Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3130302e302f32322d3232203d3e203633363139.roa
File:                     3130332e3230322e3130302e302f32322d3232203d3e203633363139.roa (raw, json)
Hash identifier:          aIKSsSTNCuPzeZ/P9HSOXWD9ZPEE2TG8j0sGce95ioY=
Subject key identifier:   89:6D:01:CD:5C:D7:2F:C8:EC:9C:C2:74:D6:33:73:83:66:3D:64:49
Certificate issuer:       /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial:       259236F8AEDC9258E426B91F3847BAF003D92439
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3130302e302f32322d3232203d3e203633363139.roa
Signing time:             Thu 11 Jun 2026 15:58:29 +0000
ROA not before:           Thu 11 Jun 2026 15:53:29 +0000
ROA not after:            Thu 10 Jun 2027 15:58:29 +0000
asID:                     63619
IP address blocks:        103.202.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:92:36:f8:ae:dc:92:58:e4:26:b9:1f:38:47:ba:f0:03:d9:24:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
        Validity
            Not Before: Jun 11 15:53:29 2026 GMT
            Not After : Jun 10 15:58:29 2027 GMT
        Subject: CN=896D01CD5CD72FC8EC9CC274D6337383663D6449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:54:68:e3:39:1d:8b:41:bc:74:5b:8b:8e:65:
                    47:85:e3:88:a1:65:bd:d3:42:d1:56:b3:84:8e:0c:
                    69:ab:f9:a2:d5:41:ab:61:99:de:9c:95:ba:a5:2c:
                    18:da:fc:be:e0:62:4e:6b:66:46:fa:02:b5:13:f4:
                    c3:db:24:63:ac:de:33:45:43:4b:b0:53:86:c2:25:
                    5b:94:7a:0b:0d:e9:5f:75:71:c1:1b:12:e3:57:59:
                    6d:05:40:b1:2d:61:a7:b5:08:4a:67:4a:21:b0:61:
                    8b:38:79:94:bf:9d:f2:45:f0:2e:d3:13:42:ef:f2:
                    74:9b:0c:59:82:1d:f1:6d:77:13:25:1d:1d:76:85:
                    4a:e8:17:9a:51:37:21:32:17:46:21:54:ad:0e:65:
                    4c:22:1f:5e:29:d5:2d:0f:f3:05:29:59:4f:b2:53:
                    fa:51:ed:b7:dc:45:85:de:25:82:12:57:fa:d8:9d:
                    cc:0e:ea:60:a8:73:41:56:60:df:51:b3:d4:b6:e2:
                    27:c2:a6:66:38:89:0a:00:7e:e2:8a:ea:10:3d:bc:
                    12:f6:85:58:91:3a:86:e8:7b:74:39:73:44:9c:58:
                    42:63:91:e7:72:2f:27:db:12:f1:f3:9f:76:4e:b8:
                    63:de:58:45:26:10:30:50:7e:84:2e:e2:a5:8e:8e:
                    4f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6D:01:CD:5C:D7:2F:C8:EC:9C:C2:74:D6:33:73:83:66:3D:64:49
            X509v3 Authority Key Identifier:
                keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3130302e302f32322d3232203d3e203633363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.202.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:f3:a7:2f:86:a9:00:f4:7a:91:6a:56:61:88:b9:f0:48:48:
         cd:f9:41:01:f6:8d:71:6e:ab:dc:60:eb:e4:23:43:22:81:46:
         a9:ec:0f:f6:dd:27:d8:28:ea:74:e6:9c:da:06:fa:ed:32:e2:
         8a:f6:e8:15:74:a6:0e:62:2d:f8:2c:f5:86:86:a3:6c:00:1c:
         5d:38:4d:f1:de:5f:77:c9:af:1b:59:85:a1:cc:7e:50:a1:5c:
         9a:29:8e:c1:e8:83:a7:53:0a:d6:ac:5f:5c:92:6e:85:83:10:
         d5:2c:12:e1:53:cc:6d:7c:e3:0e:88:6a:d8:5e:a9:d4:75:23:
         cd:b8:20:70:d5:86:bb:f8:c8:f9:ac:d7:b8:37:48:5c:9b:08:
         8c:9d:02:25:fd:ea:fd:4a:e9:dc:35:37:db:d1:64:9f:e8:8d:
         71:5c:89:6e:96:cc:28:76:bb:3b:37:fa:40:ae:9b:ea:d7:c2:
         98:95:bf:3b:bd:08:63:0d:6d:40:f5:fc:fe:92:73:d8:ea:53:
         e9:27:7d:00:e0:f4:f3:55:ce:52:98:d8:cb:ca:ce:e6:e3:c1:
         85:9b:96:cb:52:e1:d2:e0:b4:38:8b:86:32:c1:23:78:bf:16:
         d1:e3:ed:46:03:30:e6:41:26:aa:57:54:93:c0:e6:4c:a5:8c:
         b7:e4:8b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:32:15 2026 by rpki-client