Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3133362e302f32322d3232203d3e203633363139.roa
File:                     3130332e3230322e3133362e302f32322d3232203d3e203633363139.roa (raw, json)
Hash identifier:          HomS/kOTJLHYdcdFVKi2POKpVb+QzyGOTOUUMOB8S7w=
Subject key identifier:   D6:3B:4C:54:40:21:32:5A:06:DF:35:DE:01:4E:AD:DF:79:F6:46:3C
Certificate issuer:       /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial:       4BCEDC9458BE4361970BDC39CCB71BF497B42EC0
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3133362e302f32322d3232203d3e203633363139.roa
Signing time:             Thu 11 Jun 2026 16:02:11 +0000
ROA not before:           Thu 11 Jun 2026 15:57:11 +0000
ROA not after:            Thu 10 Jun 2027 16:02:11 +0000
asID:                     63619
IP address blocks:        103.202.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ce:dc:94:58:be:43:61:97:0b:dc:39:cc:b7:1b:f4:97:b4:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
        Validity
            Not Before: Jun 11 15:57:11 2026 GMT
            Not After : Jun 10 16:02:11 2027 GMT
        Subject: CN=D63B4C544021325A06DF35DE014EADDF79F6463C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:77:50:69:b1:72:28:ff:d3:9b:92:ae:db:88:
                    a4:c1:47:26:a7:6e:98:f3:7d:14:46:79:e5:c2:fa:
                    ed:aa:29:53:31:b4:d0:f4:c2:7b:95:91:61:37:db:
                    9f:ed:4c:e7:ea:99:be:d3:5c:18:40:45:d6:05:a1:
                    53:cc:a5:a1:a6:cf:b5:40:3d:3c:f2:d2:86:93:87:
                    dc:1d:14:4b:1a:a3:a7:aa:4d:26:c2:f5:89:d4:c0:
                    f3:d0:64:3b:10:09:7c:2c:95:db:f6:95:cd:17:2c:
                    70:08:eb:28:34:76:d9:62:35:da:7e:69:db:c5:23:
                    2c:c5:3b:70:22:c3:21:72:af:f1:9b:6a:3f:52:14:
                    c4:30:95:be:24:bf:9a:4f:e0:cf:53:15:ec:31:78:
                    d7:12:b1:55:6b:38:eb:73:66:4e:9c:4d:24:3f:03:
                    dc:34:f1:e9:20:07:0f:4e:67:b1:61:63:0c:12:87:
                    07:6a:78:f8:19:e4:e5:e1:78:51:83:6d:a2:12:ee:
                    f2:97:ac:0d:88:72:ea:d7:73:d0:7d:91:dd:6f:98:
                    8a:4f:4d:1c:3b:0d:96:b3:7d:26:2f:5c:50:09:d4:
                    24:72:d7:60:de:75:6e:38:7a:3d:22:5e:2d:6f:40:
                    07:bb:fd:a4:63:48:c5:54:76:e3:e7:a9:6a:67:99:
                    2f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3B:4C:54:40:21:32:5A:06:DF:35:DE:01:4E:AD:DF:79:F6:46:3C
            X509v3 Authority Key Identifier:
                keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3133362e302f32322d3232203d3e203633363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.202.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:42:7d:dd:5a:1d:04:bd:7d:6c:66:d2:2d:db:53:59:7d:43:
         f0:bf:a5:2f:4a:f4:2c:56:43:06:57:04:61:07:b6:32:73:bb:
         95:55:b2:dd:8e:a5:dc:7c:e4:ee:cb:fb:42:f7:98:73:b7:92:
         23:4d:9b:69:a9:ed:9f:96:68:b4:48:35:d8:b8:80:9a:27:2f:
         86:54:4a:f4:88:81:70:8c:d5:e9:d1:b5:dd:fb:f5:40:d1:c8:
         21:11:76:66:06:69:f3:1a:0d:32:4b:25:bf:cf:2e:d1:8b:b0:
         99:e4:e7:9c:8f:b1:52:a0:49:17:cd:cc:3c:ae:cc:83:c1:73:
         61:78:d1:ff:e1:ad:77:40:9b:ea:d3:c6:bb:91:6e:5a:db:eb:
         32:2a:3c:9c:be:23:51:55:3e:d4:4a:f2:9e:79:68:96:2f:93:
         c5:70:9b:8c:26:93:c6:8d:bb:1e:f3:e7:c9:47:d0:d1:36:30:
         15:e8:c8:c6:5b:63:a6:3c:e3:ff:1a:d1:f0:ad:7a:4e:56:f8:
         f8:4d:be:b7:50:dd:95:56:6e:bc:9e:d4:1c:6c:fd:cd:30:2c:
         6d:cf:e2:5d:52:7b:4e:f3:d9:cd:c4:0f:f2:d3:f0:0b:2d:a8:
         41:c8:10:2b:77:c1:c3:b1:17:4f:08:26:83:7c:21:fa:f4:3a:
         4d:b0:db:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:36:05 2026 by rpki-client