Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3134302e302f32322d3232203d3e203137363231.roa
File:                     3130332e3230322e3134302e302f32322d3232203d3e203137363231.roa (raw, json)
Hash identifier:          u83DbZ6RfeGbpR8YiVNxWDbnfIuW1YogtkoAy0CmruQ=
Subject key identifier:   87:7A:1F:7B:AA:FF:4D:BE:6E:6D:34:93:01:BF:77:C4:A9:60:E3:6F
Certificate issuer:       /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial:       6FC4CABC4186864C28485E4C2E5C06E91A160968
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3134302e302f32322d3232203d3e203137363231.roa
Signing time:             Thu 11 Jun 2026 16:02:31 +0000
ROA not before:           Thu 11 Jun 2026 15:57:31 +0000
ROA not after:            Thu 10 Jun 2027 16:02:31 +0000
asID:                     17621
IP address blocks:        103.202.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 16:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c4:ca:bc:41:86:86:4c:28:48:5e:4c:2e:5c:06:e9:1a:16:09:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
        Validity
            Not Before: Jun 11 15:57:31 2026 GMT
            Not After : Jun 10 16:02:31 2027 GMT
        Subject: CN=877A1F7BAAFF4DBE6E6D349301BF77C4A960E36F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b5:72:5c:17:35:15:51:4b:49:ef:99:50:a2:
                    2a:0f:e8:89:c2:54:12:d2:82:9e:0b:ca:96:5f:4a:
                    fa:d6:dc:76:d7:0c:0a:23:d0:07:69:48:9c:bf:36:
                    bd:e8:bf:5f:08:7a:7a:e7:57:63:52:91:d8:ff:81:
                    05:bd:ce:6f:cc:9b:dd:30:c6:fc:91:ac:14:9c:b3:
                    e9:02:8e:22:e7:fd:2d:d7:70:63:d0:a9:d6:e9:44:
                    af:6c:32:87:6c:05:18:12:aa:58:96:bc:ef:ef:a1:
                    b4:e8:2a:f1:90:dd:0a:68:34:2c:79:b3:53:3b:fa:
                    4f:8b:ea:13:92:8e:e1:9d:0d:02:7c:f5:c8:f2:49:
                    8b:3b:6e:42:9c:5c:36:6d:6f:c1:d7:c9:72:62:f5:
                    1e:53:3b:80:83:96:7e:bc:9a:99:44:11:4a:74:06:
                    f9:c3:39:66:05:2f:49:9f:dc:26:f6:28:11:3c:35:
                    94:12:50:c2:f3:fc:c1:5a:5e:c1:cc:0e:7b:9e:ce:
                    08:f8:04:50:a6:16:0a:e2:73:a4:06:d8:d0:39:78:
                    d6:98:61:b4:e9:0b:5e:89:60:e5:81:65:f7:4a:9a:
                    8a:d7:db:2d:c3:67:8a:23:cb:90:5b:59:10:49:ae:
                    6f:39:9d:e5:fa:2c:ff:a6:7b:f2:10:08:62:a0:8e:
                    06:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7A:1F:7B:AA:FF:4D:BE:6E:6D:34:93:01:BF:77:C4:A9:60:E3:6F
            X509v3 Authority Key Identifier:
                keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3134302e302f32322d3232203d3e203137363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.202.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:38:26:38:b7:59:15:cc:66:2d:d2:9e:b3:80:e8:5e:0f:f2:
         3e:b7:a6:f0:f9:77:0d:a5:b8:04:18:93:57:93:6c:ee:55:60:
         9e:4f:dd:fb:5b:7b:9a:f6:7e:37:c8:ee:5b:1a:88:ff:4e:b1:
         80:26:f5:a4:56:31:aa:f5:02:81:e1:c4:79:33:21:75:f3:3c:
         8a:c7:be:ef:56:a1:66:2b:9e:3d:9f:ef:5a:b0:ec:07:71:7a:
         be:60:f4:83:e9:b1:ea:76:c2:89:ba:e4:09:74:36:d2:37:f2:
         a9:c7:ee:3e:7f:03:5f:a3:56:ec:1b:c8:b3:f1:23:a7:48:a4:
         ea:3e:6f:04:fd:be:7c:11:63:1c:0f:55:a1:ed:81:bd:ba:70:
         0e:21:d4:47:a5:a9:01:be:9b:93:51:88:d8:4c:de:df:2d:fd:
         f9:9e:af:c6:29:9a:c9:e2:dd:d3:99:5e:c3:65:47:2e:4a:13:
         9c:37:3a:37:ac:b2:0b:ae:16:ec:97:33:a8:51:25:d9:d0:3b:
         ff:1d:56:84:67:cc:12:ed:08:48:a2:93:92:cf:78:7a:c9:01:
         e0:2e:c2:9f:44:d4:93:18:c6:c5:ee:b4:66:73:35:6c:02:2e:
         2c:ff:e6:22:d6:c8:9e:be:f1:41:66:19:4a:92:6f:24:34:76:
         49:c3:6d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:21 2026 by rpki-client