Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138342e302f32332d3233203d3e20313334373631.roa
File:                     35322e38322e3138342e302f32332d3233203d3e20313334373631.roa (raw, json)
Hash identifier:          cO3ZZEtontYy2pbxwRteKX/EQNP0Mbqjo0mSUyGl2qs=
Subject key identifier:   06:F6:1F:5F:93:50:90:FC:B7:60:8B:05:2D:EA:69:7E:83:12:41:D2
Certificate issuer:       /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
Certificate serial:       4450047FFE1C5A5D51DD4D8CA63FE8D06CCD1825
Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138342e302f32332d3233203d3e20313334373631.roa
Signing time:             Wed 12 Aug 2026 07:50:17 +0000
ROA not before:           Wed 12 Aug 2026 07:45:17 +0000
ROA not after:            Wed 11 Aug 2027 07:50:17 +0000
asID:                     134761
IP address blocks:        52.82.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 13:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:50:04:7f:fe:1c:5a:5d:51:dd:4d:8c:a6:3f:e8:d0:6c:cd:18:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
        Validity
            Not Before: Aug 12 07:45:17 2026 GMT
            Not After : Aug 11 07:50:17 2027 GMT
        Subject: CN=06F61F5F935090FCB7608B052DEA697E831241D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7a:89:d2:c3:26:e3:49:03:57:93:e6:6b:ba:
                    0f:9e:f0:da:c5:24:cc:1a:62:e7:d1:a2:1a:88:a0:
                    a2:da:48:2d:de:bb:ef:13:f6:05:d4:42:3a:a7:c8:
                    61:30:4a:d1:71:65:dc:0a:7f:78:d5:78:cf:c8:35:
                    bc:d1:a1:3c:77:f0:0f:b6:76:c3:aa:15:1b:d0:d7:
                    a5:19:79:74:b2:8d:c8:d6:f0:0c:66:77:39:66:64:
                    11:18:e0:ca:5c:68:f3:7d:6c:7b:c3:10:88:80:f5:
                    e0:67:45:4e:78:13:46:34:12:17:ec:84:f9:58:74:
                    b0:67:62:0e:77:08:e1:38:58:8b:af:39:e6:87:a2:
                    2e:d9:27:99:82:6c:b5:12:28:2e:e3:c1:0a:31:04:
                    80:84:3c:b7:e0:49:23:0a:66:28:90:f0:fe:67:3b:
                    ff:3a:e3:d2:6e:c5:f7:77:60:d8:5f:1b:b2:aa:0d:
                    d3:17:1d:cd:ff:1b:51:59:70:ec:92:99:5e:66:17:
                    f7:b1:5d:8f:ea:aa:bf:e2:e0:d2:5a:e9:d5:b6:45:
                    92:e4:f8:95:13:41:f1:51:07:37:13:87:e6:cd:1e:
                    e5:57:af:99:f2:6d:cb:8e:66:79:d3:45:7e:c5:55:
                    f2:e3:66:15:c9:1a:34:41:6a:ae:23:dc:0a:20:e0:
                    c8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F6:1F:5F:93:50:90:FC:B7:60:8B:05:2D:EA:69:7E:83:12:41:D2
            X509v3 Authority Key Identifier:
                keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3138342e302f32332d3233203d3e20313334373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.82.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:b9:b6:30:33:0f:c9:0b:f9:be:18:1b:61:4a:e8:e9:3a:f3:
         e1:8a:aa:9d:57:a4:d0:ea:25:a7:0e:c1:2f:cc:58:d2:d9:2b:
         c4:6f:9a:e2:4d:51:5c:7b:c5:55:af:c7:e0:64:58:2c:bb:57:
         e1:78:8d:55:5e:57:00:b0:3e:4d:a6:25:0d:2a:cf:66:29:ce:
         02:32:d2:51:3a:28:a4:c9:9f:5a:b4:4e:68:56:ce:5b:42:f0:
         6d:2f:07:b7:3e:e8:0b:4f:e5:92:01:df:ec:28:87:09:62:6d:
         34:0a:78:07:aa:4e:c6:5f:bb:a9:7c:68:2e:f7:1a:aa:0c:11:
         a3:3c:6f:3c:08:f1:04:c1:3b:23:6f:1c:7c:cb:33:83:2d:4a:
         28:cd:b7:2c:0d:50:47:b0:d1:72:8e:74:dd:42:24:b2:a4:10:
         0c:30:3f:c1:e8:f4:d0:0e:76:1e:d6:2f:60:93:c8:42:94:3d:
         a8:d3:3f:a9:d1:1a:18:83:ce:ff:e7:4e:e5:79:4d:8e:20:f4:
         ac:ce:03:dd:ab:64:a7:a9:f6:58:14:d7:62:84:23:c2:a3:5d:
         32:e8:24:9f:67:fb:cc:8d:1e:eb:d0:38:a3:b4:6b:60:17:75:
         29:54:75:ae:67:e2:dc:4e:f3:30:35:0a:b3:04:3f:f9:9e:06:
         21:b3:ca:7a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 29 07:05:17 2026 by rpki-client