Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132342e302f32322d3232203d3e2034383131.roa
File:                     3130332e3230322e3132342e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier:          Ybi8h9aFyr2B65e3iBWcRUKXoKZrcwly52KFFVwXeH8=
Subject key identifier:   5F:CA:E4:F3:55:36:BD:2B:86:F5:B2:08:99:5A:22:BA:40:D4:56:60
Certificate issuer:       /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial:       6844F2C1818ADEF6A5FDC63F33812C751AF8B998
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132342e302f32322d3232203d3e2034383131.roa
Signing time:             Wed 13 May 2026 10:11:14 +0000
ROA not before:           Wed 13 May 2026 10:06:14 +0000
ROA not after:            Wed 12 May 2027 10:11:14 +0000
asID:                     4811
IP address blocks:        103.202.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:44:f2:c1:81:8a:de:f6:a5:fd:c6:3f:33:81:2c:75:1a:f8:b9:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
        Validity
            Not Before: May 13 10:06:14 2026 GMT
            Not After : May 12 10:11:14 2027 GMT
        Subject: CN=5FCAE4F35536BD2B86F5B208995A22BA40D45660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:55:72:a8:e9:4b:a6:7b:34:93:cd:35:db:95:
                    5e:5d:c6:b6:37:83:f7:4b:71:d8:be:4e:26:79:09:
                    71:21:96:0e:79:bd:69:06:a4:ec:67:01:36:a7:84:
                    5d:eb:05:d2:b7:b9:13:e2:d5:1a:0f:2d:80:8e:d9:
                    ff:2e:64:b2:8c:7c:29:af:b3:aa:c2:bb:4f:7d:2d:
                    30:11:4c:0e:4e:67:12:4c:4d:0f:ad:c9:73:b1:44:
                    85:97:45:63:2c:41:91:5f:2f:85:d3:e1:3b:fb:06:
                    bc:89:b1:ce:c1:de:d4:11:30:37:c8:45:8d:02:1a:
                    31:d5:ca:3a:5d:3a:44:2b:33:07:71:3d:7c:67:ea:
                    13:9d:7b:1c:b0:77:0e:8c:0f:cb:9a:e4:39:c5:9c:
                    40:c1:00:c3:27:49:de:95:f6:2e:ae:ad:e0:35:e9:
                    7c:14:c4:b5:fe:48:d1:97:fd:20:ad:8a:46:31:ea:
                    23:ec:d3:99:fb:52:38:61:07:0c:ee:d9:c9:70:ce:
                    89:70:5d:ae:3d:2a:a2:ee:84:37:7e:5f:a0:60:82:
                    0d:20:bf:69:eb:e7:e3:db:38:a2:16:50:31:07:7e:
                    46:be:cb:1f:59:b2:8f:7e:9f:f9:48:80:a0:01:5f:
                    47:c3:ee:39:37:a5:5e:c5:93:a5:b9:30:8f:9a:3a:
                    05:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:CA:E4:F3:55:36:BD:2B:86:F5:B2:08:99:5A:22:BA:40:D4:56:60
            X509v3 Authority Key Identifier:
                keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132342e302f32322d3232203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.202.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:58:ff:71:8e:8a:02:81:0c:0b:97:6a:7b:b6:cd:91:e3:69:
         5d:55:e0:71:63:d2:28:89:f3:ed:52:e0:a1:00:45:4a:f3:77:
         cc:e8:9b:f5:f2:b3:c7:d0:4f:04:ec:8c:47:f0:b9:a4:5f:5f:
         2a:da:9d:5d:63:5e:7e:60:61:b1:2f:6d:22:62:5b:6e:33:cf:
         bb:0b:56:c4:4e:4d:7e:fd:02:40:a8:4c:36:75:2b:65:e5:a3:
         c1:d9:1d:f3:ac:a8:90:c6:25:6e:36:2d:a5:a8:39:ad:a7:b3:
         80:d1:9c:8b:1b:f5:67:40:3b:0e:1a:f6:7c:f6:23:9d:70:f8:
         38:13:9f:61:0b:56:26:b2:d8:7e:11:bb:02:e9:d5:ee:9a:69:
         bb:e4:6e:d6:48:cd:df:35:69:d2:7d:0e:b3:f6:8c:09:85:97:
         f6:5a:2c:bf:1a:9e:d0:ff:1d:5a:f4:51:6e:20:64:d8:10:c8:
         39:17:8e:eb:90:00:3e:01:e5:84:da:8d:d1:95:77:e9:47:9a:
         0f:fe:48:86:5f:2d:3f:11:17:0b:ac:5a:63:d1:b7:b2:96:ce:
         da:f0:8f:78:ae:0f:45:8a:88:1f:1b:0a:07:2c:44:61:01:82:
         a4:8b:68:71:b7:bc:c1:f2:9a:ed:2c:b4:6a:f0:75:c0:b8:d5:
         46:ee:4d:00
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUaETywYGK3val/cY/M4EsdRr4uZgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcw
RDkwNkYyMDAeFw0yNjA1MTMxMDA2MTRaFw0yNzA1MTIxMDExMTRaMDMxMTAvBgNV
BAMTKDVGQ0FFNEYzNTUzNkJEMkI4NkY1QjIwODk5NUEyMkJBNDBENDU2NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkVXKo6UumezSTzTXblV5dxrY3
g/dLcdi+TiZ5CXEhlg55vWkGpOxnATanhF3rBdK3uRPi1RoPLYCO2f8uZLKMfCmv
s6rCu099LTARTA5OZxJMTQ+tyXOxRIWXRWMsQZFfL4XT4Tv7BryJsc7B3tQRMDfI
RY0CGjHVyjpdOkQrMwdxPXxn6hOdexywdw6MD8ua5DnFnEDBAMMnSd6V9i6ureA1
6XwUxLX+SNGX/SCtikYx6iPs05n7UjhhBwzu2clwzolwXa49KqLuhDd+X6Bggg0g
v2nr5+PbOKIWUDEHfka+yx9Zso9+n/lIgKABX0fD7jk3pV7Fk6W5MI+aOgWbAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUX8rk81U2vSuG9bIImVoiukDUVmAwHwYDVR0j
BBgwFoAUTYevylZ1UXlWNYyJbCHD5w2QbyAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
Njg1MTU0OTcxMzI2ODc1NS8wLzREODdBRkNBNTY3NTUxNzk1NjM1OEM4OTZDMjFD
M0U3MEQ5MDZGMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcwRDkwNkYyMC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwNjg1MTU0OTcxMzI2ODc1NS8wLzMxMzAzMzJlMzIz
MDMyMmUzMTMyMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzEzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmfKfDANBgkqhkiG9w0BAQsFAAOCAQEATFj/cY6KAoEMC5dqe7bNkeNp
XVXgcWPSKInz7VLgoQBFSvN3zOib9fKzx9BPBOyMR/C5pF9fKtqdXWNefmBhsS9t
ImJbbjPPuwtWxE5Nfv0CQKhMNnUrZeWjwdkd86yokMYlbjYtpag5raezgNGcixv1
Z0A7Dhr2fPYjnXD4OBOfYQtWJrLYfhG7AunV7pppu+Ru1kjN3zVp0n0Os/aMCYWX
9losvxqe0P8dWvRRbiBk2BDIOReO65AAPgHlhNqN0ZV36UeaD/5Ihl8tPxEXC6xa
Y9G3spbO2vCPeK4PRYqIHxsKByxEYQGCpItocbe8wfKa7Sy0avB1wLjVRu5NAA==
-----END CERTIFICATE-----
Generated at Wed May 13 21:34:38 2026 by rpki-client