Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3133362e302f32322d3232203d3e203137363231.roa
File:                     3130332e3230322e3133362e302f32322d3232203d3e203137363231.roa (raw, json)
Hash identifier:          j7kmbKx/fGhUokx251JgQ5t+TSZlXivmLaA/ZRQzSCk=
Subject key identifier:   1D:38:04:10:0D:3B:2E:8F:F7:7A:F5:5B:5F:BF:D5:DC:07:18:F0:EE
Certificate issuer:       /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial:       22387069DB8D9C620E99DC9088A9D2ED642AE296
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3133362e302f32322d3232203d3e203137363231.roa
Signing time:             Thu 11 Jun 2026 16:02:10 +0000
ROA not before:           Thu 11 Jun 2026 15:57:10 +0000
ROA not after:            Thu 10 Jun 2027 16:02:10 +0000
asID:                     17621
IP address blocks:        103.202.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 16:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:38:70:69:db:8d:9c:62:0e:99:dc:90:88:a9:d2:ed:64:2a:e2:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
        Validity
            Not Before: Jun 11 15:57:10 2026 GMT
            Not After : Jun 10 16:02:10 2027 GMT
        Subject: CN=1D3804100D3B2E8FF77AF55B5FBFD5DC0718F0EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7e:5c:a2:00:65:d3:54:91:a1:fb:b0:a9:bb:
                    9a:94:03:b7:6a:de:2d:b6:c7:b6:be:78:e0:b0:e6:
                    43:4c:a2:09:7d:18:5c:96:29:fb:50:a7:e4:2d:94:
                    a2:f9:ad:13:a3:87:2a:2a:6e:cf:7c:ae:12:43:2f:
                    21:20:4a:b8:94:25:55:6f:83:44:38:36:b8:72:a3:
                    ed:44:19:b1:84:bf:61:37:32:b1:48:8f:e5:c5:04:
                    2e:7f:24:bc:da:2e:47:26:75:cb:7a:64:c9:52:d5:
                    54:8a:c1:38:e0:6a:3a:f1:dc:58:cf:59:6c:05:56:
                    bb:53:49:ca:23:d8:73:fe:3f:83:9f:52:a5:d4:df:
                    d9:71:e1:5a:9c:af:c7:2f:9f:f9:fb:94:eb:1a:dd:
                    1c:fb:f0:01:22:73:be:ba:b0:2c:82:a9:09:19:7b:
                    fd:d5:7a:50:f4:ff:78:2b:76:27:88:d4:7e:f0:46:
                    27:7c:ff:c6:3f:e5:41:c1:51:2b:72:ca:25:21:75:
                    0e:12:78:e9:d2:11:23:a3:12:76:e5:1c:81:57:76:
                    26:37:67:95:89:d4:79:a1:70:8f:b0:58:91:4c:31:
                    8c:63:88:4a:f5:88:49:62:80:67:33:0d:1d:37:3c:
                    79:fb:e7:18:2f:f1:93:70:43:bd:0d:69:db:15:89:
                    fb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:38:04:10:0D:3B:2E:8F:F7:7A:F5:5B:5F:BF:D5:DC:07:18:F0:EE
            X509v3 Authority Key Identifier:
                keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3133362e302f32322d3232203d3e203137363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.202.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:8e:0d:5e:4a:d6:af:55:72:72:c8:1a:7f:79:a4:2a:0b:c9:
         af:57:af:c3:24:11:67:70:d3:a6:92:cb:f4:dd:2a:b9:1d:d0:
         0b:4d:5a:43:b6:5d:b8:e0:84:e4:ed:16:5f:42:3d:76:29:92:
         fb:c9:77:7b:a7:f5:1e:a8:b1:53:96:b6:21:6f:58:25:40:85:
         d0:24:95:3e:bb:e0:f8:8f:1f:d4:3e:ed:74:39:14:33:32:52:
         1d:f7:ab:c2:29:94:de:5f:5e:80:71:9c:d8:99:2c:01:4e:a4:
         87:30:f8:a0:c6:71:65:9d:62:84:0c:3c:34:53:bf:0f:c5:a9:
         d1:c5:3e:82:00:8b:1d:3c:69:75:2a:c8:46:09:22:7f:c8:ca:
         ff:5d:97:fb:2c:e0:87:9a:02:f1:c7:b4:5e:30:16:dd:fc:21:
         0e:ef:ed:19:74:72:e3:64:97:da:ef:d3:2f:29:5d:8d:53:c7:
         7a:d4:e7:0a:ab:45:0d:12:31:2d:94:55:8f:88:cd:74:e1:cf:
         ca:4d:51:1e:e2:c9:a0:88:00:2b:32:b5:3a:0a:de:82:50:fe:
         7c:c2:cc:be:db:05:5f:c3:d9:86:4f:58:5a:b2:9c:c1:97:55:
         ad:f0:c9:ea:95:bc:24:ed:94:43:1a:5e:fe:8c:23:07:8b:66:
         03:3e:fa:52
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUIjhwaduNnGIOmdyQiKnS7WQq4pYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcw
RDkwNkYyMDAeFw0yNjA2MTExNTU3MTBaFw0yNzA2MTAxNjAyMTBaMDMxMTAvBgNV
BAMTKDFEMzgwNDEwMEQzQjJFOEZGNzdBRjU1QjVGQkZENURDMDcxOEYwRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7flyiAGXTVJGh+7Cpu5qUA7dq
3i22x7a+eOCw5kNMogl9GFyWKftQp+QtlKL5rROjhyoqbs98rhJDLyEgSriUJVVv
g0Q4Nrhyo+1EGbGEv2E3MrFIj+XFBC5/JLzaLkcmdct6ZMlS1VSKwTjgajrx3FjP
WWwFVrtTScoj2HP+P4OfUqXU39lx4Vqcr8cvn/n7lOsa3Rz78AEic766sCyCqQkZ
e/3VelD0/3grdieI1H7wRid8/8Y/5UHBUStyyiUhdQ4SeOnSESOjEnblHIFXdiY3
Z5WJ1HmhcI+wWJFMMYxjiEr1iEligGczDR03PHn75xgv8ZNwQ70NadsVifvzAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUHTgEEA07Lo/3evVbX7/V3AcY8O4wHwYDVR0j
BBgwFoAUTYevylZ1UXlWNYyJbCHD5w2QbyAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
Njg1MTU0OTcxMzI2ODc1NS8wLzREODdBRkNBNTY3NTUxNzk1NjM1OEM4OTZDMjFD
M0U3MEQ5MDZGMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcwRDkwNkYyMC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMDY4NTE1NDk3MTMyNjg3NTUvMC8zMTMwMzMyZTMy
MzAzMjJlMzEzMzM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzEzNzM2MzIzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmfKiDANBgkqhkiG9w0BAQsFAAOCAQEAtY4NXkrWr1Vycsgaf3mk
KgvJr1evwyQRZ3DTppLL9N0quR3QC01aQ7ZduOCE5O0WX0I9dimS+8l3e6f1Hqix
U5a2IW9YJUCF0CSVPrvg+I8f1D7tdDkUMzJSHferwimU3l9egHGc2JksAU6khzD4
oMZxZZ1ihAw8NFO/D8Wp0cU+ggCLHTxpdSrIRgkif8jK/12X+yzgh5oC8ce0XjAW
3fwhDu/tGXRy42SX2u/TLyldjVPHetTnCqtFDRIxLZRVj4jNdOHPyk1RHuLJoIgA
KzK1OgreglD+fMLMvtsFX8PZhk9YWrKcwZdVrfDJ6pW8JO2UQxpe/owjB4tmAz76
Ug==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:23 2026 by rpki-client