Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e34302e302f32322d3232203d3e2034383131.roa
File:                     3130332e3230322e34302e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier:          rXDVkHiRQSrrP6xmKwudP5YmCdrSfCsD4iUhjRuz/Pk=
Subject key identifier:   73:18:89:E2:1A:47:6E:F6:CE:56:A4:50:1E:66:43:4B:37:9E:73:CD
Certificate issuer:       /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial:       1E560DF2CE51A42ED6C9F37282DB7CF4F4109F7B
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e34302e302f32322d3232203d3e2034383131.roa
Signing time:             Wed 13 May 2026 10:27:49 +0000
ROA not before:           Wed 13 May 2026 10:22:49 +0000
ROA not after:            Wed 12 May 2027 10:27:49 +0000
asID:                     4811
IP address blocks:        103.202.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:56:0d:f2:ce:51:a4:2e:d6:c9:f3:72:82:db:7c:f4:f4:10:9f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
        Validity
            Not Before: May 13 10:22:49 2026 GMT
            Not After : May 12 10:27:49 2027 GMT
        Subject: CN=731889E21A476EF6CE56A4501E66434B379E73CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ff:64:62:4e:d0:fc:df:38:c8:97:e2:6a:f5:66:
                    b3:70:c1:1e:4f:28:b3:62:b3:17:28:ff:36:a5:e5:
                    18:3e:c5:98:7e:af:c1:d9:7e:b9:30:1e:12:a7:51:
                    d4:06:0c:25:e8:2d:f6:9f:3c:7d:70:42:8d:9a:e7:
                    8a:d2:52:a5:d3:ef:fd:16:3f:d2:eb:17:b5:bc:d7:
                    3b:16:63:f5:80:4d:79:8a:95:0f:fa:1c:25:e5:bc:
                    10:76:fc:3c:2c:10:d7:61:26:0c:59:df:bb:5b:99:
                    b4:a5:a1:5a:cc:50:aa:4a:5d:b0:63:d8:cf:1b:0c:
                    88:5c:48:c4:ea:27:39:5e:d8:d5:2d:09:d2:25:56:
                    80:83:67:c0:ac:fa:bd:06:c5:10:5c:c4:d0:a5:fe:
                    ea:70:af:2b:87:18:15:3c:06:bc:24:7b:db:2b:11:
                    00:5f:53:10:82:60:70:b2:72:41:7e:c0:60:7d:be:
                    4c:e6:96:b1:52:e5:a2:3b:33:5a:3c:b9:a3:f9:5d:
                    ab:6c:37:54:58:72:87:b0:41:00:ca:5d:19:3e:2a:
                    03:4c:f9:e6:7c:ae:5a:94:cf:76:33:02:b2:5d:c6:
                    f0:af:3a:a0:25:b6:ef:c6:12:89:59:0c:16:79:02:
                    21:7e:da:4e:05:6f:35:72:50:c1:89:c4:0f:2b:54:
                    ba:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:18:89:E2:1A:47:6E:F6:CE:56:A4:50:1E:66:43:4B:37:9E:73:CD
            X509v3 Authority Key Identifier:
                keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e34302e302f32322d3232203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.202.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:63:76:5d:af:c6:f7:47:f2:a8:40:00:b2:d9:d2:98:18:1f:
         85:8e:77:e0:2d:24:0e:3a:c4:95:fd:57:12:d5:e5:99:2e:a6:
         0a:45:ed:68:f6:d3:95:8c:7f:f4:e6:db:04:fc:cd:a7:0f:75:
         c4:fc:54:52:36:ef:9e:36:57:1c:f4:bd:ce:9d:fb:6c:03:f4:
         0d:1b:17:83:3d:fb:e0:dc:69:f3:80:ee:7c:12:82:88:96:0f:
         e3:67:f3:96:4a:74:4a:8b:59:cc:7f:69:ec:ef:20:80:68:80:
         28:2e:92:58:f7:06:07:69:fc:a8:d1:8b:9e:eb:76:59:0b:37:
         7a:eb:a7:8a:bd:4b:93:0c:45:df:77:4b:fb:f6:bb:e9:21:90:
         5f:f3:89:3b:74:e9:14:d4:1e:d5:a0:27:ab:2c:68:70:34:49:
         45:6f:a8:56:b4:b4:8c:78:8d:80:82:38:5d:c1:f6:2c:54:c4:
         47:ad:ea:39:a9:1e:93:96:ce:dc:ac:76:e5:da:70:71:6e:b8:
         ce:a3:52:78:8d:c4:45:24:1e:d1:d4:d1:fe:85:d1:b6:d2:97:
         8d:6c:f7:28:c3:5b:18:56:18:04:79:e5:96:c7:fc:69:3c:2f:
         4f:d8:1e:77:04:60:38:d4:be:5f:0c:c1:e8:00:b3:fb:c4:a6:
         e6:cb:c5:f4
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUHlYN8s5RpC7WyfNygtt89PQQn3swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcw
RDkwNkYyMDAeFw0yNjA1MTMxMDIyNDlaFw0yNzA1MTIxMDI3NDlaMDMxMTAvBgNV
BAMTKDczMTg4OUUyMUE0NzZFRjZDRTU2QTQ1MDFFNjY0MzRCMzc5RTczQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD/ZGJO0PzfOMiX4mr1ZrNwwR5P
KLNisxco/zal5Rg+xZh+r8HZfrkwHhKnUdQGDCXoLfafPH1wQo2a54rSUqXT7/0W
P9LrF7W81zsWY/WATXmKlQ/6HCXlvBB2/DwsENdhJgxZ37tbmbSloVrMUKpKXbBj
2M8bDIhcSMTqJzle2NUtCdIlVoCDZ8Cs+r0GxRBcxNCl/upwryuHGBU8Brwke9sr
EQBfUxCCYHCyckF+wGB9vkzmlrFS5aI7M1o8uaP5XatsN1RYcoewQQDKXRk+KgNM
+eZ8rlqUz3YzArJdxvCvOqAltu/GEolZDBZ5AiF+2k4FbzVyUMGJxA8rVLr/AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUcxiJ4hpHbvbOVqRQHmZDSzeec80wHwYDVR0j
BBgwFoAUTYevylZ1UXlWNYyJbCHD5w2QbyAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
Njg1MTU0OTcxMzI2ODc1NS8wLzREODdBRkNBNTY3NTUxNzk1NjM1OEM4OTZDMjFD
M0U3MEQ5MDZGMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcwRDkwNkYyMC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA2ODUxNTQ5NzEzMjY4NzU1LzAvMzEzMDMzMmUzMjMw
MzIyZTM0MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzEzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmfKKDANBgkqhkiG9w0BAQsFAAOCAQEAYGN2Xa/G90fyqEAAstnSmBgfhY53
4C0kDjrElf1XEtXlmS6mCkXtaPbTlYx/9ObbBPzNpw91xPxUUjbvnjZXHPS9zp37
bAP0DRsXgz374Nxp84DufBKCiJYP42fzlkp0SotZzH9p7O8ggGiAKC6SWPcGB2n8
qNGLnut2WQs3euunir1LkwxF33dL+/a76SGQX/OJO3TpFNQe1aAnqyxocDRJRW+o
VrS0jHiNgII4XcH2LFTER63qOakek5bO3Kx25dpwcW64zqNSeI3ERSQe0dTR/oXR
ttKXjWz3KMNbGFYYBHnllsf8aTwvT9gedwRgONS+XwzB6ACz+8Sm5svF9A==
-----END CERTIFICATE-----
Generated at Wed May 13 21:34:36 2026 by rpki-client