Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3134302e302f32322d3232203d3e203137363231.roa
File:                     3130332e3230322e3134302e302f32322d3232203d3e203137363231.roa (raw, json)
Hash identifier:          tCBpwQJGrxBvuG7R4XumtibZtqn8X58yZGJxvXWy2Wo=
Subject key identifier:   0B:59:41:EF:7B:9E:F9:7A:DB:94:1E:78:7D:28:1E:93:33:BE:86:C6
Certificate issuer:       /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial:       5839B3C6EEAC841C49A9041638F47EFE9D7F1814
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3134302e302f32322d3232203d3e203137363231.roa
Signing time:             Wed 13 May 2026 10:11:13 +0000
ROA not before:           Wed 13 May 2026 10:06:13 +0000
ROA not after:            Wed 12 May 2027 10:11:13 +0000
asID:                     17621
IP address blocks:        103.202.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:39:b3:c6:ee:ac:84:1c:49:a9:04:16:38:f4:7e:fe:9d:7f:18:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
        Validity
            Not Before: May 13 10:06:13 2026 GMT
            Not After : May 12 10:11:13 2027 GMT
        Subject: CN=0B5941EF7B9EF97ADB941E787D281E9333BE86C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:38:a6:ae:ba:03:c4:a3:23:9d:b6:45:c5:d5:
                    a2:53:1d:5a:55:2b:5d:a9:31:f0:ae:2b:5b:ee:eb:
                    db:df:0a:7c:9e:02:31:29:fe:d9:9f:58:f7:0e:67:
                    81:70:cc:34:cd:a8:c9:1d:4f:4a:07:94:a2:bb:a3:
                    16:3e:8d:12:e2:17:a8:7f:09:15:e3:55:99:bf:20:
                    14:4f:97:f0:52:19:3c:88:24:1e:f9:9c:2f:eb:eb:
                    2c:02:57:4d:56:1c:7d:79:be:32:3f:43:5f:ed:66:
                    e9:ea:e3:47:6d:a5:7a:5a:80:22:a5:69:f9:89:9d:
                    04:c5:69:72:fa:8c:33:c8:c7:57:fb:d7:b7:23:69:
                    34:5a:7d:10:2d:ec:09:bc:1a:d9:7b:16:13:e2:4e:
                    fe:9b:5b:21:dc:8b:e0:89:4d:27:93:b2:5a:1d:84:
                    29:13:ea:e9:02:01:07:83:ba:fb:24:62:4d:5f:1a:
                    4f:7c:e6:13:ef:11:31:7b:d3:09:32:25:02:6d:8b:
                    1f:6c:fc:8c:ea:03:fc:34:c2:ee:cc:2b:bc:1a:fe:
                    47:f6:9a:24:0f:f3:1e:55:85:09:6c:62:04:f5:ed:
                    0e:be:b9:26:8e:ac:94:87:1e:fb:96:87:c4:f5:9a:
                    3f:31:4e:23:87:fb:8b:03:55:5a:f9:be:f6:15:d3:
                    4d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:59:41:EF:7B:9E:F9:7A:DB:94:1E:78:7D:28:1E:93:33:BE:86:C6
            X509v3 Authority Key Identifier:
                keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3134302e302f32322d3232203d3e203137363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.202.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:1a:4e:00:43:e0:65:23:42:df:10:60:bb:c4:0b:a3:a8:7a:
         a1:d9:b6:cb:2a:26:05:24:d5:e5:ad:3d:19:ad:8d:d3:45:e9:
         29:89:f7:c5:64:3b:61:0a:5b:4d:14:52:7a:cf:fc:71:00:82:
         68:f5:e7:a8:99:fa:ba:97:dd:01:47:bc:99:a8:5f:ab:d6:21:
         b4:55:4c:f8:c4:3a:e4:3f:bb:f6:8f:91:f6:68:9b:90:17:89:
         0b:09:cf:a2:b3:29:e1:42:bd:2f:ed:c9:10:af:b4:08:43:f9:
         9d:3f:9a:fb:67:15:77:18:0b:df:6f:36:20:9e:9e:17:7f:59:
         94:b4:44:85:99:97:0e:57:7d:1c:58:c3:10:00:25:95:63:dd:
         4e:3e:30:00:85:18:ce:f2:bf:72:62:bc:5f:56:4d:00:53:72:
         29:6d:9d:0e:bb:96:69:ed:9c:9d:49:f1:0a:ed:e9:38:7e:78:
         e8:57:33:ee:70:ab:c7:c7:35:78:b4:84:d3:0d:5d:8b:2b:36:
         a1:99:a0:88:d8:0c:5b:dd:7f:67:ca:79:29:4b:ee:8b:e6:04:
         ea:96:b8:3c:09:5d:7c:0b:a6:ae:a5:fc:ed:02:97:85:32:f2:
         d6:88:ec:2d:79:cf:a4:a9:9f:27:bf:e9:b4:e0:5a:b5:3e:63:
         92:fe:b8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:34:32 2026 by rpki-client