Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138342e302f32332d3233203d3e203130323036.roa
File:                     35322e38322e3138342e302f32332d3233203d3e203130323036.roa (raw, json)
Hash identifier:          XTaotjbe61CaiYtgWkNb6+PpHbllutr0kxHDEMlxQKI=
Subject key identifier:   9D:4D:46:ED:80:1C:05:CC:D0:E2:E7:24:14:15:25:D6:C1:E4:A9:C4
Certificate issuer:       /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
Certificate serial:       59690F714CF512E7655ECE2B952A9EA9AE1AC672
Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138342e302f32332d3233203d3e203130323036.roa
Signing time:             Wed 12 Aug 2026 07:54:21 +0000
ROA not before:           Wed 12 Aug 2026 07:49:21 +0000
ROA not after:            Wed 11 Aug 2027 07:54:21 +0000
asID:                     10206
IP address blocks:        52.82.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 13:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:69:0f:71:4c:f5:12:e7:65:5e:ce:2b:95:2a:9e:a9:ae:1a:c6:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
        Validity
            Not Before: Aug 12 07:49:21 2026 GMT
            Not After : Aug 11 07:54:21 2027 GMT
        Subject: CN=9D4D46ED801C05CCD0E2E724141525D6C1E4A9C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5b:42:f7:d5:65:78:57:37:fd:26:bd:2d:76:
                    c8:27:da:25:74:dd:d4:be:83:e5:89:55:4e:e2:76:
                    82:46:75:0a:91:fd:28:50:ba:d7:fc:a1:ae:a7:17:
                    91:d6:09:26:fb:44:79:8a:07:ec:89:7f:7c:e6:37:
                    bb:3c:0a:fd:a5:83:e3:dd:f9:67:53:4b:02:44:dc:
                    b8:f4:32:ea:82:05:99:81:c8:87:40:ca:32:df:33:
                    e3:9f:ce:69:7f:df:ca:2d:f1:74:5e:b5:9e:39:77:
                    51:cc:86:db:69:f7:6e:fd:a6:08:23:22:d4:b8:c6:
                    30:9d:1c:a7:e6:d7:41:32:6b:cd:d4:50:f1:f7:2c:
                    55:c3:1b:f9:d0:71:b5:3f:3d:38:f1:c8:78:1d:34:
                    89:ad:68:7a:12:95:63:6a:7e:c8:98:98:98:1a:45:
                    94:5d:f1:c9:97:b8:7d:b4:66:6f:95:2e:1a:ad:84:
                    46:0e:f4:b1:a0:bc:78:0d:0c:53:e2:70:14:45:88:
                    07:3f:43:15:cb:0d:2a:b9:a3:8c:56:17:ba:a6:49:
                    ca:e7:5e:c3:c1:c3:e5:78:bd:2a:2d:2e:59:18:4c:
                    96:e6:08:86:c6:c5:13:b6:6f:5b:25:dd:8d:ea:5d:
                    cc:16:4e:8f:2c:1c:c2:c7:a6:84:f7:86:79:b0:22:
                    f9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4D:46:ED:80:1C:05:CC:D0:E2:E7:24:14:15:25:D6:C1:E4:A9:C4
            X509v3 Authority Key Identifier:
                keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138342e302f32332d3233203d3e203130323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.82.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:65:51:05:5b:02:8b:5b:d7:ac:c4:c9:87:52:19:28:cc:8e:
         85:35:96:59:ff:d4:0e:f2:7b:82:36:f8:fd:4a:0d:fe:63:61:
         6f:57:5a:db:d3:65:d0:3b:0f:de:ac:7f:6d:f6:b9:8a:35:14:
         78:c4:93:e5:66:af:09:f1:b5:9c:76:85:24:33:6d:ac:72:a2:
         47:c0:2f:34:66:8a:90:8f:8e:de:b4:ba:2a:9e:cc:b3:ac:9f:
         61:ce:3d:b6:57:66:21:62:cb:d6:fb:1e:8a:af:76:52:19:67:
         1e:a0:6f:2a:2a:86:c2:9b:7d:4a:21:50:9c:91:00:44:73:75:
         03:11:25:71:ad:b5:27:ba:da:37:3f:af:1f:44:32:46:5f:56:
         48:1d:26:64:5d:1a:42:ed:12:8c:cc:b0:a0:41:8a:09:ae:bd:
         f5:85:b7:c5:44:a8:03:82:df:50:2c:a9:c0:18:a1:1b:07:01:
         f4:9b:1f:3f:bb:71:07:a0:a3:6d:b8:80:eb:46:e6:93:52:66:
         3e:34:6e:bb:41:23:8a:4d:e7:e9:e8:bb:c1:75:0c:46:a3:a7:
         be:87:c0:c9:f3:d9:6d:45:b7:1e:78:1b:fc:27:46:df:cf:be:
         dc:7d:46:a4:b8:08:9a:ff:55:e9:58:bd:f6:2a:c5:99:5f:85:
         c7:f7:d7:78
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUWWkPcUz1EudlXs4rlSqeqa4axnIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0
NkE3REY2RDAeFw0yNjA4MTIwNzQ5MjFaFw0yNzA4MTEwNzU0MjFaMDMxMTAvBgNV
BAMTKDlENEQ0NkVEODAxQzA1Q0NEMEUyRTcyNDE0MTUyNUQ2QzFFNEE5QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/W0L31WV4Vzf9Jr0tdsgn2iV0
3dS+g+WJVU7idoJGdQqR/ShQutf8oa6nF5HWCSb7RHmKB+yJf3zmN7s8Cv2lg+Pd
+WdTSwJE3Lj0MuqCBZmByIdAyjLfM+Ofzml/38ot8XRetZ45d1HMhttp9279pggj
ItS4xjCdHKfm10Eya83UUPH3LFXDG/nQcbU/PTjxyHgdNImtaHoSlWNqfsiYmJga
RZRd8cmXuH20Zm+VLhqthEYO9LGgvHgNDFPicBRFiAc/QxXLDSq5o4xWF7qmScrn
XsPBw+V4vSotLlkYTJbmCIbGxRO2b1sl3Y3qXcwWTo8sHMLHpoT3hnmwIvk7AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUnU1G7YAcBczQ4uckFBUl1sHkqcQwHwYDVR0j
BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy
NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0OTgyNDAzLzEvMzUzMjJlMzgzMjJl
MzEzODM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzEzMDMyMzAzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEATRSuDANBgkqhkiG9w0BAQsFAAOCAQEAR2VRBVsCi1vXrMTJh1IZKMyOhTWW
Wf/UDvJ7gjb4/UoN/mNhb1da29Nl0DsP3qx/bfa5ijUUeMST5WavCfG1nHaFJDNt
rHKiR8AvNGaKkI+O3rS6Kp7Ms6yfYc49tldmIWLL1vseiq92UhlnHqBvKiqGwpt9
SiFQnJEARHN1AxElca21J7raNz+vH0QyRl9WSB0mZF0aQu0SjMywoEGKCa699YW3
xUSoA4LfUCypwBihGwcB9JsfP7txB6CjbbiA60bmk1JmPjRuu0Ejik3n6ei7wXUM
RqOnvofAyfPZbUW3Hngb/CdG38++3H1GpLgImv9V6Vi99irFmV+Fx/fXeA==
-----END CERTIFICATE-----
Generated at Sat Aug 29 07:05:14 2026 by rpki-client