Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e36312e302f32342d3234203d3e20313533333933.roa
File:                     3130332e3230322e36312e302f32342d3234203d3e20313533333933.roa (raw, json)
Hash identifier:          LTiQbomNmW6b37oCfw3+PJVmc2lEYw3UBItNF+DyFww=
Subject key identifier:   A4:4B:D6:EA:BF:C1:3E:72:3C:D7:EF:86:85:61:D8:56:5A:B2:15:4B
Certificate issuer:       /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial:       5D0FDBC04A78907FAB8B335CABCD3C839993CE40
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e36312e302f32342d3234203d3e20313533333933.roa
Signing time:             Wed 13 May 2026 10:27:49 +0000
ROA not before:           Wed 13 May 2026 10:22:49 +0000
ROA not after:            Wed 12 May 2027 10:27:49 +0000
asID:                     153393
IP address blocks:        103.202.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:0f:db:c0:4a:78:90:7f:ab:8b:33:5c:ab:cd:3c:83:99:93:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
        Validity
            Not Before: May 13 10:22:49 2026 GMT
            Not After : May 12 10:27:49 2027 GMT
        Subject: CN=A44BD6EABFC13E723CD7EF868561D8565AB2154B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1a:65:f7:45:91:4b:e0:46:e3:8f:a5:4d:67:
                    69:a6:7d:23:98:8b:12:46:ce:29:73:21:9b:f0:5e:
                    fa:81:66:cb:cd:05:fb:1e:c0:45:9d:c3:d0:9f:64:
                    44:22:80:94:76:69:51:76:7e:7b:9a:12:69:d7:ba:
                    4e:21:f0:89:eb:12:1b:27:17:21:94:ad:cf:bf:7f:
                    68:30:76:e9:6b:6e:ce:0f:ae:bb:ba:13:5b:51:b0:
                    d3:cd:5b:ea:99:c5:00:d3:89:a9:3d:24:16:ca:28:
                    5b:a4:e3:f8:5d:1f:e7:03:79:bf:15:81:25:a3:da:
                    74:d3:02:4d:1f:54:e5:3e:e9:52:e2:1f:fe:2c:43:
                    83:40:d4:6a:0d:f5:cd:f9:2e:81:8f:53:ee:0a:2e:
                    6e:72:f2:47:09:1e:41:90:7d:5e:58:56:cf:ca:b1:
                    96:92:e3:42:46:ba:71:ec:ec:49:36:f3:54:88:e2:
                    94:49:36:0b:89:a2:d6:f6:4e:fc:ff:f5:e8:6a:7b:
                    79:ab:64:33:1b:f3:16:04:c2:18:6c:c7:2a:ac:b1:
                    5e:f5:99:4e:dd:83:8d:8a:c5:da:3a:a2:90:47:a6:
                    3a:4e:69:e8:75:f2:d0:cd:9c:6d:b5:86:86:e8:34:
                    d6:23:44:86:82:29:ad:ac:56:0c:9a:a6:58:ee:33:
                    8f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:4B:D6:EA:BF:C1:3E:72:3C:D7:EF:86:85:61:D8:56:5A:B2:15:4B
            X509v3 Authority Key Identifier:
                keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e36312e302f32342d3234203d3e20313533333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.202.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:ec:0c:17:9e:bd:25:0b:f5:42:eb:45:7a:9c:3d:dd:e7:4b:
         13:86:56:dd:42:71:ac:b0:af:22:bd:77:79:e8:8d:a8:c9:11:
         1e:1c:ba:ed:8f:74:75:40:5c:37:86:0b:9a:f2:76:dd:d0:7b:
         e6:6c:ed:51:37:fc:61:3f:7f:b2:36:5b:8b:37:37:0c:5e:ba:
         de:85:56:cf:22:b9:bd:6a:b5:62:94:b2:c0:55:d4:0c:d1:b2:
         43:c4:b1:ef:0d:a9:e2:6d:22:fc:a2:aa:4f:01:82:ec:3d:92:
         c3:41:76:62:b4:f0:dc:b9:c5:10:62:70:63:54:27:d6:70:70:
         01:65:d1:36:ea:ca:cb:9c:c8:cc:26:ab:74:16:ff:b7:4b:5d:
         60:51:ee:0c:e1:e0:15:81:94:79:a9:1b:ca:95:a0:b8:61:8e:
         b2:ce:49:10:2a:c8:56:5d:59:20:51:0b:4b:05:02:ae:1b:a0:
         c7:fd:7d:26:0f:3e:7b:5c:72:49:ef:8d:1d:88:04:78:a6:60:
         77:1d:3a:ba:d7:85:7f:06:ee:a4:45:d9:07:10:04:b0:a2:f1:
         ec:aa:53:dd:bb:e0:37:9d:46:71:4e:b1:ae:17:f1:7a:5d:f5:
         23:08:ac:f8:c4:1c:d9:fe:95:d7:a7:fb:79:39:7e:2e:cc:15:
         85:2c:bd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:34:46 2026 by rpki-client