Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525101569/0/3130332e38312e3230302e302f32322d3234203d3e20313333313131.roa
File:                     3130332e38312e3230302e302f32322d3234203d3e20313333313131.roa (raw, json)
Hash identifier:          vbtsaBz/Qk3dIs3oA888fGgaab69r3l5jbreJeRWr1A=
Subject key identifier:   20:D6:35:7E:D1:F1:A9:97:78:74:FF:2C:14:0A:11:8D:94:B2:BE:F6
Certificate issuer:       /CN=4A07CD19A1B070EE064707237E6CE29C315163F0
Certificate serial:       4141CCCDC59D6D979D14DCD0BFC2BFD8B00203FB
Authority key identifier: 4A:07:CD:19:A1:B0:70:EE:06:47:07:23:7E:6C:E2:9C:31:51:63:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/3130332e38312e3230302e302f32322d3234203d3e20313333313131.roa
Signing time:             Tue 14 Apr 2026 02:03:52 +0000
ROA not before:           Tue 14 Apr 2026 01:58:52 +0000
ROA not after:            Tue 13 Apr 2027 02:03:52 +0000
asID:                     133111
IP address blocks:        103.81.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 07:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:41:cc:cd:c5:9d:6d:97:9d:14:dc:d0:bf:c2:bf:d8:b0:02:03:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A07CD19A1B070EE064707237E6CE29C315163F0
        Validity
            Not Before: Apr 14 01:58:52 2026 GMT
            Not After : Apr 13 02:03:52 2027 GMT
        Subject: CN=20D6357ED1F1A9977874FF2C140A118D94B2BEF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4f:68:71:4a:1d:77:49:22:33:a8:39:cb:35:
                    5f:e7:0f:f9:88:ed:0a:0f:d1:5c:c9:a6:4e:4d:18:
                    f2:6b:5c:6f:d5:3a:5f:4f:b3:5d:b0:c2:51:07:ec:
                    09:ad:00:ca:8a:9a:d7:c2:75:b8:7a:01:f5:52:7e:
                    71:3f:c9:fd:38:50:3c:5f:4a:6c:b6:74:f2:72:b6:
                    54:da:c6:75:dc:91:0e:f6:b1:c7:be:16:7c:c5:91:
                    a0:62:c4:75:6a:d3:c2:8a:46:14:02:d6:28:c1:c6:
                    82:6b:83:d7:4a:db:b0:4f:33:c9:39:12:dc:84:5e:
                    f4:bd:6a:b9:17:69:92:a5:3e:8c:56:16:a6:3b:b8:
                    83:a4:d5:9c:e1:73:94:b3:bb:67:ba:7e:0b:e4:65:
                    96:88:bf:62:59:19:52:12:f3:5a:81:85:d8:bb:a0:
                    c0:b9:2b:6b:45:f2:68:01:9e:45:df:af:de:ac:97:
                    8f:04:79:b7:e1:9a:a9:8f:1e:46:3e:19:c0:85:e9:
                    be:5c:aa:0b:ca:11:3f:ae:2d:34:d1:3b:85:e3:61:
                    17:87:1d:d8:0c:4f:7f:d9:ed:5f:62:c7:a2:51:54:
                    0e:b1:c8:47:36:2f:54:e4:45:43:df:a3:ce:83:03:
                    f0:13:89:13:69:1d:b6:01:1b:59:0d:46:38:b3:5f:
                    ee:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D6:35:7E:D1:F1:A9:97:78:74:FF:2C:14:0A:11:8D:94:B2:BE:F6
            X509v3 Authority Key Identifier:
                keyid:4A:07:CD:19:A1:B0:70:EE:06:47:07:23:7E:6C:E2:9C:31:51:63:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/3130332e38312e3230302e302f32322d3234203d3e20313333313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:e2:56:07:7c:55:cf:35:27:53:c7:ea:50:33:21:0c:34:81:
         ee:db:49:ca:ce:b3:e4:fe:5b:69:c3:67:0b:06:b6:ae:96:91:
         bd:5d:ff:8f:0c:81:38:90:fe:17:0b:2d:89:4f:45:fd:a1:04:
         59:0e:a3:c3:cb:b4:4b:b0:17:3b:62:ed:38:0c:a9:75:76:4b:
         ce:5b:c5:c6:99:a4:bf:53:9a:3a:81:62:c9:57:fd:bf:54:7d:
         6b:a3:2e:16:98:c5:9f:35:d9:2e:38:ff:5b:a3:9b:d3:2b:aa:
         a9:2d:cd:e1:ec:95:5b:d1:f1:f2:26:10:98:a8:7a:39:c5:ef:
         18:37:4e:87:e4:bc:59:cd:be:e2:d2:a1:3c:e2:48:da:b4:b2:
         a8:71:c2:69:5e:89:29:4d:d8:cb:ff:3f:99:2e:4c:39:8b:42:
         cf:39:3f:94:a7:59:92:d6:09:ed:e3:db:c2:24:79:8f:ce:ce:
         8c:74:6a:a9:ad:26:1b:35:92:c2:b3:c1:22:11:5e:65:bb:89:
         62:2a:ca:db:8b:e2:c2:0c:6d:42:b6:b4:19:3c:8b:88:fb:90:
         08:ea:95:f4:a0:2c:11:48:55:09:35:14:97:3f:a4:ff:92:58:
         c1:b9:28:89:da:6d:6a:63:4c:7a:c4:b2:e3:5f:72:33:45:7d:
         a2:bb:75:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:27:43 2026 by rpki-client