Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132302e302f32322d3232203d3e203137363231.roa
File:                     3130332e3230322e3132302e302f32322d3232203d3e203137363231.roa (raw, json)
Hash identifier:          ZG0aoi6bDffPifu5ADph0tyltv5RRo/2Wx/vcuKTLaA=
Subject key identifier:   CB:73:48:BD:9A:16:86:96:9B:C8:D7:41:31:1C:61:80:9C:86:8E:54
Certificate issuer:       /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial:       522825FC05EF39024D94555AD2D6F931998365F8
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132302e302f32322d3232203d3e203137363231.roa
Signing time:             Thu 11 Jun 2026 16:00:26 +0000
ROA not before:           Thu 11 Jun 2026 15:55:26 +0000
ROA not after:            Thu 10 Jun 2027 16:00:26 +0000
asID:                     17621
IP address blocks:        103.202.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 16:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:28:25:fc:05:ef:39:02:4d:94:55:5a:d2:d6:f9:31:99:83:65:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
        Validity
            Not Before: Jun 11 15:55:26 2026 GMT
            Not After : Jun 10 16:00:26 2027 GMT
        Subject: CN=CB7348BD9A1686969BC8D741311C61809C868E54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f9:b0:0e:6e:06:c1:35:ba:66:8f:49:50:f6:
                    6c:15:69:7a:2a:28:e6:32:cc:cb:3e:10:86:54:f5:
                    8e:da:c6:da:31:87:be:d6:4a:2e:74:92:5a:8e:af:
                    58:3d:4f:eb:39:43:74:76:c9:41:50:cc:c8:e4:fa:
                    69:e8:30:51:6b:79:4b:ad:f6:90:fe:c2:fd:f9:1c:
                    a4:83:44:a0:20:97:a2:4f:87:ef:ec:36:4d:f6:14:
                    59:2f:9c:fe:a3:54:01:18:c3:f6:7b:97:4c:4a:c7:
                    9b:47:e2:57:4d:e5:85:df:9d:29:63:77:25:33:a2:
                    29:5c:25:c4:e6:2a:9e:4c:24:96:1a:fc:9c:52:6d:
                    d7:a0:5f:57:93:91:4d:7a:e5:69:2a:90:0e:32:fa:
                    b6:ff:ca:69:b4:49:36:12:ec:a5:36:f2:13:0d:35:
                    8a:27:06:cc:5b:44:fb:ba:68:5c:da:df:c9:a9:d3:
                    27:86:aa:8d:2c:f8:7b:19:9c:eb:35:bd:0c:50:64:
                    ed:fa:9d:30:44:2e:22:90:63:b6:aa:09:3b:51:c2:
                    ff:1e:7b:91:ed:0a:a1:8b:7f:a7:d1:12:cc:bd:7d:
                    b9:69:56:e7:db:41:76:01:df:74:40:a3:51:4b:9e:
                    40:be:04:1d:ac:3b:8a:72:13:39:ce:37:2a:e5:d3:
                    93:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:73:48:BD:9A:16:86:96:9B:C8:D7:41:31:1C:61:80:9C:86:8E:54
            X509v3 Authority Key Identifier:
                keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132302e302f32322d3232203d3e203137363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.202.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:c4:f6:4b:10:70:89:83:a4:a0:17:f5:79:2e:28:3e:0f:0b:
         5f:b9:80:ee:23:53:ee:ff:0f:25:40:26:56:e2:ca:8f:e0:f1:
         cf:a2:4d:1a:0b:93:82:bd:24:22:38:ac:be:b0:6c:aa:b5:96:
         6c:d6:5d:b5:2f:6a:cf:07:4c:07:61:ec:03:0a:24:42:76:bc:
         9b:d4:00:b0:ca:fd:51:77:b9:20:30:24:87:59:07:f7:f9:52:
         f4:6f:16:e4:bb:b8:c1:78:ec:ba:c4:d2:da:c6:e9:8a:64:50:
         19:f2:54:e5:b2:b7:cb:bf:b3:d6:30:38:22:03:81:6f:89:f1:
         3c:6c:28:84:ac:51:19:4a:c2:51:fc:3d:df:25:08:04:fc:e9:
         19:88:a1:d1:78:7b:fe:a1:4a:32:a8:62:13:11:81:33:13:17:
         1d:2a:80:ab:3a:d3:28:ff:c9:d2:80:f0:87:3e:4f:0b:35:28:
         8f:aa:0b:af:3a:a8:82:c0:08:c8:6b:b4:ea:d4:21:fe:c3:c7:
         45:10:29:8f:eb:e7:21:ce:4a:9e:57:0e:64:eb:0b:70:a3:8b:
         9e:d4:c3:a3:3b:01:71:8b:2c:0e:ed:23:56:03:d6:44:7b:37:
         07:0f:01:48:4c:d6:9f:87:de:cd:b9:01:9f:9e:ec:8f:78:a0:
         a1:3a:3d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:10 2026 by rpki-client