Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3131322e302f32322d3232203d3e2034383131.roa
File:                     3130332e3230322e3131322e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier:          v5tS5JZZ0sAPZxL+D0C1/AP3i6cGuCUnF4s32jXfyg8=
Subject key identifier:   21:FF:FC:0B:6B:EB:89:6A:30:19:E3:C9:EC:91:F5:FD:28:FF:34:63
Certificate issuer:       /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial:       2F57DA71B0AFA1C5685A626A68D76F4EA4CE1F5D
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3131322e302f32322d3232203d3e2034383131.roa
Signing time:             Wed 13 May 2026 10:05:12 +0000
ROA not before:           Wed 13 May 2026 10:00:12 +0000
ROA not after:            Wed 12 May 2027 10:05:12 +0000
asID:                     4811
IP address blocks:        103.202.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:57:da:71:b0:af:a1:c5:68:5a:62:6a:68:d7:6f:4e:a4:ce:1f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
        Validity
            Not Before: May 13 10:00:12 2026 GMT
            Not After : May 12 10:05:12 2027 GMT
        Subject: CN=21FFFC0B6BEB896A3019E3C9EC91F5FD28FF3463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:84:3e:cf:59:7e:0b:6d:ac:94:cd:d5:d3:0f:
                    3f:fa:e3:02:0b:43:42:f9:31:85:b4:a5:92:4b:d2:
                    ee:1c:aa:9b:2a:b3:31:03:45:ae:07:ed:19:e1:a6:
                    7f:b3:02:ec:df:d8:56:e6:80:b8:6c:d4:b3:a9:7a:
                    10:00:01:6c:b6:f0:c4:53:0c:4f:db:a0:7e:f1:8a:
                    85:76:00:b7:d9:c4:39:ae:d9:7c:e1:b9:5c:77:9d:
                    a4:1f:e5:fb:b3:93:fc:cd:66:69:82:74:9f:be:cf:
                    3a:e0:82:b0:ab:6b:a4:4f:2c:68:c5:58:b9:db:da:
                    cf:7a:72:7e:3a:c4:0d:85:67:4f:f1:d2:1d:16:ac:
                    a3:9a:02:cc:29:9d:0c:ee:d5:ae:cf:54:e1:c6:d3:
                    30:bc:a2:22:9f:3d:27:dd:d9:03:e0:0d:76:a8:ff:
                    8f:65:de:90:e6:8e:f7:dc:0e:b4:47:1c:72:ac:6c:
                    93:a1:af:76:4e:98:8d:e4:4e:fa:d5:e2:a0:8f:5c:
                    fa:e9:f2:a8:57:52:ec:21:46:41:f1:bd:49:ea:ce:
                    b4:c8:d5:0a:17:51:7a:3b:16:79:64:84:0e:62:6a:
                    16:14:96:34:72:3c:dc:df:8b:88:fe:a3:57:14:f1:
                    9d:d2:cf:49:a1:da:76:b0:fe:24:c7:fa:d9:ae:8b:
                    74:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FF:FC:0B:6B:EB:89:6A:30:19:E3:C9:EC:91:F5:FD:28:FF:34:63
            X509v3 Authority Key Identifier:
                keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3131322e302f32322d3232203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.202.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:b7:1c:0c:46:dd:3a:2c:37:ce:b4:fe:d1:8a:a7:6d:65:dd:
         45:61:3d:43:5d:42:c3:68:db:f2:bb:9b:d6:9a:0c:1c:ad:53:
         39:ba:8c:3c:20:76:1d:e1:44:04:35:5a:45:1b:a4:c9:b2:76:
         db:e4:a9:fb:a0:4b:0f:82:95:db:9f:78:12:04:ea:3a:b3:f6:
         2c:a9:83:58:e5:08:8d:f0:b0:89:c2:c9:9c:1f:74:e5:d4:05:
         0f:0b:4b:6f:f7:19:c6:cd:96:b1:97:01:b5:6f:dc:5b:7d:c9:
         a1:93:d9:b0:da:da:b9:d5:46:6a:05:9f:11:d8:df:0f:b7:04:
         80:be:3d:8e:c4:8c:28:21:bf:ac:69:0d:13:5e:82:93:56:70:
         4a:0b:13:6d:63:f4:9b:d9:38:05:43:3f:99:1a:f6:3d:3b:fd:
         ff:45:3a:5d:c7:f3:d5:73:8e:5a:01:eb:9e:3c:1a:e9:89:f5:
         24:ab:57:d8:97:59:f8:cc:08:29:cf:04:3b:94:53:de:f0:96:
         10:cb:a0:93:5a:45:1d:a7:d5:42:14:c5:91:c6:1f:6c:01:de:
         b3:8e:09:ca:01:37:e5:da:eb:b0:ff:53:b0:58:cc:ca:8d:14:
         82:58:66:8d:49:2d:8f:4b:ef:b2:5d:55:65:f3:a4:d7:ba:5a:
         30:e6:fc:f5
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUL1facbCvocVoWmJqaNdvTqTOH10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcw
RDkwNkYyMDAeFw0yNjA1MTMxMDAwMTJaFw0yNzA1MTIxMDA1MTJaMDMxMTAvBgNV
BAMTKDIxRkZGQzBCNkJFQjg5NkEzMDE5RTNDOUVDOTFGNUZEMjhGRjM0NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUhD7PWX4LbayUzdXTDz/64wIL
Q0L5MYW0pZJL0u4cqpsqszEDRa4H7Rnhpn+zAuzf2FbmgLhs1LOpehAAAWy28MRT
DE/boH7xioV2ALfZxDmu2XzhuVx3naQf5fuzk/zNZmmCdJ++zzrggrCra6RPLGjF
WLnb2s96cn46xA2FZ0/x0h0WrKOaAswpnQzu1a7PVOHG0zC8oiKfPSfd2QPgDXao
/49l3pDmjvfcDrRHHHKsbJOhr3ZOmI3kTvrV4qCPXPrp8qhXUuwhRkHxvUnqzrTI
1QoXUXo7FnlkhA5iahYUljRyPNzfi4j+o1cU8Z3Sz0mh2naw/iTH+tmui3QNAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUIf/8C2vriWowGePJ7JH1/Sj/NGMwHwYDVR0j
BBgwFoAUTYevylZ1UXlWNYyJbCHD5w2QbyAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
Njg1MTU0OTcxMzI2ODc1NS8wLzREODdBRkNBNTY3NTUxNzk1NjM1OEM4OTZDMjFD
M0U3MEQ5MDZGMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcwRDkwNkYyMC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwNjg1MTU0OTcxMzI2ODc1NS8wLzMxMzAzMzJlMzIz
MDMyMmUzMTMxMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzEzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmfKcDANBgkqhkiG9w0BAQsFAAOCAQEACLccDEbdOiw3zrT+0YqnbWXd
RWE9Q11Cw2jb8rub1poMHK1TObqMPCB2HeFEBDVaRRukybJ22+Sp+6BLD4KV2594
EgTqOrP2LKmDWOUIjfCwicLJnB905dQFDwtLb/cZxs2WsZcBtW/cW33JoZPZsNra
udVGagWfEdjfD7cEgL49jsSMKCG/rGkNE16Ck1ZwSgsTbWP0m9k4BUM/mRr2PTv9
/0U6Xcfz1XOOWgHrnjwa6Yn1JKtX2JdZ+MwIKc8EO5RT3vCWEMugk1pFHafVQhTF
kcYfbAHes44JygE35drrsP9TsFjMyo0UglhmjUktj0vvsl1VZfOk17paMOb89Q==
-----END CERTIFICATE-----
Generated at Wed May 13 21:34:33 2026 by rpki-client