Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230302e3134302e302f32322d3232203d3e2034383131.roa
File:                     3130332e3230302e3134302e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier:          20g6Nilu8KnX264fqbWIaWkHaVOsxzdJGJhzfhhABrQ=
Subject key identifier:   B0:41:33:67:F0:7D:7F:C6:74:D6:1D:C0:10:DB:17:9B:92:D2:01:AF
Certificate issuer:       /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial:       02F161527AA4C0F464B4C4F37423C69CF374E7C4
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230302e3134302e302f32322d3232203d3e2034383131.roa
Signing time:             Wed 13 May 2026 10:01:25 +0000
ROA not before:           Wed 13 May 2026 09:56:25 +0000
ROA not after:            Wed 12 May 2027 10:01:25 +0000
asID:                     4811
IP address blocks:        103.200.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f1:61:52:7a:a4:c0:f4:64:b4:c4:f3:74:23:c6:9c:f3:74:e7:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
        Validity
            Not Before: May 13 09:56:25 2026 GMT
            Not After : May 12 10:01:25 2027 GMT
        Subject: CN=B0413367F07D7FC674D61DC010DB179B92D201AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:de:f0:18:70:a3:4e:61:53:3c:78:78:f2:e4:
                    55:65:23:a7:0a:44:ec:99:27:e3:36:4a:fa:3c:07:
                    85:9b:18:5a:05:39:20:aa:ff:61:44:f1:77:96:35:
                    3e:88:5c:82:af:6e:93:d6:8d:00:5c:39:fa:b7:c5:
                    41:be:34:8a:0d:97:ea:02:13:f8:90:d3:87:38:cc:
                    b3:c3:bb:5b:70:cb:e5:db:da:f9:f3:23:ca:26:7b:
                    39:a6:7d:9d:94:92:ad:ff:b5:3c:26:e6:11:bf:47:
                    6b:f5:8f:65:0e:c6:d4:fa:3a:09:42:5d:69:61:d2:
                    94:b8:55:8a:d2:b8:1a:9c:c1:94:e8:5d:25:9e:29:
                    b1:54:81:e9:3d:18:0a:36:32:b5:de:f1:24:8d:e5:
                    c3:49:c6:da:a4:6d:d9:9c:dc:21:3f:cd:8d:1d:e5:
                    4e:b9:f7:2f:a9:69:18:be:a4:b2:00:d8:ef:2c:16:
                    ef:42:43:0f:f4:15:11:14:ce:2d:f7:ba:07:5c:47:
                    51:32:f4:18:09:6a:ca:52:0f:e5:cb:9e:76:25:fc:
                    97:1b:33:18:2b:38:35:01:33:ea:3d:2f:9a:3f:a8:
                    fc:26:e2:d5:3f:ba:57:2d:68:1f:1f:c5:75:80:76:
                    9f:8d:a1:f0:d7:c7:bf:c3:7c:52:48:cb:87:d2:70:
                    fe:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:41:33:67:F0:7D:7F:C6:74:D6:1D:C0:10:DB:17:9B:92:D2:01:AF
            X509v3 Authority Key Identifier:
                keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230302e3134302e302f32322d3232203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.200.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:6d:7c:c5:8d:68:38:fc:48:e3:62:66:02:bd:05:2c:80:38:
         7f:1e:c6:82:07:63:24:ea:8e:27:ff:01:de:08:53:d1:3b:c7:
         9c:ed:58:bf:ae:6e:14:d0:44:db:b2:f7:67:b0:ac:22:4b:e2:
         8b:fd:72:3c:b8:a1:8a:12:90:c4:83:5d:6a:6b:73:aa:5f:4c:
         ff:c3:4e:ed:3b:78:9d:38:6d:90:ac:c0:43:c3:36:59:b1:6e:
         ad:d1:7b:a9:07:4c:f3:ec:1f:45:92:14:45:39:ed:5a:5c:d3:
         77:12:69:63:5d:7e:4f:05:15:cf:5a:8b:70:fd:5a:f7:82:9a:
         33:7d:83:8c:4f:7b:00:c3:1d:95:64:e8:76:85:d3:2f:9c:66:
         68:cf:a2:ef:b5:0d:a0:44:dd:8d:0e:92:c5:3b:8b:b6:7e:fa:
         2a:0f:0f:cd:aa:e5:d5:39:11:7a:80:d9:d2:41:7e:9d:ae:a3:
         86:7e:eb:22:f7:e3:5a:c1:54:5c:f3:46:02:36:84:39:f1:ef:
         21:b3:33:0e:00:21:14:34:df:e1:e0:b8:2a:19:c8:92:0d:ee:
         d1:fd:2d:03:09:4e:8c:f1:7d:3b:47:b5:ad:dc:4a:9e:9b:4e:
         e9:97:fd:1f:83:32:d8:fe:9a:93:c0:fc:28:ff:1d:f1:bc:90:
         1d:84:f0:78
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 21:34:37 2026 by rpki-client