Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3134342e302f32322d3232203d3e2034383131.roa
File:                     3130332e3230322e3134342e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier:          H0xqUU6Dc6AAakFUhgacPyG26V4rt4RBfiXZXGHcLvE=
Subject key identifier:   52:E7:ED:A3:08:97:A5:BF:CA:10:0E:9A:68:87:CA:DE:37:76:EA:83
Certificate issuer:       /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial:       088E3389B5350E35FFAE7EF6B81C5F4C9C0EFE82
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3134342e302f32322d3232203d3e2034383131.roa
Signing time:             Wed 13 May 2026 10:11:14 +0000
ROA not before:           Wed 13 May 2026 10:06:14 +0000
ROA not after:            Wed 12 May 2027 10:11:14 +0000
asID:                     4811
IP address blocks:        103.202.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:8e:33:89:b5:35:0e:35:ff:ae:7e:f6:b8:1c:5f:4c:9c:0e:fe:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
        Validity
            Not Before: May 13 10:06:14 2026 GMT
            Not After : May 12 10:11:14 2027 GMT
        Subject: CN=52E7EDA30897A5BFCA100E9A6887CADE3776EA83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9f:58:ff:a1:bf:7a:dc:58:10:63:14:aa:6e:
                    e1:e8:47:c1:35:03:91:2c:14:f1:ca:c6:e6:e9:04:
                    e0:3a:36:1c:f3:05:a5:61:26:78:b0:8d:24:2a:52:
                    de:02:45:75:ba:3e:e8:26:d3:05:a1:8c:53:4e:db:
                    2e:9f:e1:80:53:9d:86:d4:c3:e3:d8:33:45:54:77:
                    f1:b5:4e:af:09:a5:17:71:07:df:0e:71:58:e3:64:
                    13:c5:8d:5b:0d:68:e4:bf:85:47:27:dd:e8:4c:51:
                    f1:bf:cc:8d:dd:92:74:83:8a:42:ba:4d:4e:99:92:
                    60:9c:3e:03:ef:57:f4:4c:6b:a6:1f:a3:8b:76:5c:
                    b3:3a:f9:f2:93:c4:7b:9d:36:50:be:ad:4f:c4:13:
                    3d:6d:07:e9:15:0c:3f:c2:d7:75:74:e5:91:0c:a3:
                    23:e7:7f:e2:33:4f:d7:17:bb:f9:d8:e2:df:bc:8a:
                    08:81:fb:22:56:a7:2b:51:4d:f3:70:38:76:65:69:
                    b3:b3:bb:e6:64:17:e9:c1:7b:4d:9c:95:fb:b2:c7:
                    88:c7:e4:c1:9c:75:56:e7:56:7d:60:49:36:4e:99:
                    6b:b8:3f:b1:16:62:6e:64:cc:5f:78:51:20:e2:6a:
                    3e:3b:e1:40:0a:b7:f0:fe:d7:c8:e5:93:b1:38:82:
                    1f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E7:ED:A3:08:97:A5:BF:CA:10:0E:9A:68:87:CA:DE:37:76:EA:83
            X509v3 Authority Key Identifier:
                keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3134342e302f32322d3232203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.202.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:44:b8:cc:41:e1:f7:5b:e1:1d:8b:f5:e6:9f:1f:ad:e5:de:
         aa:dc:84:ef:c7:da:db:98:b8:65:42:c2:cd:5a:4d:61:ec:b7:
         7c:50:ca:20:94:b2:6a:76:61:66:72:c6:4b:9c:11:05:20:68:
         d4:92:40:fe:33:19:2d:ce:65:6d:6f:3c:4d:f2:a6:f0:ee:2f:
         70:3d:e9:a7:aa:87:01:93:0d:da:5b:ea:c9:4f:54:2f:58:4b:
         54:a7:a3:21:d7:cf:b3:ba:6f:94:ba:ec:cf:b6:85:a2:86:22:
         e0:3a:0a:3b:ab:2a:43:53:8e:89:6a:ab:7a:c2:2f:39:14:0a:
         58:4b:8e:d0:7d:5c:69:92:89:3e:7a:a6:ca:93:3b:2f:e4:1e:
         cf:87:1f:9b:60:96:31:a6:cd:6d:d7:39:c4:ca:91:cf:43:95:
         71:bd:a1:d4:c4:bb:36:2d:f1:69:96:a5:df:a5:21:6e:8f:62:
         71:18:69:65:cf:c5:a5:51:2a:e3:34:0e:e7:6f:99:d4:5f:ca:
         2e:84:f1:87:9b:90:82:be:e5:14:1e:52:60:56:2f:08:97:8f:
         42:db:2b:dc:53:98:47:2a:ba:75:ae:53:78:4c:7d:0b:83:e6:
         7d:8e:b3:4a:08:fd:8d:7c:dd:25:f1:53:71:a9:91:e3:ba:16:
         80:4a:45:b7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 21:34:32 2026 by rpki-client