Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e33362e302f32322d3232203d3e2034383131.roa
File:                     3130332e3230322e33362e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier:          DiM3UVAFYgaZi7LnQlxEIor45RXiWNtQdtnQrKHMcNc=
Subject key identifier:   EC:B7:E7:EB:AC:9B:5F:3B:CF:8A:A5:4E:77:BD:69:10:94:9B:7A:84
Certificate issuer:       /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial:       1B17F1533C75C4070288B1B18D37745E32185FE1
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e33362e302f32322d3232203d3e2034383131.roa
Signing time:             Wed 13 May 2026 10:11:14 +0000
ROA not before:           Wed 13 May 2026 10:06:14 +0000
ROA not after:            Wed 12 May 2027 10:11:14 +0000
asID:                     4811
IP address blocks:        103.202.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:17:f1:53:3c:75:c4:07:02:88:b1:b1:8d:37:74:5e:32:18:5f:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
        Validity
            Not Before: May 13 10:06:14 2026 GMT
            Not After : May 12 10:11:14 2027 GMT
        Subject: CN=ECB7E7EBAC9B5F3BCF8AA54E77BD6910949B7A84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:56:a2:ed:90:d6:f1:bc:79:b9:07:5b:91:85:
                    5f:88:70:96:f3:87:b8:cb:35:04:33:91:63:bb:f7:
                    04:c2:8c:20:72:19:68:98:67:b7:ed:da:db:5a:7c:
                    97:4a:e9:42:40:ef:fa:14:e0:35:93:5a:1f:77:82:
                    45:de:0b:31:ed:f9:88:18:1c:b8:10:07:8d:e7:cd:
                    5f:32:26:06:a5:f5:bb:4b:ab:4e:e3:f4:ee:a4:bb:
                    e3:62:b6:e3:10:eb:fc:bc:b6:c1:bb:f4:2f:e6:c9:
                    8e:d9:14:f0:5b:4d:bd:bb:36:98:f9:f1:e7:fe:53:
                    71:36:12:44:01:51:a2:9d:84:c4:c8:a5:26:6b:10:
                    ff:40:dc:b2:86:11:dd:f9:90:3e:f8:8f:e1:99:8b:
                    47:b7:fb:57:91:df:28:82:5c:5a:42:78:96:41:13:
                    e7:ae:a3:bb:b2:f0:96:ac:81:b4:ca:8f:81:c4:96:
                    31:18:f0:07:3f:9d:84:90:82:d7:77:dc:65:d6:a7:
                    af:78:a7:9b:ec:9b:55:66:0f:e9:06:3f:07:44:3d:
                    de:44:be:7e:05:8b:a5:5d:5a:11:40:66:75:17:7c:
                    c1:f9:ad:60:ef:14:9a:3e:0a:cd:bf:6f:16:76:ac:
                    45:0d:9d:a6:87:5e:b6:3f:e1:0f:a6:df:db:45:89:
                    84:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B7:E7:EB:AC:9B:5F:3B:CF:8A:A5:4E:77:BD:69:10:94:9B:7A:84
            X509v3 Authority Key Identifier:
                keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e33362e302f32322d3232203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.202.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:3b:5c:ce:ee:2e:96:61:83:3a:1a:6b:7e:80:71:7a:b2:a0:
         fc:f2:a2:c3:d4:34:f6:30:3e:2a:23:7f:b5:82:3f:ed:0f:c8:
         1e:69:49:85:f0:f3:77:6b:f4:8c:1a:9b:4c:4f:d6:68:3c:9e:
         20:e1:be:96:5f:f5:30:1a:c2:5a:95:56:73:54:88:ec:ba:96:
         6a:d3:84:07:64:d7:38:2c:21:41:80:d8:21:0f:3a:b3:5d:c6:
         c0:4c:35:4a:31:20:bd:18:88:54:c2:40:99:01:7d:e0:6f:0c:
         2e:72:3b:88:3e:8c:bf:51:2b:32:8e:1d:67:49:2c:9f:a5:44:
         50:c8:7d:64:2c:27:bb:af:1b:a8:0f:95:1e:3c:8e:85:2e:68:
         ea:e6:8c:42:24:9d:b6:6e:98:b1:ad:48:ea:1c:3a:41:4b:63:
         d2:66:d3:80:f4:d0:bc:c7:54:65:68:a7:97:0b:fb:fa:04:8b:
         61:09:bc:f0:d2:6c:98:a4:29:b7:8e:5c:99:a0:4e:23:2d:24:
         8a:c9:77:a4:12:2e:7d:11:0f:20:fe:24:a1:2f:d2:ca:51:bc:
         bc:22:51:47:de:53:a4:aa:00:ce:73:b9:a4:de:e1:a3:11:f1:
         8e:84:e5:b3:04:2b:0f:52:55:7b:d6:08:8c:4e:00:3b:ba:2e:
         96:6f:b1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:34:36 2026 by rpki-client