Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132382e302f32322d3232203d3e203137363231.roa
File:                     3130332e3230322e3132382e302f32322d3232203d3e203137363231.roa (raw, json)
Hash identifier:          uMPs20f/Tmil9WAXqkH+fC3iMFjgKTHBgNA9an45WOQ=
Subject key identifier:   87:44:58:80:08:2F:81:79:89:25:E3:21:17:15:36:C7:AA:18:B7:C7
Certificate issuer:       /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial:       78F0C48AA1586085718E1490FF54F7DB623F7DCC
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132382e302f32322d3232203d3e203137363231.roa
Signing time:             Thu 11 Jun 2026 16:01:24 +0000
ROA not before:           Thu 11 Jun 2026 15:56:24 +0000
ROA not after:            Thu 10 Jun 2027 16:01:24 +0000
asID:                     17621
IP address blocks:        103.202.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 16:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f0:c4:8a:a1:58:60:85:71:8e:14:90:ff:54:f7:db:62:3f:7d:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
        Validity
            Not Before: Jun 11 15:56:24 2026 GMT
            Not After : Jun 10 16:01:24 2027 GMT
        Subject: CN=87445880082F81798925E321171536C7AA18B7C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:89:8c:a3:cd:27:21:85:0a:b2:07:3d:40:1f:
                    63:7f:87:4f:b0:f7:3b:a8:d8:6f:db:41:af:8d:34:
                    cc:81:b2:74:c2:c5:ab:8f:f8:ac:67:cf:2c:cf:8d:
                    8a:48:ce:5c:c4:24:62:3a:79:31:19:68:39:7c:db:
                    e5:cb:1b:4f:ec:73:63:1c:03:68:25:ed:6b:df:2c:
                    9b:62:52:6b:91:6f:f1:6e:02:49:6e:5d:b9:d4:5e:
                    d9:a2:4b:7f:54:44:56:bd:89:fc:4a:8e:a7:7d:68:
                    84:a2:95:dd:17:ad:b0:65:55:ef:8d:7d:6e:2a:bd:
                    94:a4:6e:71:d4:be:06:2d:21:55:44:32:fb:06:d4:
                    2d:2c:3e:d4:4f:90:c4:73:a7:20:90:d6:f5:ce:d3:
                    ea:99:7c:9d:41:f2:53:0f:f3:11:9b:70:c0:8e:2c:
                    7e:42:fc:61:ea:60:bc:9e:a0:dc:2f:6c:1d:fc:25:
                    2e:e4:55:8b:9a:55:01:1f:7d:89:b4:ba:29:7b:fb:
                    c8:db:08:86:49:58:09:bb:25:dd:00:a5:9a:36:5a:
                    f1:88:49:6b:a0:2c:3f:c9:ee:64:75:bf:e6:7b:7c:
                    47:3f:44:64:7b:d2:16:6c:db:1d:a0:f5:82:5d:f1:
                    ef:46:b0:22:97:5f:bc:3c:65:74:df:f2:8e:62:89:
                    5e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:44:58:80:08:2F:81:79:89:25:E3:21:17:15:36:C7:AA:18:B7:C7
            X509v3 Authority Key Identifier:
                keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132382e302f32322d3232203d3e203137363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.202.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:19:ca:71:e7:ba:24:7e:8d:6a:04:5e:0e:f0:f4:27:13:05:
         e8:ae:30:93:a9:ad:42:db:8d:74:94:f0:92:fc:83:dd:f6:25:
         84:39:b0:5e:72:73:4c:65:f7:84:e6:b5:f3:9f:59:c7:98:cd:
         c2:ca:84:4e:13:d9:38:49:4b:47:fb:de:cd:f9:52:e4:c0:36:
         b4:81:35:bb:cc:23:e3:0c:57:0c:33:f6:56:d0:ff:8d:1f:0a:
         1e:8a:dc:cb:f1:19:e0:cd:26:40:8c:2a:07:29:9e:1a:80:c3:
         be:d5:b5:45:89:0a:ef:8c:e3:ba:de:09:51:57:b4:55:c9:6e:
         b4:8a:01:8a:27:41:f0:db:f6:a3:44:b3:02:77:b4:b2:96:e7:
         c0:80:0e:69:d2:39:e5:25:52:14:1f:ac:a5:19:84:9a:9d:71:
         5b:9d:b7:56:96:e0:04:aa:bd:e2:94:dc:58:a1:f3:e9:c3:18:
         25:31:b7:d7:c5:97:f3:c5:8b:d7:13:3b:e1:b8:43:e6:18:4d:
         0f:58:ab:28:cf:8d:95:35:29:4d:2c:a7:a7:9f:c4:6f:0c:7c:
         d7:ea:0c:1e:70:0d:38:77:65:9c:58:ac:3a:2b:c5:05:49:c4:
         96:e0:ff:25:d6:18:7c:55:f8:17:7d:64:f5:45:42:2f:00:47:
         fc:1a:89:16
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUePDEiqFYYIVxjhSQ/1T322I/fcwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcw
RDkwNkYyMDAeFw0yNjA2MTExNTU2MjRaFw0yNzA2MTAxNjAxMjRaMDMxMTAvBgNV
BAMTKDg3NDQ1ODgwMDgyRjgxNzk4OTI1RTMyMTE3MTUzNkM3QUExOEI3QzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjiYyjzSchhQqyBz1AH2N/h0+w
9zuo2G/bQa+NNMyBsnTCxauP+KxnzyzPjYpIzlzEJGI6eTEZaDl82+XLG0/sc2Mc
A2gl7WvfLJtiUmuRb/FuAkluXbnUXtmiS39URFa9ifxKjqd9aISild0XrbBlVe+N
fW4qvZSkbnHUvgYtIVVEMvsG1C0sPtRPkMRzpyCQ1vXO0+qZfJ1B8lMP8xGbcMCO
LH5C/GHqYLyeoNwvbB38JS7kVYuaVQEffYm0uil7+8jbCIZJWAm7Jd0ApZo2WvGI
SWugLD/J7mR1v+Z7fEc/RGR70hZs2x2g9YJd8e9GsCKXX7w8ZXTf8o5iiV5zAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUh0RYgAgvgXmJJeMhFxU2x6oYt8cwHwYDVR0j
BBgwFoAUTYevylZ1UXlWNYyJbCHD5w2QbyAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
Njg1MTU0OTcxMzI2ODc1NS8wLzREODdBRkNBNTY3NTUxNzk1NjM1OEM4OTZDMjFD
M0U3MEQ5MDZGMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcwRDkwNkYyMC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMDY4NTE1NDk3MTMyNjg3NTUvMC8zMTMwMzMyZTMy
MzAzMjJlMzEzMjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzEzNzM2MzIzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmfKgDANBgkqhkiG9w0BAQsFAAOCAQEALhnKcee6JH6NagReDvD0
JxMF6K4wk6mtQtuNdJTwkvyD3fYlhDmwXnJzTGX3hOa1859Zx5jNwsqEThPZOElL
R/vezflS5MA2tIE1u8wj4wxXDDP2VtD/jR8KHorcy/EZ4M0mQIwqBymeGoDDvtW1
RYkK74zjut4JUVe0VclutIoBiidB8Nv2o0SzAne0spbnwIAOadI55SVSFB+spRmE
mp1xW523VpbgBKq94pTcWKHz6cMYJTG318WX88WL1xM74bhD5hhND1irKM+NlTUp
TSynp5/Ebwx81+oMHnANOHdlnFisOivFBUnEluD/JdYYfFX4F31k9UVCLwBH/BqJ
Fg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:22 2026 by rpki-client