Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132302e302f32322d3232203d3e203633363139.roa
File:                     3130332e3230322e3132302e302f32322d3232203d3e203633363139.roa (raw, json)
Hash identifier:          wh0gWQWT0zLqUg0t8c2yBb/Ia+DD+M0DKWb6hjBwuS4=
Subject key identifier:   BE:40:73:65:3D:3E:E3:67:BB:EE:7D:B5:5E:7E:A6:CD:24:99:1A:03
Certificate issuer:       /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial:       29354C8B2F442AF3213A547FC3E95DC0BD594671
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132302e302f32322d3232203d3e203633363139.roa
Signing time:             Thu 11 Jun 2026 16:00:26 +0000
ROA not before:           Thu 11 Jun 2026 15:55:26 +0000
ROA not after:            Thu 10 Jun 2027 16:00:26 +0000
asID:                     63619
IP address blocks:        103.202.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:35:4c:8b:2f:44:2a:f3:21:3a:54:7f:c3:e9:5d:c0:bd:59:46:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
        Validity
            Not Before: Jun 11 15:55:26 2026 GMT
            Not After : Jun 10 16:00:26 2027 GMT
        Subject: CN=BE4073653D3EE367BBEE7DB55E7EA6CD24991A03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:11:68:45:fd:8b:ad:a3:b8:07:0f:9a:52:51:
                    ea:b3:d4:51:6f:f6:f9:24:77:19:74:53:a3:61:da:
                    35:5c:fb:3e:0c:70:94:d5:a4:79:32:1e:e6:50:97:
                    11:c0:1c:bc:01:97:76:a1:bb:de:89:b5:5a:de:d2:
                    e7:ee:1f:34:60:62:5a:d5:f9:5b:89:5f:d3:e9:e7:
                    2a:a7:c2:a5:01:56:4a:70:32:b7:02:0b:27:96:c2:
                    cf:06:56:90:4b:26:00:af:a4:16:e2:8e:0e:1d:0c:
                    67:58:a3:55:53:d2:55:27:1c:82:ce:f2:d5:b7:61:
                    91:76:f0:b0:e7:50:2e:cd:42:1a:f7:b3:29:de:1f:
                    de:86:5b:30:16:ec:b1:df:1e:4b:7e:b9:83:ba:e2:
                    44:78:13:fc:1c:07:c0:db:98:14:36:88:c7:9d:7c:
                    62:f4:35:6c:bd:24:f5:37:e8:b6:81:32:5a:91:43:
                    2a:40:cc:cf:1d:31:18:c6:08:c8:a6:c7:db:ed:46:
                    d1:a8:32:58:78:e7:0d:20:22:d4:09:19:fa:e4:04:
                    df:3f:51:27:ef:4b:3f:ca:33:4c:fa:b7:b9:af:fe:
                    d5:77:52:91:34:55:28:30:8a:c6:c8:f5:5f:80:eb:
                    49:12:38:13:d0:ba:00:04:ba:3d:85:d6:86:54:54:
                    21:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:40:73:65:3D:3E:E3:67:BB:EE:7D:B5:5E:7E:A6:CD:24:99:1A:03
            X509v3 Authority Key Identifier:
                keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132302e302f32322d3232203d3e203633363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.202.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:b4:6d:43:ae:ef:9b:1e:0a:4b:24:e0:e4:5f:0c:10:af:ca:
         c2:59:2d:49:39:ed:51:9a:02:04:4d:93:3e:31:61:58:80:b2:
         74:23:d5:f5:1b:7a:0f:77:ab:13:f6:95:fc:e3:b3:ae:57:b6:
         5f:54:8c:47:7e:b2:00:ac:c8:ea:66:78:4a:f9:ca:33:24:ff:
         93:25:d6:a9:1c:b7:9a:b7:25:51:11:66:08:86:67:55:1d:11:
         86:90:6e:54:1c:00:bc:07:96:9c:f8:1e:3d:0f:1a:65:da:a0:
         90:ed:73:97:eb:ca:cb:20:f9:d3:04:0f:f1:b1:2c:7b:ec:75:
         e3:08:26:3b:62:a2:ad:60:90:7b:ca:11:9c:54:41:4e:35:3e:
         fa:28:ab:a9:7c:05:0f:08:7d:d0:af:e3:82:2f:a6:10:97:d2:
         d1:be:d1:96:59:40:7a:09:27:09:08:1d:26:d9:a1:a4:22:2f:
         ba:09:6d:b1:bf:c4:4a:6f:1f:90:61:37:b9:73:59:a8:8b:40:
         d1:60:ea:88:3c:a0:62:be:06:06:79:56:f2:42:0e:cc:14:04:
         a4:0e:93:67:a1:d7:f7:33:d3:2b:26:aa:f5:96:ec:7d:6a:ae:
         1a:97:46:2c:9f:84:02:39:4f:5f:5a:a2:41:58:bb:73:60:bb:
         30:68:51:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:31:53 2026 by rpki-client