Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3130342e302f32322d3232203d3e2034383131.roa
File:                     3130332e3230322e3130342e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier:          HCkhAB+Xf4if1oKChj28vsDvuAKDesJbyNsQPj+OZRw=
Subject key identifier:   2B:D8:5D:F6:C6:B8:6F:7A:00:65:B2:81:0D:E5:2A:80:6A:A2:72:66
Certificate issuer:       /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial:       0B4C076F08556C7AA7C7DC7FD79D3C429E97EA9E
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3130342e302f32322d3232203d3e2034383131.roa
Signing time:             Wed 13 May 2026 10:05:11 +0000
ROA not before:           Wed 13 May 2026 10:00:11 +0000
ROA not after:            Wed 12 May 2027 10:05:11 +0000
asID:                     4811
IP address blocks:        103.202.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:4c:07:6f:08:55:6c:7a:a7:c7:dc:7f:d7:9d:3c:42:9e:97:ea:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
        Validity
            Not Before: May 13 10:00:11 2026 GMT
            Not After : May 12 10:05:11 2027 GMT
        Subject: CN=2BD85DF6C6B86F7A0065B2810DE52A806AA27266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:00:ba:d3:1e:b3:aa:f0:ce:db:f5:95:44:9c:
                    7d:48:12:7f:b7:a9:3f:a0:6c:a7:2a:11:fa:3d:3d:
                    80:cf:95:83:83:ce:7d:6d:26:71:18:03:46:6d:18:
                    ce:3b:bc:a2:af:4a:57:a4:6b:01:76:b2:5a:c1:19:
                    68:92:9c:65:bd:92:25:19:59:04:d2:8d:3f:9d:33:
                    12:6c:e6:92:18:c5:79:b1:66:e4:25:40:6a:88:13:
                    b7:36:ff:49:40:a3:ed:b8:39:36:91:5c:43:1e:fa:
                    4e:4d:e4:da:8d:52:04:e5:17:83:e8:ec:43:77:d7:
                    84:f0:6b:58:5b:f0:a3:28:c1:4e:75:90:75:07:25:
                    38:8e:0a:44:76:5e:55:6e:64:e8:0d:2a:7a:cb:b9:
                    18:c8:aa:ae:98:0c:b2:d5:6e:e7:f1:9c:fd:95:8a:
                    2c:3d:b0:22:5d:6e:82:38:d9:8c:7c:62:d3:73:ff:
                    e0:e1:22:80:da:a9:ac:d8:64:08:d2:06:38:fb:65:
                    89:e5:4c:39:fa:30:42:68:43:ec:22:4a:e2:85:e8:
                    be:69:e6:8e:b2:9f:4e:1f:3a:64:f0:52:81:98:5e:
                    f8:91:90:a4:aa:36:05:97:28:e3:7d:bd:2a:5d:cb:
                    69:67:d7:cf:b4:59:99:bf:8c:e2:b7:95:3e:3b:57:
                    0a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D8:5D:F6:C6:B8:6F:7A:00:65:B2:81:0D:E5:2A:80:6A:A2:72:66
            X509v3 Authority Key Identifier:
                keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3130342e302f32322d3232203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.202.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:8a:09:5f:75:cc:87:13:ab:f5:d2:50:9f:e2:be:2f:ba:82:
         e0:20:f0:4b:3e:b7:48:b8:e8:9f:46:09:20:22:47:ec:eb:a8:
         40:21:27:ee:83:a6:9c:5d:72:ab:63:db:aa:9c:41:5b:ab:5e:
         7b:35:eb:b2:fe:21:fe:7a:24:01:cd:79:a5:59:91:14:26:11:
         48:54:7a:92:35:40:8e:b0:fe:e8:b6:aa:37:d1:c7:8d:cf:e0:
         3b:aa:a7:11:9c:94:64:39:47:0f:5c:17:a1:f2:1a:81:fb:af:
         eb:74:75:7b:b2:42:9a:e6:e3:f3:74:30:4c:7d:8e:47:f1:fb:
         95:d7:5b:de:a0:f1:eb:7c:1b:31:9a:b5:80:66:a2:a8:68:c8:
         d8:d6:83:d6:d1:0d:62:95:c8:80:ca:e8:23:29:b8:4f:2e:ab:
         11:14:80:2f:ea:7c:ef:c2:f6:3a:df:d1:a9:cd:59:47:81:4c:
         9a:6d:d9:1b:a1:07:45:6f:44:da:86:89:24:b8:5c:58:6c:e0:
         30:29:77:2c:c6:de:41:91:89:76:e8:ac:9c:bf:a6:52:16:b0:
         29:7a:17:bd:80:71:b5:1a:c1:94:b7:3e:c1:da:3d:cd:19:e5:
         d2:8a:8c:a6:59:70:74:15:b4:47:a4:d9:e3:a9:d9:08:7d:53:
         82:89:9a:12
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUC0wHbwhVbHqnx9x/1508Qp6X6p4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcw
RDkwNkYyMDAeFw0yNjA1MTMxMDAwMTFaFw0yNzA1MTIxMDA1MTFaMDMxMTAvBgNV
BAMTKDJCRDg1REY2QzZCODZGN0EwMDY1QjI4MTBERTUyQTgwNkFBMjcyNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ALrTHrOq8M7b9ZVEnH1IEn+3
qT+gbKcqEfo9PYDPlYODzn1tJnEYA0ZtGM47vKKvSlekawF2slrBGWiSnGW9kiUZ
WQTSjT+dMxJs5pIYxXmxZuQlQGqIE7c2/0lAo+24OTaRXEMe+k5N5NqNUgTlF4Po
7EN314Twa1hb8KMowU51kHUHJTiOCkR2XlVuZOgNKnrLuRjIqq6YDLLVbufxnP2V
iiw9sCJdboI42Yx8YtNz/+DhIoDaqazYZAjSBjj7ZYnlTDn6MEJoQ+wiSuKF6L5p
5o6yn04fOmTwUoGYXviRkKSqNgWXKON9vSpdy2ln18+0WZm/jOK3lT47VwrBAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUK9hd9sa4b3oAZbKBDeUqgGqicmYwHwYDVR0j
BBgwFoAUTYevylZ1UXlWNYyJbCHD5w2QbyAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
Njg1MTU0OTcxMzI2ODc1NS8wLzREODdBRkNBNTY3NTUxNzk1NjM1OEM4OTZDMjFD
M0U3MEQ5MDZGMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcwRDkwNkYyMC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwNjg1MTU0OTcxMzI2ODc1NS8wLzMxMzAzMzJlMzIz
MDMyMmUzMTMwMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzEzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmfKaDANBgkqhkiG9w0BAQsFAAOCAQEAfYoJX3XMhxOr9dJQn+K+L7qC
4CDwSz63SLjon0YJICJH7OuoQCEn7oOmnF1yq2PbqpxBW6teezXrsv4h/nokAc15
pVmRFCYRSFR6kjVAjrD+6LaqN9HHjc/gO6qnEZyUZDlHD1wXofIagfuv63R1e7JC
mubj83QwTH2OR/H7lddb3qDx63wbMZq1gGaiqGjI2NaD1tENYpXIgMroIym4Ty6r
ERSAL+p878L2Ot/Rqc1ZR4FMmm3ZG6EHRW9E2oaJJLhcWGzgMCl3LMbeQZGJduis
nL+mUhawKXoXvYBxtRrBlLc+wdo9zRnl0oqMpllwdBW0R6TZ46nZCH1TgomaEg==
-----END CERTIFICATE-----
Generated at Wed May 13 21:34:35 2026 by rpki-client