Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3134302e302f32322d3232203d3e2034383131.roa
File:                     3130332e3230322e3134302e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier:          aXXDBrU4lBneRKw7fjril524x7PoXqAT2zq600tAcrU=
Subject key identifier:   FD:3E:C2:E6:AB:C7:E2:01:8C:12:6E:1F:AC:A9:84:B6:BA:91:65:35
Certificate issuer:       /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial:       3FA48D79B2537A548B75CDFBFEA10D8EE27CC1CF
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3134302e302f32322d3232203d3e2034383131.roa
Signing time:             Thu 11 Jun 2026 16:02:31 +0000
ROA not before:           Thu 11 Jun 2026 15:57:31 +0000
ROA not after:            Thu 10 Jun 2027 16:02:31 +0000
asID:                     4811
IP address blocks:        103.202.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a4:8d:79:b2:53:7a:54:8b:75:cd:fb:fe:a1:0d:8e:e2:7c:c1:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
        Validity
            Not Before: Jun 11 15:57:31 2026 GMT
            Not After : Jun 10 16:02:31 2027 GMT
        Subject: CN=FD3EC2E6ABC7E2018C126E1FACA984B6BA916535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1c:a4:7e:7a:81:be:57:d5:33:a2:40:9f:bf:
                    46:19:ee:8c:3d:25:b3:88:c7:61:46:6f:5d:0b:9b:
                    31:58:a9:01:28:81:5f:b8:83:f0:ff:18:79:11:e0:
                    e5:57:b9:1f:e5:0b:cb:3c:7c:1a:e9:0e:66:86:70:
                    36:83:14:e8:f6:52:04:37:bb:c8:27:d4:c3:3e:bd:
                    c1:79:4c:f9:b9:03:07:5e:e7:51:5d:a5:73:0f:cb:
                    e8:e7:b3:93:a0:69:9b:fb:bf:8c:f1:64:0c:5e:fb:
                    67:7a:91:86:6d:11:6c:9e:3d:be:db:f2:ba:34:92:
                    c6:63:91:84:97:a7:d6:57:13:50:e0:5e:04:b0:83:
                    bc:95:4e:d7:b9:75:e7:91:b4:01:94:27:70:40:49:
                    92:4f:16:f0:35:1d:af:98:46:8f:74:31:e8:f2:ab:
                    29:18:ac:c3:72:38:6f:0e:78:ce:af:2f:76:33:06:
                    d0:61:3a:d9:12:a3:d3:6c:cd:47:ad:a9:e4:4c:bc:
                    be:38:7c:57:fe:9b:4e:56:f8:af:e8:35:c5:3e:04:
                    7e:20:80:44:8c:15:16:55:7f:3d:43:ea:6a:5e:e7:
                    73:39:4d:2d:01:59:49:1b:86:fa:b8:e1:1f:56:59:
                    a0:fe:6e:42:6f:11:87:73:4b:4d:22:fb:95:3a:a5:
                    69:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:3E:C2:E6:AB:C7:E2:01:8C:12:6E:1F:AC:A9:84:B6:BA:91:65:35
            X509v3 Authority Key Identifier:
                keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3134302e302f32322d3232203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.202.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:18:fd:b6:ca:75:8f:2a:7f:f5:8d:6e:ce:2f:85:06:df:7e:
         e6:6a:f3:ab:e0:40:df:bf:04:a9:7c:c9:6f:b3:17:ee:cd:45:
         28:74:d6:c3:e4:3b:c8:9b:df:00:22:0d:43:a6:51:9e:73:db:
         80:09:83:19:58:4b:27:26:dc:27:f4:60:a8:61:cc:18:7d:de:
         5b:91:ca:f7:10:ff:1a:02:de:0c:5a:c4:28:ed:e2:51:d8:85:
         3b:16:8c:90:c1:fc:44:b6:b9:9d:d0:b1:d1:6e:56:5d:22:cd:
         40:42:9b:6b:8b:43:0e:d9:c3:14:d7:e7:5e:ca:52:21:4c:f4:
         46:14:85:bf:af:cf:65:a2:c7:04:ff:3d:9b:1a:75:77:ee:ec:
         ff:5a:fc:79:36:7a:f2:0f:79:66:96:b2:c4:9b:7e:20:c7:b4:
         98:1a:92:fe:85:78:54:da:69:ff:58:cb:3e:99:af:2d:46:36:
         03:d3:1d:0b:43:f1:38:0e:12:f6:a5:ff:5c:67:68:fa:c2:0f:
         04:35:c0:70:d4:65:28:18:61:46:ea:a1:77:bb:d1:2f:08:90:
         70:da:bd:76:7f:df:e8:fa:e2:d8:52:ea:bc:d3:2f:ce:b1:24:
         4d:11:05:23:e0:85:07:0e:e2:36:47:39:c4:81:05:13:19:71:
         8c:23:18:f9
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUP6SNebJTelSLdc37/qENjuJ8wc8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcw
RDkwNkYyMDAeFw0yNjA2MTExNTU3MzFaFw0yNzA2MTAxNjAyMzFaMDMxMTAvBgNV
BAMTKEZEM0VDMkU2QUJDN0UyMDE4QzEyNkUxRkFDQTk4NEI2QkE5MTY1MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeHKR+eoG+V9UzokCfv0YZ7ow9
JbOIx2FGb10LmzFYqQEogV+4g/D/GHkR4OVXuR/lC8s8fBrpDmaGcDaDFOj2UgQ3
u8gn1MM+vcF5TPm5Awde51FdpXMPy+jns5OgaZv7v4zxZAxe+2d6kYZtEWyePb7b
8ro0ksZjkYSXp9ZXE1DgXgSwg7yVTte5deeRtAGUJ3BASZJPFvA1Ha+YRo90Mejy
qykYrMNyOG8OeM6vL3YzBtBhOtkSo9NszUetqeRMvL44fFf+m05W+K/oNcU+BH4g
gESMFRZVfz1D6mpe53M5TS0BWUkbhvq44R9WWaD+bkJvEYdzS00i+5U6pWkBAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU/T7C5qvH4gGMEm4frKmEtrqRZTUwHwYDVR0j
BBgwFoAUTYevylZ1UXlWNYyJbCHD5w2QbyAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
Njg1MTU0OTcxMzI2ODc1NS8wLzREODdBRkNBNTY3NTUxNzk1NjM1OEM4OTZDMjFD
M0U3MEQ5MDZGMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcwRDkwNkYyMC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwNjg1MTU0OTcxMzI2ODc1NS8wLzMxMzAzMzJlMzIz
MDMyMmUzMTM0MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzEzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmfKjDANBgkqhkiG9w0BAQsFAAOCAQEAexj9tsp1jyp/9Y1uzi+FBt9+
5mrzq+BA378EqXzJb7MX7s1FKHTWw+Q7yJvfACINQ6ZRnnPbgAmDGVhLJybcJ/Rg
qGHMGH3eW5HK9xD/GgLeDFrEKO3iUdiFOxaMkMH8RLa5ndCx0W5WXSLNQEKba4tD
DtnDFNfnXspSIUz0RhSFv6/PZaLHBP89mxp1d+7s/1r8eTZ68g95ZpayxJt+IMe0
mBqS/oV4VNpp/1jLPpmvLUY2A9MdC0PxOA4S9qX/XGdo+sIPBDXAcNRlKBhhRuqh
d7vRLwiQcNq9dn/f6Pri2FLqvNMvzrEkTREFI+CFBw7iNkc5xIEFExlxjCMY+Q==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:08:21 2026 by rpki-client