Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e32382e302f32322d3232203d3e2034383131.roa
File:                     3130332e3230322e32382e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier:          +lMSDGDMfRIjBIYPN67K1P4owZcKyLM0emj6giSnMb4=
Subject key identifier:   B0:DC:5F:C5:62:5C:14:5D:E8:69:6F:58:18:14:CA:83:38:8A:5E:CE
Certificate issuer:       /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial:       52CB4B880DA7F45259D9F8D76F277DA4E4EF3744
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e32382e302f32322d3232203d3e2034383131.roa
Signing time:             Wed 13 May 2026 10:11:13 +0000
ROA not before:           Wed 13 May 2026 10:06:13 +0000
ROA not after:            Wed 12 May 2027 10:11:13 +0000
asID:                     4811
IP address blocks:        103.202.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:cb:4b:88:0d:a7:f4:52:59:d9:f8:d7:6f:27:7d:a4:e4:ef:37:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
        Validity
            Not Before: May 13 10:06:13 2026 GMT
            Not After : May 12 10:11:13 2027 GMT
        Subject: CN=B0DC5FC5625C145DE8696F581814CA83388A5ECE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bc:3f:65:4b:e6:f3:56:62:23:1c:35:26:91:
                    5f:0e:fc:d6:98:f6:a7:dd:ca:5a:5c:98:c9:17:f4:
                    86:88:79:59:0e:a2:67:4b:ec:98:18:b5:9c:e0:b1:
                    fe:78:a0:51:3a:b6:30:c1:76:75:37:a3:de:e3:06:
                    77:f8:b6:a0:14:36:e8:59:b2:c4:86:6b:da:43:f5:
                    b9:ed:7c:ae:7f:39:a7:7a:c2:ef:e7:41:28:a7:a2:
                    72:59:a8:f7:d7:91:5d:09:6f:1d:6c:47:00:9f:03:
                    8e:bc:bd:60:2f:55:f4:f9:66:71:35:38:f8:36:f0:
                    55:cb:7c:13:e3:a6:a3:5b:70:05:2f:1d:ea:f7:0c:
                    92:57:e9:90:d5:64:94:63:98:27:ed:91:c7:5e:a5:
                    e4:f4:24:22:d8:2e:91:55:f6:50:c0:56:d0:65:4b:
                    79:db:eb:e2:64:09:d3:47:71:32:a4:28:ff:30:27:
                    04:c6:91:5d:26:c5:40:dd:bc:94:16:f4:bd:38:a3:
                    bf:04:23:0b:53:9c:9d:14:9d:20:78:aa:b9:a4:13:
                    92:de:7a:82:c0:77:e0:26:c4:b9:ee:83:87:96:30:
                    af:69:0a:56:1a:46:de:58:46:ba:da:23:b9:f8:a9:
                    c0:50:92:cb:2a:d7:b2:ca:31:fd:a2:2a:e1:e8:8e:
                    65:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DC:5F:C5:62:5C:14:5D:E8:69:6F:58:18:14:CA:83:38:8A:5E:CE
            X509v3 Authority Key Identifier:
                keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e32382e302f32322d3232203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.202.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:11:76:9e:cc:1a:2c:d4:a6:43:c9:3f:6f:14:f3:8b:b3:c4:
         27:51:bb:46:33:bc:72:81:c2:36:23:44:50:f3:82:4c:6e:d7:
         51:db:20:9a:e4:4e:64:58:02:fe:95:cd:fe:f4:16:46:92:36:
         be:5f:f5:94:72:35:ab:4c:d5:48:22:ac:53:09:e6:18:52:3f:
         5b:ae:c3:f8:75:0d:05:86:71:f1:39:56:5e:a2:77:a8:88:00:
         ef:3d:48:94:3b:66:2e:66:98:44:3c:72:73:c2:a9:1f:eb:fa:
         eb:81:a4:90:c3:80:c0:b5:cc:00:b0:40:69:89:44:96:a5:d0:
         d7:ad:0a:c7:55:db:ca:cb:08:86:d6:47:32:9e:89:3c:53:e9:
         c9:02:c7:c1:ad:7a:b2:5f:53:b4:00:61:d0:22:54:3f:bc:9f:
         2b:5e:98:03:f9:c4:b1:3c:54:a1:fb:6a:40:26:4e:e6:4b:38:
         5e:a8:e8:c7:f6:5f:13:86:62:c1:cb:a7:13:63:f4:b1:9c:31:
         22:ec:33:9d:24:7f:28:fd:e0:38:4c:ab:cf:e5:9d:a4:fd:a9:
         80:39:20:07:c8:23:f1:bf:23:d2:85:82:fa:99:a9:73:b5:fb:
         db:9c:b0:06:a0:54:e1:39:c0:e5:44:6c:55:bb:94:e8:85:79:
         34:ae:8d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:34:36 2026 by rpki-client