Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3133322e302f32322d3232203d3e203633363139.roa
File:                     3130332e3230322e3133322e302f32322d3232203d3e203633363139.roa (raw, json)
Hash identifier:          spIhrQXlTvgUztHhO8J58xUakXuZm6kbx1yUF4zjdR0=
Subject key identifier:   46:D7:A6:D0:6F:01:97:1D:9B:0C:9F:B7:E5:DD:41:37:A6:E4:3C:53
Certificate issuer:       /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial:       1365BDFE5BE6C7A051BCE6F8D35719363F2A77A9
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3133322e302f32322d3232203d3e203633363139.roa
Signing time:             Thu 11 Jun 2026 16:01:51 +0000
ROA not before:           Thu 11 Jun 2026 15:56:51 +0000
ROA not after:            Thu 10 Jun 2027 16:01:51 +0000
asID:                     63619
IP address blocks:        103.202.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:65:bd:fe:5b:e6:c7:a0:51:bc:e6:f8:d3:57:19:36:3f:2a:77:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
        Validity
            Not Before: Jun 11 15:56:51 2026 GMT
            Not After : Jun 10 16:01:51 2027 GMT
        Subject: CN=46D7A6D06F01971D9B0C9FB7E5DD4137A6E43C53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:01:c0:8a:a4:18:e1:14:25:15:14:19:0b:e0:
                    2c:1d:b0:6c:ae:93:12:14:7c:11:e0:6b:a4:d7:51:
                    6d:80:d9:f8:89:e6:53:83:aa:12:44:a0:77:e7:74:
                    62:24:13:28:44:c0:ef:e5:5f:84:fc:05:2c:fb:e0:
                    0b:da:af:7e:be:d2:fa:ee:b4:fa:4a:48:2d:8e:87:
                    97:61:00:ed:a4:23:39:c8:d8:39:de:6b:dc:85:da:
                    54:41:73:32:42:2d:56:05:16:78:dd:26:61:ad:3d:
                    21:0f:22:5e:16:f4:9d:7b:f4:84:25:22:35:9a:a4:
                    ba:c9:48:e1:df:db:26:b0:1b:46:0d:a7:c7:bc:12:
                    01:ae:a8:22:1c:43:fc:2b:6a:61:e0:f0:b5:32:d5:
                    d7:f2:7e:f6:22:c2:79:4b:2c:8e:6a:7e:fa:df:f2:
                    1b:ce:42:53:10:46:94:ab:95:4b:2c:71:3b:89:50:
                    30:4f:97:14:92:e3:a3:69:32:7d:c4:ef:3a:61:f0:
                    0a:a6:c8:51:7b:53:ee:8c:c3:e7:a5:7b:7c:1e:78:
                    1c:04:23:9c:26:51:c9:a8:f7:d9:5f:2f:df:11:f9:
                    08:6f:e3:74:e8:db:ac:c9:0c:03:df:15:69:bf:a2:
                    6b:7b:d4:84:15:04:d5:dd:bd:87:8e:a0:56:a6:7a:
                    dc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D7:A6:D0:6F:01:97:1D:9B:0C:9F:B7:E5:DD:41:37:A6:E4:3C:53
            X509v3 Authority Key Identifier:
                keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3133322e302f32322d3232203d3e203633363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.202.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:fb:66:56:75:73:ed:32:4e:18:b0:20:1a:30:68:7d:25:de:
         9d:fd:4a:2b:13:4a:b3:f5:e0:db:48:44:5e:87:31:23:46:bf:
         80:3e:97:9a:0c:95:5f:c9:51:f1:5f:42:cc:8a:2e:e6:53:70:
         56:b1:97:2c:b2:ec:f6:a4:57:b2:19:9c:9a:b4:1b:70:88:31:
         d8:6c:7b:e9:c8:e0:be:64:50:d3:e0:11:c4:63:ce:e9:b4:1b:
         02:bd:4c:d3:5a:d7:c2:d1:67:f7:1e:bc:68:1c:16:66:9f:75:
         99:af:4d:72:1b:a5:49:67:ea:2e:6d:a7:87:3d:35:f4:ec:1e:
         21:79:ee:5e:a8:53:9b:a0:d6:e1:51:e4:80:be:12:4c:c9:93:
         b6:85:d8:14:55:4b:b8:65:54:c1:89:a2:f5:20:c9:9f:fb:2d:
         f5:59:bd:a1:98:d5:43:1a:cb:9d:75:9b:9b:53:35:01:ea:0a:
         a4:ee:40:f0:74:14:57:ca:3b:23:8b:f5:c1:c5:bc:c0:f3:e4:
         29:56:98:77:86:da:7c:0b:6e:8d:fe:c2:16:2c:93:79:78:26:
         59:02:00:7e:31:12:f9:df:5e:74:9c:2e:dd:3a:32:2d:75:d7:
         70:a7:c9:0d:a1:f6:fc:58:fd:2c:11:77:35:72:aa:04:c6:9e:
         06:e2:a2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:36:04 2026 by rpki-client