Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e31362e302f32322d3232203d3e2034383131.roa
File:                     3130332e3230322e31362e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier:          RXw4AL2czH5XMJNGeTPG7Epky6HLsi8VJs3SrP3UPD4=
Subject key identifier:   8E:1A:93:68:CF:E5:68:EA:DB:C7:9F:B6:E5:F0:96:07:75:0B:B7:09
Certificate issuer:       /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial:       1B45393583ADD14C95DC3937A84326569D14A5B7
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e31362e302f32322d3232203d3e2034383131.roa
Signing time:             Wed 13 May 2026 10:11:15 +0000
ROA not before:           Wed 13 May 2026 10:06:15 +0000
ROA not after:            Wed 12 May 2027 10:11:15 +0000
asID:                     4811
IP address blocks:        103.202.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:45:39:35:83:ad:d1:4c:95:dc:39:37:a8:43:26:56:9d:14:a5:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
        Validity
            Not Before: May 13 10:06:15 2026 GMT
            Not After : May 12 10:11:15 2027 GMT
        Subject: CN=8E1A9368CFE568EADBC79FB6E5F09607750BB709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8f:48:b0:28:7b:88:83:e2:84:cc:30:6e:98:
                    cb:72:c8:ea:11:43:b5:da:00:dc:96:8c:51:df:94:
                    19:c3:cd:75:4c:58:f2:d8:b9:76:74:f6:ca:d2:1f:
                    96:06:26:d1:54:30:1c:ae:01:c4:e1:bd:cd:55:db:
                    7a:23:7c:df:7e:cd:96:c1:1f:64:9c:85:af:99:9d:
                    d4:89:7c:70:56:be:32:cd:3a:ad:39:39:ad:eb:d5:
                    c4:22:fe:3b:b7:aa:9f:fe:77:3e:af:4d:87:5f:e7:
                    b3:ce:05:f2:59:ca:ce:3c:37:74:c8:aa:fb:d8:7d:
                    eb:56:53:5d:46:32:d9:6c:3c:a2:c2:25:31:76:3b:
                    dd:d3:1f:7c:b3:21:71:18:e3:c2:63:58:39:07:e3:
                    bd:21:74:2b:c4:32:dd:90:af:5d:ba:96:33:4b:6d:
                    fa:eb:14:d1:ad:e7:21:76:4b:93:d5:f3:fa:36:53:
                    a4:08:80:e2:c2:23:2f:d6:fd:15:16:16:b9:2d:6c:
                    32:9e:6e:01:8d:f1:76:21:15:36:09:13:c4:7d:a4:
                    d6:8e:5c:7a:ea:9c:3e:60:4c:78:7c:70:b8:73:a1:
                    a7:d9:09:b0:95:51:af:57:c7:63:37:4d:31:1d:a6:
                    7f:2c:5c:52:7f:24:76:75:33:5a:33:4f:2c:4f:4a:
                    6c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1A:93:68:CF:E5:68:EA:DB:C7:9F:B6:E5:F0:96:07:75:0B:B7:09
            X509v3 Authority Key Identifier:
                keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e31362e302f32322d3232203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.202.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:1f:f6:37:80:3b:28:99:02:b8:a6:4e:89:7a:e0:18:8e:c4:
         71:4c:62:d0:73:8b:ec:cb:6e:1c:61:f6:46:76:5b:4c:a1:ab:
         18:cc:1d:d1:9f:06:03:3d:1a:0d:02:04:c3:aa:5b:da:87:bb:
         40:c7:8a:5a:0e:c4:c6:4e:b4:01:9e:81:1a:5c:b0:8d:59:23:
         48:61:c6:a5:0a:1a:6a:0b:1f:16:48:29:12:88:d0:a3:a5:68:
         85:f8:6c:14:58:91:2a:0e:79:e0:a5:62:3f:4a:ff:12:24:cb:
         81:68:4e:cc:09:ec:8c:75:28:f6:9c:4a:93:0f:57:56:37:40:
         b3:36:f7:14:67:b3:62:98:73:29:a0:89:56:fa:89:c3:bd:43:
         66:a1:5a:8a:40:89:01:ac:23:23:30:e1:66:9a:77:4a:a0:d8:
         93:11:0e:c7:cb:2b:81:6d:25:c7:b9:45:5f:3d:b7:30:77:5f:
         a8:df:63:5a:55:c1:8a:f4:9f:7c:64:45:c9:43:77:1a:80:55:
         e5:57:10:e7:0e:92:a1:46:c3:53:58:3e:37:0a:0a:d6:86:0b:
         08:8b:86:77:d2:e0:e3:3b:4e:43:e3:5e:b8:19:6c:96:ba:36:
         37:d8:17:c7:24:ed:44:89:0f:35:6c:19:c2:05:4e:3b:4e:d2:
         ec:85:3b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:34:36 2026 by rpki-client