Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230302e3134382e302f32322d3232203d3e2034383131.roa
File:                     3130332e3230302e3134382e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier:          InTOOdjEW7lOP4AuxhfIYnA8N2CWDLSF5w9U1Qh1sTw=
Subject key identifier:   71:27:C2:B1:5F:DE:F2:94:EF:AC:CC:B1:33:8F:10:F9:12:50:83:A0
Certificate issuer:       /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial:       1F92AD515E5E47384081AB4E58C50AC33CF8453A
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230302e3134382e302f32322d3232203d3e2034383131.roa
Signing time:             Wed 13 May 2026 10:01:24 +0000
ROA not before:           Wed 13 May 2026 09:56:24 +0000
ROA not after:            Wed 12 May 2027 10:01:24 +0000
asID:                     4811
IP address blocks:        103.200.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:92:ad:51:5e:5e:47:38:40:81:ab:4e:58:c5:0a:c3:3c:f8:45:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
        Validity
            Not Before: May 13 09:56:24 2026 GMT
            Not After : May 12 10:01:24 2027 GMT
        Subject: CN=7127C2B15FDEF294EFACCCB1338F10F9125083A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:54:ff:b4:37:2c:0d:6c:c6:fb:a9:78:f9:1e:
                    c7:ae:49:06:5f:9a:b5:c8:2d:44:84:ab:cf:fa:1c:
                    ce:97:69:47:86:68:10:f5:3d:0c:2c:39:e3:3f:4d:
                    d8:f9:9e:6d:1c:d4:07:d6:96:39:bc:6f:be:99:64:
                    00:45:47:03:db:b1:40:26:28:e5:e9:1f:80:ee:3c:
                    08:92:68:3b:72:11:3b:e6:53:07:ab:13:3a:4c:69:
                    15:6c:bf:3f:d4:8d:ca:c4:0d:2a:cc:f6:42:86:f1:
                    d6:3c:ea:e0:26:24:cc:94:09:3e:28:dd:3b:fa:78:
                    ad:06:88:1d:a5:db:a9:cf:a0:cb:e2:58:01:78:03:
                    2f:85:51:47:67:17:4a:85:ad:91:09:6d:71:05:ea:
                    87:4e:f3:c4:6e:51:c9:53:13:b5:a1:2a:ff:08:4f:
                    af:9b:f9:47:4a:bd:8c:c1:8c:fd:8b:66:7d:a9:a1:
                    79:35:44:a3:6f:5f:81:a9:21:0e:ba:d6:f5:cd:2e:
                    1f:b0:18:a1:14:8c:3c:01:cb:14:2f:63:e3:6c:cf:
                    cb:78:20:83:54:93:b6:f5:15:f9:2b:54:c4:e1:d2:
                    17:a3:cc:83:82:a8:91:9d:14:f9:5f:b7:f3:84:3b:
                    00:ee:0b:dd:93:a1:19:7e:11:c2:e9:75:0d:58:5f:
                    3e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:27:C2:B1:5F:DE:F2:94:EF:AC:CC:B1:33:8F:10:F9:12:50:83:A0
            X509v3 Authority Key Identifier:
                keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230302e3134382e302f32322d3232203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.200.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:a8:7b:2c:f0:a0:7c:e1:f2:cb:0b:e8:60:be:6c:6b:cc:81:
         76:d3:44:34:4f:22:a7:16:0a:00:0b:bd:e1:e0:0e:39:e6:d8:
         d3:a1:7a:e7:df:69:e0:13:d0:ac:df:2d:a5:9c:27:29:67:4d:
         9e:cc:fc:63:4a:18:1a:6d:22:1e:bc:ac:5e:bd:aa:21:e6:1f:
         70:2c:dc:11:a3:8e:74:07:23:b6:3c:4b:0f:90:6d:f9:7d:11:
         d4:19:d4:f8:46:bd:9f:f6:6e:77:b9:bc:21:bc:65:91:79:d1:
         fc:1a:7d:90:b7:02:39:7f:a1:c9:55:47:60:2b:84:dc:33:11:
         0c:5e:b5:89:bd:e3:87:01:33:99:fc:5d:43:0c:c0:d0:54:fa:
         64:b8:5b:20:88:aa:1d:39:a1:80:06:87:21:8b:37:cf:cf:00:
         da:d5:47:f6:68:f2:e8:a0:52:5a:34:1a:f4:99:fc:84:b0:ee:
         bd:00:dc:c5:ce:25:81:5d:23:c4:cb:31:9a:65:d4:bc:b4:d2:
         09:0b:88:4a:5e:30:8f:91:fd:42:5f:44:13:c2:9f:52:fd:02:
         af:2e:52:5c:23:b8:bf:1d:0f:1f:9d:6b:78:ba:ba:38:90:1a:
         99:5b:11:50:d6:1f:b6:cb:fa:e7:82:5a:3c:68:25:d8:37:ea:
         0b:c5:23:9f
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUH5KtUV5eRzhAgatOWMUKwzz4RTowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcw
RDkwNkYyMDAeFw0yNjA1MTMwOTU2MjRaFw0yNzA1MTIxMDAxMjRaMDMxMTAvBgNV
BAMTKDcxMjdDMkIxNUZERUYyOTRFRkFDQ0NCMTMzOEYxMEY5MTI1MDgzQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwVP+0NywNbMb7qXj5HseuSQZf
mrXILUSEq8/6HM6XaUeGaBD1PQwsOeM/Tdj5nm0c1AfWljm8b76ZZABFRwPbsUAm
KOXpH4DuPAiSaDtyETvmUwerEzpMaRVsvz/UjcrEDSrM9kKG8dY86uAmJMyUCT4o
3Tv6eK0GiB2l26nPoMviWAF4Ay+FUUdnF0qFrZEJbXEF6odO88RuUclTE7WhKv8I
T6+b+UdKvYzBjP2LZn2poXk1RKNvX4GpIQ661vXNLh+wGKEUjDwByxQvY+Nsz8t4
IINUk7b1FfkrVMTh0hejzIOCqJGdFPlft/OEOwDuC92ToRl+EcLpdQ1YXz4DAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUcSfCsV/e8pTvrMyxM48Q+RJQg6AwHwYDVR0j
BBgwFoAUTYevylZ1UXlWNYyJbCHD5w2QbyAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
Njg1MTU0OTcxMzI2ODc1NS8wLzREODdBRkNBNTY3NTUxNzk1NjM1OEM4OTZDMjFD
M0U3MEQ5MDZGMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcwRDkwNkYyMC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwNjg1MTU0OTcxMzI2ODc1NS8wLzMxMzAzMzJlMzIz
MDMwMmUzMTM0MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzEzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmfIlDANBgkqhkiG9w0BAQsFAAOCAQEAp6h7LPCgfOHyywvoYL5sa8yB
dtNENE8ipxYKAAu94eAOOebY06F6599p4BPQrN8tpZwnKWdNnsz8Y0oYGm0iHrys
Xr2qIeYfcCzcEaOOdAcjtjxLD5Bt+X0R1BnU+Ea9n/Zud7m8IbxlkXnR/Bp9kLcC
OX+hyVVHYCuE3DMRDF61ib3jhwEzmfxdQwzA0FT6ZLhbIIiqHTmhgAaHIYs3z88A
2tVH9mjy6KBSWjQa9Jn8hLDuvQDcxc4lgV0jxMsxmmXUvLTSCQuISl4wj5H9Ql9E
E8KfUv0Cry5SXCO4vx0PH51reLq6OJAamVsRUNYftsv654JaPGgl2DfqC8Ujnw==
-----END CERTIFICATE-----
Generated at Wed May 13 21:34:36 2026 by rpki-client