Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e34342e302f32322d3232203d3e2034383131.roa
File:                     3130332e3230322e34342e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier:          z5oQ3PBg3PkHUSshTm66AoBX3RwM0K0gbO5xj/D+dNo=
Subject key identifier:   14:5D:8D:01:9F:02:52:AB:CE:BA:39:22:C7:42:AD:1F:53:00:76:0E
Certificate issuer:       /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial:       40883451CD6EC4D02D6FB29C3CBC0076D2B4F56F
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e34342e302f32322d3232203d3e2034383131.roa
Signing time:             Wed 13 May 2026 10:27:48 +0000
ROA not before:           Wed 13 May 2026 10:22:48 +0000
ROA not after:            Wed 12 May 2027 10:27:48 +0000
asID:                     4811
IP address blocks:        103.202.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:88:34:51:cd:6e:c4:d0:2d:6f:b2:9c:3c:bc:00:76:d2:b4:f5:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
        Validity
            Not Before: May 13 10:22:48 2026 GMT
            Not After : May 12 10:27:48 2027 GMT
        Subject: CN=145D8D019F0252ABCEBA3922C742AD1F5300760E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a9:ae:3f:0a:f1:65:68:47:7f:aa:99:0e:93:
                    10:9d:94:e2:e3:13:35:1e:15:b4:8c:8e:68:ff:2d:
                    62:e5:50:b1:a9:c1:71:5d:08:2c:89:e1:f9:41:60:
                    8c:17:76:2a:2a:84:5d:f8:01:17:50:c3:03:b1:a9:
                    88:da:da:c5:ac:93:8d:25:08:0f:f0:11:23:89:46:
                    9a:b9:4d:b5:6a:45:82:4b:96:b4:a4:37:0e:fb:ee:
                    a2:1a:c2:68:b9:ab:30:e5:8f:e5:7e:51:87:aa:87:
                    dd:aa:86:76:7c:88:81:ac:80:76:9c:f8:32:5a:95:
                    e1:5d:71:9b:6c:ab:16:20:0f:6c:03:08:01:25:df:
                    79:f6:31:8d:bb:3a:c3:5f:97:77:29:48:5f:b2:41:
                    ea:7d:48:eb:d4:cc:c3:d2:d4:4c:7a:e3:83:6f:c3:
                    43:c5:43:63:48:4e:92:b8:41:d6:fe:09:7b:c5:2a:
                    f6:35:cc:87:74:f2:a3:79:fe:8c:db:94:ca:05:2f:
                    ae:58:62:ae:d1:23:aa:3c:b1:79:7f:75:41:fd:ad:
                    36:61:e0:74:06:71:ef:e1:d7:56:c7:ad:c6:d5:cd:
                    a3:f1:8d:99:84:5f:ab:5b:0a:98:5a:ff:00:94:7e:
                    0c:ee:68:a4:1f:73:b2:20:5e:66:71:0e:6c:1c:fd:
                    85:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5D:8D:01:9F:02:52:AB:CE:BA:39:22:C7:42:AD:1F:53:00:76:0E
            X509v3 Authority Key Identifier:
                keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e34342e302f32322d3232203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.202.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:c3:11:47:82:e0:55:a1:f5:2f:45:74:aa:79:42:1e:d1:c6:
         f0:12:b5:b1:4c:7a:ce:95:80:5e:18:70:8d:2e:1d:16:02:52:
         94:5a:03:e8:6e:87:48:2b:e8:51:13:d2:f6:ed:9d:28:7e:28:
         02:f9:41:c1:ba:af:21:61:ae:3c:cd:29:1a:ee:78:61:de:ac:
         c6:fd:2b:06:f8:fb:66:7e:f6:94:09:da:1a:96:d7:10:e7:39:
         9f:ea:52:39:de:8e:dd:58:ad:e8:39:ef:9c:ba:3e:76:55:a2:
         17:50:5e:94:7e:81:23:27:92:5e:4a:98:93:fe:ac:e1:de:5f:
         5f:ea:65:f4:84:58:4a:d4:5e:03:0a:dc:e5:7f:89:55:02:fd:
         c3:a7:07:e7:2f:39:89:0e:31:9f:e3:14:00:32:4f:b2:cd:25:
         b7:14:cb:fd:da:65:11:f7:4c:c8:d7:96:5c:25:4d:5c:77:73:
         a7:fd:86:75:25:24:b3:76:2c:e3:f4:e2:17:b6:d7:0f:5a:0d:
         07:34:d7:a3:42:b8:06:78:fd:64:5c:fd:75:c4:8d:4e:6f:eb:
         3c:51:b1:12:e0:37:6a:ee:08:25:69:7e:21:54:06:fd:67:d8:
         a8:12:24:5e:af:25:47:a0:07:7e:36:66:a2:4b:26:3a:1c:57:
         26:01:60:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:34:36 2026 by rpki-client