Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3134342e302f32322d3232203d3e203633363139.roa
File:                     3130332e3230322e3134342e302f32322d3232203d3e203633363139.roa (raw, json)
Hash identifier:          jBZgWDfIwJjaZlJv+p/TMqJtLpT/q14lH1GDCCgYs3M=
Subject key identifier:   93:84:40:B8:DC:E0:78:B9:51:AF:24:10:A3:AD:76:FF:27:93:2E:95
Certificate issuer:       /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial:       5020532D00EC358E7FA4D323D18C2523E08972E9
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3134342e302f32322d3232203d3e203633363139.roa
Signing time:             Wed 13 May 2026 10:11:14 +0000
ROA not before:           Wed 13 May 2026 10:06:14 +0000
ROA not after:            Wed 12 May 2027 10:11:14 +0000
asID:                     63619
IP address blocks:        103.202.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:20:53:2d:00:ec:35:8e:7f:a4:d3:23:d1:8c:25:23:e0:89:72:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
        Validity
            Not Before: May 13 10:06:14 2026 GMT
            Not After : May 12 10:11:14 2027 GMT
        Subject: CN=938440B8DCE078B951AF2410A3AD76FF27932E95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:30:16:3f:71:14:b3:c4:d2:74:72:68:a9:6f:
                    75:77:a6:49:bd:02:5e:f1:00:0c:f3:03:95:8e:49:
                    d1:18:bb:c7:33:43:fc:d5:63:fd:7b:c9:97:22:2c:
                    6f:b1:6f:bc:1b:58:3e:b6:e3:9d:f6:a0:49:15:48:
                    2e:38:24:b8:95:82:d2:6f:a6:69:d1:ca:03:6b:f7:
                    98:e0:e4:8c:32:d0:e2:60:ff:fc:d5:bb:c8:ec:4c:
                    58:2b:9a:43:b1:01:b1:26:d4:99:9d:76:77:16:2f:
                    69:23:3f:bb:c7:27:40:e4:28:71:9f:a1:0c:4d:41:
                    1c:ea:61:67:9d:dd:21:c9:e4:50:2d:b1:0c:e9:dc:
                    df:21:cc:a9:d3:f7:7a:0f:62:f1:d6:c7:dc:46:70:
                    3b:53:7f:cc:44:e6:00:15:7c:4c:c6:08:c2:9d:78:
                    ff:7a:84:27:a8:57:1e:a1:32:8f:58:06:93:1b:13:
                    ab:03:47:98:84:e8:34:31:4d:5c:c8:c4:4e:38:d1:
                    5e:86:07:2f:c9:be:fb:2f:aa:10:b7:65:bd:f0:09:
                    f4:b8:7b:92:24:4e:c9:6b:44:df:58:74:b9:2a:cb:
                    56:6f:6e:d4:89:2a:4d:ac:28:94:9d:ba:d6:31:0b:
                    fc:70:e8:3a:64:ca:2c:a7:c8:d4:de:0d:73:be:66:
                    64:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:84:40:B8:DC:E0:78:B9:51:AF:24:10:A3:AD:76:FF:27:93:2E:95
            X509v3 Authority Key Identifier:
                keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3134342e302f32322d3232203d3e203633363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.202.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:c1:4f:06:ba:22:bf:96:78:ea:3f:1b:a3:1e:41:df:0a:0d:
         f0:5c:e6:23:4b:a7:83:f9:e4:59:de:5a:2f:2b:1a:d7:dd:ff:
         36:07:ae:f9:e2:1a:27:ed:81:55:06:6e:80:68:6b:5d:be:ca:
         9e:58:75:f2:6b:88:06:4f:35:37:f2:ce:b2:76:73:a4:f5:de:
         e6:70:8b:9b:5e:61:24:aa:41:46:e6:7d:45:5d:f4:2a:ab:3b:
         9d:56:e0:1c:fe:cb:2a:c8:d6:64:1c:54:ec:ab:b6:31:f4:b2:
         04:a1:da:d2:66:43:dc:36:d7:c5:d1:5b:0d:90:fc:bf:a5:cf:
         3b:55:3e:ba:2b:36:82:3d:13:17:4c:fb:2b:53:a6:fb:2a:cf:
         1c:b8:ce:e6:b4:d2:02:c8:66:fb:a4:d1:ee:d5:86:4d:e7:57:
         eb:89:ee:84:54:e1:fa:33:6a:4f:62:08:70:cd:99:45:ba:51:
         50:c2:1c:ba:df:02:d7:65:61:fe:a4:78:b4:09:fc:28:3f:04:
         6b:ff:ce:91:0d:21:7e:87:a1:88:6c:75:00:c6:53:53:0f:1b:
         09:92:42:0c:0f:84:93:b8:17:b7:01:00:a7:39:20:73:de:e3:
         8f:c7:f4:69:51:3d:00:d9:c5:c9:b5:df:ff:00:28:aa:46:83:
         e6:50:38:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:34:50 2026 by rpki-client