Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3134302e302f32322d3232203d3e2034383131.roa
File:                     3130332e3230322e3134302e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier:          tm/Tyiew+/GTxJT2ADs0GYkejYwmY5dqhhfo6HFBkGw=
Subject key identifier:   C3:7C:E9:C2:66:BF:15:1C:4E:42:3C:67:4C:53:C8:72:E0:2F:85:BC
Certificate issuer:       /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial:       5DB6F303552487D421CFE222A973335CDA6A3A8D
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3134302e302f32322d3232203d3e2034383131.roa
Signing time:             Wed 13 May 2026 10:11:14 +0000
ROA not before:           Wed 13 May 2026 10:06:14 +0000
ROA not after:            Wed 12 May 2027 10:11:14 +0000
asID:                     4811
IP address blocks:        103.202.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:b6:f3:03:55:24:87:d4:21:cf:e2:22:a9:73:33:5c:da:6a:3a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
        Validity
            Not Before: May 13 10:06:14 2026 GMT
            Not After : May 12 10:11:14 2027 GMT
        Subject: CN=C37CE9C266BF151C4E423C674C53C872E02F85BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8b:60:be:02:a5:d2:16:d4:a3:d9:28:54:7d:
                    0b:aa:95:99:8b:f8:e2:11:af:b6:6b:76:8a:15:75:
                    ee:e1:25:23:5a:1d:75:d0:a3:0b:fc:f2:ec:83:82:
                    58:60:79:fd:78:ea:49:27:9d:32:9f:7b:c0:43:2b:
                    7a:40:25:dc:d3:95:f0:b0:ca:ea:3d:5d:8c:0e:bf:
                    8a:fb:6c:36:57:83:38:34:0f:83:9d:ec:0b:42:e1:
                    d7:1f:58:21:3f:35:b3:61:a9:57:32:c9:d2:7a:b9:
                    35:7e:75:4e:10:bc:40:84:18:fb:d4:9d:23:d8:5e:
                    e5:22:b7:6b:2c:27:cc:57:31:56:91:95:5a:53:7e:
                    cf:ac:66:84:8d:12:0b:dd:fb:75:24:85:e5:00:26:
                    ef:ca:7b:49:74:ca:11:d0:d7:d5:67:fb:c1:12:9d:
                    a7:35:3c:af:a4:08:9f:a5:4a:ca:45:b5:55:5c:6e:
                    64:7e:24:69:28:6c:c6:61:fb:8b:69:be:f3:81:ce:
                    6b:07:ca:d0:05:44:80:b7:8d:e7:d0:ac:88:ca:d2:
                    e5:81:89:19:f2:be:04:85:75:96:e8:84:a1:f2:b9:
                    d1:90:38:fc:de:b6:59:c7:b1:c5:09:9d:98:8b:f3:
                    b2:bd:d5:f7:a8:79:a9:3d:ee:7e:d9:e3:62:c3:03:
                    0e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7C:E9:C2:66:BF:15:1C:4E:42:3C:67:4C:53:C8:72:E0:2F:85:BC
            X509v3 Authority Key Identifier:
                keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3134302e302f32322d3232203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.202.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:1a:f2:93:77:08:bb:cd:ec:a9:1d:c1:48:e9:bf:3e:2e:d9:
         bd:4f:ab:f4:ef:33:8d:2d:a8:09:6f:37:b6:95:3c:9f:77:5b:
         52:c1:b4:d8:d3:0a:87:64:af:d0:11:c7:ba:b4:0c:66:0f:35:
         06:b6:68:52:a1:f1:18:b5:7b:4a:e5:7f:00:64:0d:20:6f:da:
         73:7b:ff:fc:c3:07:be:ce:c0:e8:17:d5:65:77:d3:4b:01:f9:
         d9:af:4d:68:fe:bb:59:ee:5e:2b:0f:66:4d:5c:47:f5:21:6d:
         e2:ce:ed:d3:e7:42:ee:e4:c0:49:fe:92:7e:42:55:15:1f:0b:
         93:dd:92:76:f5:6b:38:74:65:80:f7:30:77:f6:af:32:25:bd:
         bd:86:82:d0:8b:62:24:b7:b4:42:38:e3:c5:b8:d9:13:00:eb:
         f3:bd:4f:7f:2b:04:7b:7c:ea:a9:17:11:a2:5b:d0:04:81:0d:
         bc:4e:15:0b:37:95:f9:14:b3:a2:5f:e8:f3:cb:3a:14:9e:af:
         38:c5:e5:20:e2:66:a8:5e:ea:5d:84:37:34:23:81:58:86:33:
         f8:bd:68:f7:4c:f1:f1:ad:fe:9c:a7:c7:60:5f:33:bd:e4:c9:
         8b:08:f8:a6:16:b7:18:16:cb:4c:e2:10:74:a4:20:6f:bf:36:
         73:82:15:fb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 21:34:33 2026 by rpki-client