Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230302e3134342e302f32322d3232203d3e2034383131.roa
File:                     3130332e3230302e3134342e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier:          458SRKnCcFqsVHolXv5EsG+PqGHpQf3LKUqZNqLHr9U=
Subject key identifier:   B4:43:40:4E:C5:1D:71:0B:CD:C7:19:3E:78:CB:C2:6D:CA:49:2B:CB
Certificate issuer:       /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial:       77DA8F1805AA8D383D20A4F43F90BC47FCDCA025
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230302e3134342e302f32322d3232203d3e2034383131.roa
Signing time:             Wed 13 May 2026 10:01:25 +0000
ROA not before:           Wed 13 May 2026 09:56:25 +0000
ROA not after:            Wed 12 May 2027 10:01:25 +0000
asID:                     4811
IP address blocks:        103.200.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:da:8f:18:05:aa:8d:38:3d:20:a4:f4:3f:90:bc:47:fc:dc:a0:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
        Validity
            Not Before: May 13 09:56:25 2026 GMT
            Not After : May 12 10:01:25 2027 GMT
        Subject: CN=B443404EC51D710BCDC7193E78CBC26DCA492BCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:09:31:31:26:d6:48:4c:f1:51:5c:e5:ae:d3:
                    19:fd:28:b2:1e:6c:aa:65:53:e8:ae:51:e7:8b:56:
                    d4:15:3f:79:56:12:da:66:25:a9:3c:92:d4:87:27:
                    c6:b7:9e:9a:f0:39:3d:4e:82:9f:f1:ab:45:7a:99:
                    fd:fe:f4:58:a7:e4:9d:76:f8:2f:77:4d:c7:49:61:
                    ab:d5:1f:10:da:7b:bd:be:29:22:bb:1e:77:9f:d7:
                    55:c8:44:d6:d7:5d:19:be:d7:95:bb:de:b0:29:d5:
                    a2:8c:97:60:a5:19:f8:ef:77:be:61:fb:9d:97:5a:
                    a9:36:be:cb:af:4d:8e:c8:bf:38:58:ff:22:c5:9c:
                    17:b9:b9:68:55:f2:e5:65:8a:59:e6:24:dd:e9:61:
                    aa:d1:73:fa:b7:2b:f0:c5:56:c0:4d:34:e0:03:de:
                    e6:16:fa:5e:24:9b:f8:d1:ad:2d:87:57:04:d0:dd:
                    a6:6e:20:d7:e1:19:9d:88:e0:cd:43:64:4b:21:6e:
                    d1:f1:cc:50:e5:ab:a7:b9:30:58:c1:cb:c4:b1:2d:
                    22:9f:5e:ec:33:ad:fd:4f:d2:47:7e:c4:ae:a8:f4:
                    cd:94:bb:5f:93:52:5d:33:b2:7a:82:0f:2c:6e:81:
                    a5:53:14:76:70:cc:38:b5:69:f9:65:56:b1:fd:22:
                    a8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:43:40:4E:C5:1D:71:0B:CD:C7:19:3E:78:CB:C2:6D:CA:49:2B:CB
            X509v3 Authority Key Identifier:
                keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230302e3134342e302f32322d3232203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.200.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:83:d2:31:ab:a9:89:65:31:cf:f5:7f:bc:c7:fc:27:4f:76:
         6d:26:81:bd:9f:f4:34:b9:a3:99:4d:57:e0:fd:27:be:78:ab:
         ea:6d:05:bd:1f:bd:c6:cb:7e:03:7c:db:89:e5:f7:55:5f:c5:
         bb:74:c1:4a:49:fc:25:40:60:9e:9f:b0:7b:7a:c2:3f:53:b3:
         a4:47:5a:2c:ed:82:62:18:03:a6:25:ee:dd:5f:2f:d2:c3:0f:
         98:2f:95:61:a0:d2:49:11:65:75:5d:b1:9c:fe:a2:a0:1b:56:
         1c:7a:85:6f:57:c7:ef:7e:c2:47:71:7c:38:ac:42:14:40:8e:
         17:f5:0d:ae:f1:46:66:e1:cb:6e:c2:1f:1a:bd:8f:20:02:c1:
         ab:da:0a:cd:5a:ce:2e:a9:6e:a6:de:a7:2e:da:d6:3a:a0:6b:
         e3:35:b0:a4:f2:98:64:34:3d:f2:a6:64:87:54:41:af:68:e6:
         cd:da:18:4e:b1:7a:6e:21:32:c6:36:86:0c:a6:41:86:e7:b8:
         3c:07:81:b8:2a:50:03:0b:5c:73:91:e1:61:ed:ac:14:ac:cd:
         f8:d2:43:50:0c:d2:9a:29:ff:54:6b:6b:23:4c:4e:4e:ae:49:
         77:96:be:01:79:79:10:ce:f8:cb:7e:04:e6:16:31:c5:36:57:
         fb:54:97:bf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 21:34:36 2026 by rpki-client