Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3133322e302f32322d3232203d3e203137363231.roa
File:                     3130332e3230322e3133322e302f32322d3232203d3e203137363231.roa (raw, json)
Hash identifier:          9k+d5a1/0+iHYGOVOTsVlBjiht9PUIpGU9/12QDw/hk=
Subject key identifier:   F6:9F:8C:65:62:37:7B:E9:5D:64:68:4B:32:A2:3D:BE:C7:F2:07:41
Certificate issuer:       /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial:       032753BBD202576DA7D332EA6A9E1B1C3577857A
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3133322e302f32322d3232203d3e203137363231.roa
Signing time:             Thu 11 Jun 2026 16:01:51 +0000
ROA not before:           Thu 11 Jun 2026 15:56:51 +0000
ROA not after:            Thu 10 Jun 2027 16:01:51 +0000
asID:                     17621
IP address blocks:        103.202.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 16:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:27:53:bb:d2:02:57:6d:a7:d3:32:ea:6a:9e:1b:1c:35:77:85:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
        Validity
            Not Before: Jun 11 15:56:51 2026 GMT
            Not After : Jun 10 16:01:51 2027 GMT
        Subject: CN=F69F8C6562377BE95D64684B32A23DBEC7F20741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a6:71:98:6f:cf:f9:29:01:63:ff:fe:69:f0:
                    9a:f4:e6:2c:83:9a:c8:ff:4b:88:70:d7:0f:ad:ac:
                    8f:fc:23:5a:a6:1c:71:a8:0e:35:ea:43:4c:25:3e:
                    99:dd:3b:62:df:8a:ef:bc:0b:e9:f9:59:3c:33:98:
                    d3:06:e0:e9:59:76:6f:9c:a1:ea:de:86:25:ec:6a:
                    43:a6:11:3b:9a:c6:3e:b9:86:7a:4d:cb:3c:64:11:
                    fa:35:cb:f9:90:b0:1f:40:1d:a6:07:44:54:82:f7:
                    04:6b:90:5a:e0:e2:34:37:d4:88:db:14:c7:9b:28:
                    e8:08:4f:0a:cf:62:d8:38:dc:51:00:ae:a0:ab:9c:
                    56:b3:98:1d:f5:30:ed:bc:b2:00:6b:ca:c1:4d:13:
                    e6:6d:a8:76:58:b1:a1:c1:bd:3b:bf:1e:c9:de:d8:
                    26:b8:4e:f3:0c:23:d9:47:95:32:66:e8:f5:9b:54:
                    c2:7a:b8:6d:03:cb:06:cb:08:0a:8f:ab:97:14:06:
                    4d:bd:e3:57:f1:74:f1:2e:bc:a9:c1:23:c1:c8:c3:
                    ae:ab:b9:68:09:18:13:56:af:22:a5:98:15:05:24:
                    34:63:97:2d:aa:03:41:4f:72:fc:69:49:c9:65:d1:
                    88:5c:9b:7c:81:c3:d5:99:8f:78:e2:81:82:75:73:
                    c6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9F:8C:65:62:37:7B:E9:5D:64:68:4B:32:A2:3D:BE:C7:F2:07:41
            X509v3 Authority Key Identifier:
                keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3133322e302f32322d3232203d3e203137363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.202.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:cd:80:4f:11:65:88:b0:6a:f6:73:f0:67:e3:3a:08:80:da:
         69:a0:23:54:d8:86:ad:44:33:3f:28:c7:16:ee:76:91:83:76:
         0a:48:70:ed:18:b2:23:1b:b7:f7:4e:93:f1:d0:9e:78:3a:d5:
         be:45:76:90:32:eb:18:48:2f:28:42:1b:a3:43:2b:eb:63:09:
         86:95:10:d1:d7:8d:17:11:26:82:bb:b4:ec:2c:45:e2:e7:04:
         f5:19:62:40:fc:7d:c4:c0:cf:f0:b1:a9:d1:09:61:90:5b:36:
         01:9d:92:43:04:db:36:1c:85:eb:a3:6b:ae:ed:c8:2d:f1:f9:
         de:d9:3e:03:33:12:42:45:44:0a:0a:da:9c:3f:4a:09:51:fa:
         9b:08:1f:a5:e9:15:b3:cb:a5:41:79:6e:c9:ef:c0:2b:5a:db:
         a9:3b:ae:cb:27:2b:a4:af:94:97:79:10:f6:a5:80:43:94:11:
         93:cd:a5:91:40:45:0b:33:80:f3:56:eb:e5:1e:39:e5:f0:be:
         c7:13:89:94:02:55:87:da:8f:17:1d:5c:25:66:76:57:a5:8c:
         aa:4c:e8:05:4e:12:33:63:05:c3:aa:9d:a5:95:78:52:e2:04:
         b2:31:d3:4c:0a:4f:0a:0e:48:76:16:22:0f:34:aa:26:d4:e9:
         eb:94:de:8f
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUAydTu9ICV22n0zLqap4bHDV3hXowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcw
RDkwNkYyMDAeFw0yNjA2MTExNTU2NTFaFw0yNzA2MTAxNjAxNTFaMDMxMTAvBgNV
BAMTKEY2OUY4QzY1NjIzNzdCRTk1RDY0Njg0QjMyQTIzREJFQzdGMjA3NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKpnGYb8/5KQFj//5p8Jr05iyD
msj/S4hw1w+trI/8I1qmHHGoDjXqQ0wlPpndO2Lfiu+8C+n5WTwzmNMG4OlZdm+c
oerehiXsakOmETuaxj65hnpNyzxkEfo1y/mQsB9AHaYHRFSC9wRrkFrg4jQ31Ijb
FMebKOgITwrPYtg43FEArqCrnFazmB31MO28sgBrysFNE+ZtqHZYsaHBvTu/Hsne
2Ca4TvMMI9lHlTJm6PWbVMJ6uG0DywbLCAqPq5cUBk2941fxdPEuvKnBI8HIw66r
uWgJGBNWryKlmBUFJDRjly2qA0FPcvxpScll0Yhcm3yBw9WZj3jigYJ1c8aTAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQU9p+MZWI3e+ldZGhLMqI9vsfyB0EwHwYDVR0j
BBgwFoAUTYevylZ1UXlWNYyJbCHD5w2QbyAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
Njg1MTU0OTcxMzI2ODc1NS8wLzREODdBRkNBNTY3NTUxNzk1NjM1OEM4OTZDMjFD
M0U3MEQ5MDZGMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcwRDkwNkYyMC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMDY4NTE1NDk3MTMyNjg3NTUvMC8zMTMwMzMyZTMy
MzAzMjJlMzEzMzMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzEzNzM2MzIzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmfKhDANBgkqhkiG9w0BAQsFAAOCAQEAtM2ATxFliLBq9nPwZ+M6
CIDaaaAjVNiGrUQzPyjHFu52kYN2Ckhw7RiyIxu3906T8dCeeDrVvkV2kDLrGEgv
KEIbo0Mr62MJhpUQ0deNFxEmgru07CxF4ucE9RliQPx9xMDP8LGp0QlhkFs2AZ2S
QwTbNhyF66Nrru3ILfH53tk+AzMSQkVECgranD9KCVH6mwgfpekVs8ulQXluye/A
K1rbqTuuyycrpK+Ul3kQ9qWAQ5QRk82lkUBFCzOA81br5R455fC+xxOJlAJVh9qP
Fx1cJWZ2V6WMqkzoBU4SM2MFw6qdpZV4UuIEsjHTTApPCg5IdhYiDzSqJtTp65Te
jw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:22 2026 by rpki-client