Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130312e35302e382e302f32322d3232203d3e20313431373731.roa
File:                     3130312e35302e382e302f32322d3232203d3e20313431373731.roa (raw, json)
Hash identifier:          B3xeUrb/U4ARG1BNm2ciHOyYMekyhxML3SpXsbvjVTc=
Subject key identifier:   F4:A5:1F:9B:B0:10:1F:F8:DA:28:86:D7:08:70:AC:DE:1F:03:BA:85
Certificate issuer:       /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial:       4C39BF135689D000B2BC2325311442F476822A1B
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130312e35302e382e302f32322d3232203d3e20313431373731.roa
Signing time:             Wed 13 May 2026 10:01:25 +0000
ROA not before:           Wed 13 May 2026 09:56:25 +0000
ROA not after:            Wed 12 May 2027 10:01:25 +0000
asID:                     141771
IP address blocks:        101.50.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:39:bf:13:56:89:d0:00:b2:bc:23:25:31:14:42:f4:76:82:2a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
        Validity
            Not Before: May 13 09:56:25 2026 GMT
            Not After : May 12 10:01:25 2027 GMT
        Subject: CN=F4A51F9BB0101FF8DA2886D70870ACDE1F03BA85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9e:80:0d:f8:63:18:f1:26:e2:c6:3f:f2:ff:
                    37:c7:74:b3:bc:ff:4c:f9:3e:a2:cf:11:b3:f1:39:
                    c5:d5:78:cf:3b:73:fc:98:a9:f8:81:ae:d4:38:75:
                    d2:e9:fb:72:b2:74:cb:a3:38:df:68:8b:1a:6f:14:
                    e2:71:51:bf:df:e5:1d:a3:9a:06:c2:57:38:fd:32:
                    ed:e1:53:97:1f:83:60:62:37:ed:e3:a7:cc:b2:bf:
                    9b:5f:f0:8a:97:49:cc:1c:10:19:e6:b3:25:cb:09:
                    a9:e4:86:6b:d0:43:b7:f6:46:2b:ff:03:dc:fe:09:
                    d1:d7:df:72:cc:0c:c5:2d:a5:49:7d:c3:7c:71:98:
                    3d:54:c5:21:d5:6c:c5:4a:37:06:dc:31:e7:03:37:
                    99:d5:e5:e7:5f:01:e7:50:7f:35:8d:3e:b3:01:b6:
                    c0:0e:8e:c4:ac:1d:90:a0:b1:de:ba:21:5c:c7:56:
                    54:b2:22:b0:6d:45:ec:f0:49:db:3b:86:39:71:ea:
                    0f:55:c9:fa:87:1e:b8:2c:80:ae:9a:47:d4:2f:ed:
                    47:55:ab:d7:1f:d1:67:c7:f9:a5:ee:b0:d1:5c:d2:
                    f6:0b:87:cd:a0:33:81:c3:e3:d9:2a:6c:86:a8:3c:
                    eb:ae:db:47:17:c8:01:ba:c3:a1:e8:d7:7c:14:4d:
                    88:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A5:1F:9B:B0:10:1F:F8:DA:28:86:D7:08:70:AC:DE:1F:03:BA:85
            X509v3 Authority Key Identifier:
                keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130312e35302e382e302f32322d3232203d3e20313431373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.50.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:34:47:3f:05:78:10:a8:34:29:7b:00:b4:96:70:73:06:3b:
         7a:48:33:d4:1d:68:27:d7:e9:4f:fa:3f:51:02:5a:1e:c5:b7:
         90:41:af:5e:89:2f:14:80:5e:e3:47:15:53:bc:6f:7e:79:5a:
         f8:47:c5:9e:1a:08:5e:58:ec:dc:1f:10:f8:65:9e:34:3d:68:
         3c:d4:ce:61:09:50:d0:cc:99:1b:93:5b:27:1b:97:c3:b0:5a:
         45:35:04:af:e6:df:ae:89:b3:5b:1b:30:ae:9b:33:b4:3c:f8:
         c3:ae:19:c1:48:0a:98:7f:6a:b9:10:fd:40:9e:e2:1c:86:93:
         ba:24:0a:25:14:7d:c3:1e:3d:4f:6c:fe:88:b3:35:7c:4d:1b:
         74:2b:28:90:bc:c5:53:88:ce:5f:6b:fd:92:74:00:32:c1:f8:
         72:e9:d1:eb:96:ab:12:30:9a:c2:93:81:61:fe:cc:60:6e:ab:
         5d:4c:1f:9c:9c:6c:c8:50:ba:b8:3c:3e:1d:14:7d:84:1b:38:
         86:2a:0f:9e:49:59:6f:b0:1b:07:6d:5a:72:7f:7c:fb:36:97:
         a9:a6:da:71:e9:e7:d2:2e:28:bd:fb:d7:41:0d:2c:5d:eb:f1:
         86:83:c1:5b:a2:01:f6:d4:ca:90:aa:74:50:6d:3e:5e:97:fd:
         0b:0a:67:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:34:33 2026 by rpki-client