Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3131322e302f32322d3232203d3e203633363139.roa
File:                     3130332e3230322e3131322e302f32322d3232203d3e203633363139.roa (raw, json)
Hash identifier:          piQvzGOJj6q0SbABoMzH9XVW9qrcdmShtSZDHmydXoM=
Subject key identifier:   9E:3E:BF:34:2E:4F:7F:1F:2A:00:5A:BC:7D:06:9E:C6:B3:E5:6A:F2
Certificate issuer:       /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial:       3F56FBB854DDB55DB7790067E5D2B7C132862B37
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3131322e302f32322d3232203d3e203633363139.roa
Signing time:             Thu 11 Jun 2026 16:00:02 +0000
ROA not before:           Thu 11 Jun 2026 15:55:02 +0000
ROA not after:            Thu 10 Jun 2027 16:00:02 +0000
asID:                     63619
IP address blocks:        103.202.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:56:fb:b8:54:dd:b5:5d:b7:79:00:67:e5:d2:b7:c1:32:86:2b:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
        Validity
            Not Before: Jun 11 15:55:02 2026 GMT
            Not After : Jun 10 16:00:02 2027 GMT
        Subject: CN=9E3EBF342E4F7F1F2A005ABC7D069EC6B3E56AF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bb:24:69:2e:09:a4:82:50:9a:94:35:81:7c:
                    df:6f:7a:19:c8:8d:b2:c8:b8:f4:53:87:26:57:8f:
                    d4:f3:f9:bd:57:80:90:ba:e1:bb:5c:19:bd:18:bf:
                    de:64:53:69:36:6b:12:c6:7d:be:d3:89:26:43:15:
                    84:41:c2:32:af:46:14:17:ac:f2:97:d4:49:ef:8d:
                    8e:8a:37:3c:75:0f:28:f2:75:0b:f9:e8:ff:6a:6c:
                    09:87:2e:bd:31:44:f8:2e:70:01:23:4d:20:f4:38:
                    d4:c2:9a:a0:23:8d:ed:cc:2d:cd:1c:7e:e5:68:17:
                    92:5b:56:d8:d4:2b:a4:62:19:5d:aa:d7:f9:32:d0:
                    f9:9b:64:0a:b8:cf:38:db:e7:83:46:79:78:b8:74:
                    77:ee:24:bc:66:bf:f5:e0:0c:26:8f:06:ae:0c:a5:
                    3a:c5:0c:b5:ea:bb:8a:cc:f3:f5:88:83:4e:69:ee:
                    25:51:49:90:19:0a:e1:df:34:a1:8a:39:11:da:93:
                    8a:da:91:6d:8c:52:0c:32:4b:c4:2b:80:5d:2c:e7:
                    23:21:4a:6c:fc:1e:ec:02:60:b2:e1:3c:85:83:43:
                    f8:0e:89:d3:c6:47:2b:15:56:37:ef:90:31:eb:df:
                    9b:73:b4:9e:b3:c5:6f:d3:ac:bf:e2:bb:3f:e3:f9:
                    79:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3E:BF:34:2E:4F:7F:1F:2A:00:5A:BC:7D:06:9E:C6:B3:E5:6A:F2
            X509v3 Authority Key Identifier:
                keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3131322e302f32322d3232203d3e203633363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.202.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:1e:bf:df:8c:b1:d9:9c:99:c1:a5:56:1f:ed:db:e8:15:76:
         95:90:fe:a8:64:66:d5:4d:51:d7:f1:06:42:5f:b9:1e:d7:e6:
         02:47:3a:70:d3:1c:b9:b9:15:50:57:d3:1b:67:5d:e0:b0:ee:
         d8:bd:be:05:d0:30:89:3f:a9:0b:8b:e4:66:94:ef:27:04:a5:
         38:b6:04:f6:94:47:96:a7:9e:03:6c:69:8e:0e:27:cc:0f:40:
         5e:a5:b3:d2:b1:a0:4e:54:e1:fc:aa:2b:18:f6:a9:73:3e:ae:
         e7:b5:2d:8b:66:39:db:88:dc:cf:01:75:79:87:d8:1e:8d:c6:
         e3:37:74:f3:7a:7e:9e:b9:a9:7e:0c:52:53:8b:e5:a1:7e:18:
         a3:33:df:57:db:6e:fb:3b:77:fa:e7:7a:34:02:08:a7:51:b2:
         a4:b3:4f:d6:b6:3b:21:5e:13:35:3f:06:76:65:79:ca:c4:a3:
         8d:1b:9f:d7:db:63:b4:79:09:f1:05:c4:ba:ea:0f:3b:98:eb:
         61:90:b0:4b:df:0a:3a:95:28:a0:3e:12:ce:ad:3b:6c:72:29:
         d5:ab:d7:c9:a9:be:ce:64:19:e3:8e:f9:d8:c2:dd:5a:3b:45:
         0b:a1:f0:62:eb:e0:b4:33:5c:a9:b4:af:1c:33:2d:7f:02:8f:
         4f:9b:91:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:36:03 2026 by rpki-client