Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3130342e302f32322d3232203d3e203137363231.roa
File:                     3130332e3230322e3130342e302f32322d3232203d3e203137363231.roa (raw, json)
Hash identifier:          TK+5yKBmxuChc93TgSV4IuGzAqjWJFcVuGshCoC5IZs=
Subject key identifier:   DD:EE:21:A6:1C:B5:68:98:15:99:EA:B6:0D:C5:8B:00:DF:DA:54:3A
Certificate issuer:       /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial:       0EC08D13DF1B24B2252FC3CAB389F70C0BDFC638
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3130342e302f32322d3232203d3e203137363231.roa
Signing time:             Thu 11 Jun 2026 15:58:58 +0000
ROA not before:           Thu 11 Jun 2026 15:53:58 +0000
ROA not after:            Thu 10 Jun 2027 15:58:58 +0000
asID:                     17621
IP address blocks:        103.202.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 16:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c0:8d:13:df:1b:24:b2:25:2f:c3:ca:b3:89:f7:0c:0b:df:c6:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
        Validity
            Not Before: Jun 11 15:53:58 2026 GMT
            Not After : Jun 10 15:58:58 2027 GMT
        Subject: CN=DDEE21A61CB568981599EAB60DC58B00DFDA543A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3d:72:0d:8b:9b:5a:5f:3b:fb:10:0b:bb:6a:
                    99:3d:0e:72:49:df:83:35:e4:5b:15:3d:d3:5a:c3:
                    e7:09:c9:14:ed:8c:3d:c2:59:47:8c:93:df:38:6e:
                    15:23:8f:c2:e6:68:c0:74:7a:fc:cc:85:28:ce:61:
                    cd:a6:0a:1e:98:52:73:a2:e8:7b:2f:6e:5b:e9:f2:
                    ba:e8:3e:a8:33:75:f9:9e:b8:1b:bd:a0:da:7c:28:
                    15:ff:ac:0a:82:08:14:9a:3d:35:92:b9:f8:85:56:
                    df:b6:bb:89:d9:db:f5:e5:9b:15:a8:93:9b:36:bf:
                    83:b6:17:97:cb:51:4e:07:6d:c2:dd:b1:3f:d6:2d:
                    0f:42:0a:6b:89:35:67:fa:a0:d4:17:62:09:34:11:
                    af:d2:1f:47:a6:1f:82:03:c6:a2:c7:c4:cc:0a:03:
                    e6:9c:4e:63:3d:7e:f9:af:b9:88:b3:3e:af:90:3d:
                    f6:1f:db:a7:6d:66:ba:00:b8:0c:f3:aa:a6:76:a1:
                    64:bf:51:4c:a5:24:08:67:90:3c:b5:44:f2:08:7c:
                    8d:85:cd:65:c3:7d:d6:5d:1f:7f:72:3d:d3:97:80:
                    49:44:ce:c4:60:60:00:c9:ce:23:da:f0:96:34:95:
                    51:20:0d:4a:02:61:ca:30:33:df:51:9a:8f:3a:6e:
                    33:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:EE:21:A6:1C:B5:68:98:15:99:EA:B6:0D:C5:8B:00:DF:DA:54:3A
            X509v3 Authority Key Identifier:
                keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3130342e302f32322d3232203d3e203137363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.202.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:5f:82:90:50:4c:17:08:91:45:0c:d3:ef:20:db:e0:f6:0b:
         3c:c3:51:d2:0a:10:51:66:25:5f:4c:de:57:26:41:36:80:e4:
         be:17:ba:79:aa:2f:18:1e:2f:63:dd:24:5a:c3:b7:f7:fd:94:
         39:90:c9:fb:d7:50:76:08:25:b8:e1:89:ff:2e:d2:86:1b:2b:
         c0:4d:51:40:4b:d4:13:32:ad:be:20:83:f6:f5:4b:38:45:54:
         99:69:dd:7b:ea:e9:70:5e:5a:ac:79:ff:b8:15:d5:d5:b0:90:
         25:db:5a:e3:c2:59:f6:1c:bd:64:a2:f0:4b:af:40:88:bb:5c:
         d8:00:3f:ed:61:1d:fc:61:f4:48:78:63:9a:aa:93:93:ff:aa:
         9c:73:b8:3e:eb:25:9c:35:01:01:de:4f:cd:40:64:c5:b2:5f:
         49:b0:b1:3b:6f:29:fd:d1:c4:e8:76:c5:eb:98:c1:be:9d:c1:
         23:a2:1b:f5:83:e9:6f:c3:aa:88:f6:bb:3f:50:78:ce:73:d5:
         9b:f6:3d:9e:67:b2:00:19:0b:67:5a:22:df:e3:81:e6:3a:33:
         1e:f1:d0:76:12:aa:63:cb:88:65:90:f5:84:4e:4d:3d:2b:65:
         3a:40:15:63:a2:7c:6d:ef:c0:5a:64:17:a4:78:e0:39:c1:a4:
         fb:83:5d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:25 2026 by rpki-client