Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3131322e302f32322d3232203d3e203137363231.roa
File:                     3130332e3230322e3131322e302f32322d3232203d3e203137363231.roa (raw, json)
Hash identifier:          tVbWbuEciIcnbDGqvlJ5gHLYPTdd3WLY/9auFPtweJw=
Subject key identifier:   F5:8C:4C:E2:A9:79:D0:3A:3C:BA:6E:4A:C5:55:E5:D2:E2:47:19:88
Certificate issuer:       /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial:       231989CA00CF790DA709B52C3DF14C1E06249154
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3131322e302f32322d3232203d3e203137363231.roa
Signing time:             Wed 13 May 2026 10:05:12 +0000
ROA not before:           Wed 13 May 2026 10:00:12 +0000
ROA not after:            Wed 12 May 2027 10:05:12 +0000
asID:                     17621
IP address blocks:        103.202.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:19:89:ca:00:cf:79:0d:a7:09:b5:2c:3d:f1:4c:1e:06:24:91:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
        Validity
            Not Before: May 13 10:00:12 2026 GMT
            Not After : May 12 10:05:12 2027 GMT
        Subject: CN=F58C4CE2A979D03A3CBA6E4AC555E5D2E2471988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a2:f6:f1:7c:bb:a0:2e:b4:af:5c:44:ed:fa:
                    e9:97:cd:38:dd:42:69:b8:f4:f7:91:b4:af:b8:65:
                    2a:3c:15:59:6c:86:8e:f2:91:ed:98:2a:61:5d:68:
                    82:f7:e6:77:4c:43:e3:0a:a4:7d:6d:e4:57:fa:43:
                    88:ad:0c:03:57:1b:30:0a:2a:80:d8:b1:02:9b:45:
                    d1:14:7d:19:1b:87:ae:99:97:d9:b7:c6:f3:21:c4:
                    f4:7e:20:2c:ae:14:71:e2:bb:56:28:f2:96:84:59:
                    8b:b9:c6:18:4d:ed:fe:8b:cc:be:d3:d1:34:f4:a9:
                    f6:04:04:02:45:a8:77:3d:8c:4f:16:ff:81:74:2f:
                    af:2a:32:74:d0:53:d4:33:4d:a3:67:86:54:d9:eb:
                    e5:4d:ef:a3:b7:8c:85:47:02:03:75:b6:fc:26:9d:
                    e6:01:ea:f5:0b:ed:27:46:6d:d3:4c:be:54:32:c9:
                    23:29:78:f8:3c:50:3f:7a:3b:18:a6:7e:a3:a6:38:
                    51:38:52:9d:9a:76:8d:bc:56:5c:e3:10:fa:5d:af:
                    d3:f6:9b:59:1b:e3:6a:ff:62:fe:16:85:97:ba:da:
                    bd:1a:bf:22:c4:ee:60:23:4c:79:55:1f:53:1d:a4:
                    e6:85:f3:d0:23:ac:07:84:b8:ee:b4:54:38:56:2a:
                    31:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:8C:4C:E2:A9:79:D0:3A:3C:BA:6E:4A:C5:55:E5:D2:E2:47:19:88
            X509v3 Authority Key Identifier:
                keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3131322e302f32322d3232203d3e203137363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.202.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:c8:03:19:c5:7d:aa:77:f1:c0:d2:0b:a9:41:83:85:9f:b6:
         7e:53:24:8f:72:d2:00:1a:c7:17:e9:21:30:00:fb:de:e1:3c:
         91:33:e0:2f:c8:8f:67:b9:3b:e5:86:8c:ea:ea:65:72:aa:cb:
         4c:34:5b:3a:79:0e:d0:f2:47:26:b7:d9:84:ff:85:2d:3d:fb:
         25:4f:60:27:92:89:ce:f7:b2:d1:2f:af:f4:1d:91:75:6e:c0:
         c0:72:25:e3:22:c6:50:aa:38:e0:7b:0e:e4:7e:0c:fb:40:ec:
         f6:51:bf:76:b7:1a:eb:7b:a9:44:41:0f:eb:1a:9c:59:25:a6:
         59:34:4c:33:9c:c4:5a:6c:0f:69:6f:dc:58:d2:19:bc:ce:de:
         87:d6:8d:76:fb:69:5b:59:c6:49:22:dc:e5:99:ff:1e:09:6d:
         0b:47:63:57:b1:02:78:56:96:97:fd:24:80:2f:ff:1b:8f:b4:
         05:9f:c4:99:e4:d8:ef:f9:5c:35:fd:2e:12:5b:d1:4b:97:1a:
         b6:6d:93:4b:00:0f:3a:54:43:b9:c4:ae:0f:d4:af:66:72:3b:
         3f:1f:9c:eb:6c:65:2f:e4:82:ec:eb:ef:b5:cb:81:83:c6:5b:
         00:94:16:3f:4d:3e:06:93:3d:aa:45:19:10:4a:d6:7d:77:ba:
         6f:98:08:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:34:31 2026 by rpki-client