Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136352e302f32342d3234203d3e203130323036.roa
File:                     35322e38322e3136352e302f32342d3234203d3e203130323036.roa (raw, json)
Hash identifier:          3aoO0RZzfnR2taghnPVb4h/zdjWMigrOBnd5ZB4vK/k=
Subject key identifier:   D1:6B:DE:79:FE:0B:F5:E6:E3:D2:EF:41:96:9C:98:69:B0:DD:B4:95
Certificate issuer:       /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
Certificate serial:       42C35C6B3E8ECD6731773FB7E824C623F67F0D5E
Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136352e302f32342d3234203d3e203130323036.roa
Signing time:             Wed 12 Aug 2026 07:54:22 +0000
ROA not before:           Wed 12 Aug 2026 07:49:22 +0000
ROA not after:            Wed 11 Aug 2027 07:54:22 +0000
asID:                     10206
IP address blocks:        52.82.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 13:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c3:5c:6b:3e:8e:cd:67:31:77:3f:b7:e8:24:c6:23:f6:7f:0d:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
        Validity
            Not Before: Aug 12 07:49:22 2026 GMT
            Not After : Aug 11 07:54:22 2027 GMT
        Subject: CN=D16BDE79FE0BF5E6E3D2EF41969C9869B0DDB495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d2:10:47:c5:a7:38:e7:43:29:e5:0b:97:b9:
                    0b:16:cc:fb:ad:e1:2a:df:57:eb:e2:f4:f6:12:65:
                    ad:03:8a:83:d6:0d:f0:2b:04:64:b7:e7:c1:c0:9b:
                    4c:05:ad:6b:1b:34:3b:78:9c:3b:4a:fc:51:a7:bc:
                    fa:cb:ab:58:22:06:c0:d4:be:4c:1e:07:51:fd:97:
                    af:1a:96:0f:62:72:aa:8a:bc:09:2a:a9:c3:4d:fd:
                    ef:c8:bd:86:d5:09:21:23:e8:c5:c7:b4:a6:bf:24:
                    8c:c2:f6:ee:6a:bc:26:c8:6a:a8:8e:fb:51:80:d8:
                    e1:6e:6c:3e:97:35:cf:44:ad:17:41:4a:74:1f:e6:
                    b3:e2:a0:59:6c:f9:01:61:b4:11:61:b6:61:c0:4b:
                    1d:ae:84:f2:16:f7:8e:c9:16:62:dc:e4:a6:df:1b:
                    f2:a5:a8:14:40:d0:7e:5e:a9:b5:12:16:4f:29:2b:
                    97:a6:2c:91:9d:02:2e:03:5b:e7:d2:9d:36:45:08:
                    39:07:61:9a:9a:95:4a:e3:b3:31:49:53:10:a3:69:
                    c6:47:a7:e3:45:b0:16:c5:8b:70:6f:c0:8f:4d:55:
                    99:24:e3:93:b7:a9:b7:ec:28:bd:fb:12:59:7f:07:
                    92:53:a6:68:2a:28:d7:97:02:2f:23:04:26:c6:42:
                    38:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:6B:DE:79:FE:0B:F5:E6:E3:D2:EF:41:96:9C:98:69:B0:DD:B4:95
            X509v3 Authority Key Identifier:
                keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136352e302f32342d3234203d3e203130323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.82.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:1c:c3:46:e8:a7:19:34:69:e5:0a:ba:25:de:84:98:5c:48:
         6c:19:92:b7:27:87:99:b4:dc:e2:ab:ef:d9:95:0b:2b:1a:67:
         7d:59:ae:4e:d5:7b:3b:61:6f:2f:8e:4b:39:03:f3:57:16:fc:
         38:23:4e:e2:8f:35:97:31:3b:b8:ce:72:a0:7f:0b:e3:5f:97:
         56:f1:7f:a9:4a:f0:3b:39:39:84:e7:fd:3d:fa:4c:e5:c9:c0:
         c5:99:14:4d:d5:23:56:71:67:fd:16:48:a4:76:59:0c:6c:b5:
         12:ff:1d:25:6e:f4:38:7f:11:a5:e4:a6:5e:2f:c4:26:af:ae:
         8c:54:e2:99:c0:63:df:ab:02:28:c0:be:d2:6c:72:ca:6c:73:
         d7:b1:eb:05:0b:ca:5a:aa:e1:8f:36:f5:d7:b6:64:b4:57:66:
         52:f4:d2:8e:8b:2c:39:a9:11:ff:c2:40:d1:b9:16:1a:cd:a9:
         4c:2d:9b:a6:a6:12:8c:35:2f:d9:a2:27:a7:40:1a:e1:8f:13:
         8b:ba:bf:05:82:83:7c:f8:b3:8f:a9:72:f8:e9:80:84:d3:59:
         1a:c7:4b:41:8d:c3:7c:f1:1b:19:1b:28:c1:df:df:0d:83:9c:
         47:d7:82:2f:61:91:21:98:dd:5c:fb:cd:c4:0e:8a:22:8a:e4:
         a7:c5:7f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 07:05:15 2026 by rpki-client