGMTQ4NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNDBEODY3MjZEQjE0RjlFNUUwNjYxMDkyOEZGNkM3NzIyNkYxNDg3NC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA2NTAzMTU1NjYwNjE5NzkzLzAvMzEzMDMzMmUzMTM5
MzYyZTM4MzgyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA2fEWDANBgkqhkiG9w0BAQsFAAOCAQEAmKY2uLpGsWPMXZG6GrzJqcJ8wwiJ
U++y4US+gyjfyl4ulXDaLZjH5BCTCnyTgEiWKQy0aCYNtQdS5QFfOSrgnZxnhJzF
UDyiWsogu0Z5uHdzLet9rep9wtZpP4DQpjB1YcmpnZ1nIE8su7CD/zZxL/JLnvIP
mGiGsemT8Xdor0USt0jisKEpJd1WBhaZuwGf+U/jckD4eVGTFTLz50FgcfghZpcd
2hXR04iridrOz/AtE6R3NMEAKBTPr6T3GYt1i00yFZhmSBj7Oq3o03yWK8+em/4t
Ei1mGuul3miDogUk5iIhFYuNpv3Tc3BSOECveumffH/NjGIS2XDEM3KtyQ==
-----END CERTIFICATE-----
Generated at Wed May 13 14:40:34 2026 by rpki-client