Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3133362e302f32322d3232203d3e2034383131.roa
File:                     3130332e3230322e3133362e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier:          xEMBsuJ52e7upntEm8F1LYn4Mr3uWl0B8OZoZEEzmJU=
Subject key identifier:   54:47:63:9E:E3:D5:C0:84:E9:D3:FA:44:89:B0:89:9B:82:31:52:BB
Certificate issuer:       /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial:       5FF05ABC5F4F84CAF6541CFCB63C572FF3D8C5C1
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3133362e302f32322d3232203d3e2034383131.roa
Signing time:             Wed 13 May 2026 10:11:14 +0000
ROA not before:           Wed 13 May 2026 10:06:14 +0000
ROA not after:            Wed 12 May 2027 10:11:14 +0000
asID:                     4811
IP address blocks:        103.202.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f0:5a:bc:5f:4f:84:ca:f6:54:1c:fc:b6:3c:57:2f:f3:d8:c5:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
        Validity
            Not Before: May 13 10:06:14 2026 GMT
            Not After : May 12 10:11:14 2027 GMT
        Subject: CN=5447639EE3D5C084E9D3FA4489B0899B823152BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ab:17:08:d3:72:4d:e4:8a:5d:f7:05:56:ed:
                    62:f4:45:d7:24:fe:85:27:f6:79:ae:0d:7e:d9:fb:
                    00:e9:19:a7:f5:85:b1:8f:12:68:f1:ea:bc:06:05:
                    5a:df:d5:5b:a0:fb:35:5d:68:e5:7a:f8:67:87:48:
                    9b:50:64:bd:c9:76:f9:0c:ec:a3:d9:ba:1d:49:47:
                    9a:33:b8:86:95:47:4c:bb:1a:b1:a8:ba:81:42:70:
                    47:e8:20:a6:8d:e2:1a:73:61:9b:b0:fc:3a:9b:69:
                    cd:37:41:9e:e4:db:fc:53:a5:4d:22:dc:42:53:c9:
                    03:3b:30:8a:aa:3a:c4:42:cc:39:77:a8:a1:45:ef:
                    73:45:14:81:c9:71:4a:32:38:87:39:bc:7d:b1:1e:
                    67:97:37:47:36:17:9f:bd:76:a1:89:5f:73:2d:a2:
                    7d:4c:66:bc:57:98:7c:c2:70:9c:e6:c5:13:a3:4e:
                    62:03:aa:04:9a:d9:bc:3a:e5:f6:d9:bd:1f:db:36:
                    df:15:05:fe:8c:67:90:f4:78:61:a5:3a:8b:2d:12:
                    72:d9:d8:10:4a:1c:17:d0:c9:ee:25:19:93:87:af:
                    cd:cb:e7:7c:37:8b:2c:e4:72:55:3d:06:d1:8c:ed:
                    5a:5d:56:d3:d5:14:4a:ff:95:83:ea:f6:c1:97:4b:
                    25:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:47:63:9E:E3:D5:C0:84:E9:D3:FA:44:89:B0:89:9B:82:31:52:BB
            X509v3 Authority Key Identifier:
                keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3133362e302f32322d3232203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.202.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:44:97:09:b3:ce:7c:1a:67:a4:ea:6d:b4:62:56:ed:44:da:
         40:39:1d:94:6d:6a:61:77:ba:e2:48:09:a0:36:85:bc:95:db:
         78:85:eb:ab:d3:d4:36:c3:4e:70:ae:b8:0b:1f:1f:8f:eb:fc:
         85:18:fb:56:3a:ba:60:db:77:11:5f:3d:c9:2f:42:7f:24:67:
         63:91:a2:1d:d0:34:13:00:d6:b9:65:1b:3e:7c:69:cf:23:a2:
         56:3f:e1:1b:30:6f:81:2e:a6:ec:2d:e8:6f:96:bb:42:ec:5d:
         0d:31:6b:70:d4:2b:49:77:d9:dc:36:7e:6a:94:56:d9:23:3e:
         7d:27:6c:30:c7:c5:94:54:a8:3e:c2:ce:52:55:67:5a:54:c4:
         d0:55:de:a4:62:9b:b8:05:57:3f:72:be:cb:a7:39:35:3b:80:
         39:b0:c3:55:4d:31:3a:ce:6c:b0:44:9c:95:be:65:c2:24:fb:
         a8:01:aa:46:b0:13:64:cf:cb:da:b3:4b:94:82:3f:3c:de:3e:
         c6:1e:e2:63:93:7c:7b:bd:07:9c:4a:91:d5:d2:6f:c0:15:0f:
         36:d1:45:b7:23:79:73:02:bd:03:f3:51:52:f3:a0:07:12:f8:
         5f:38:38:ca:00:74:2d:f6:58:00:e2:38:1e:50:61:2c:e4:f3:
         cf:f6:b8:a7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 21:34:34 2026 by rpki-client