Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3139302e302f32342d3234203d3e20313335363239.roa
File:                     35322e38322e3139302e302f32342d3234203d3e20313335363239.roa (raw, json)
Hash identifier:          ILMjTAKEvwYebJma8f4DXxIuzqbOI1CxBD205TbY+Ns=
Subject key identifier:   1B:6C:E9:B3:18:38:B0:8B:F6:62:7B:93:FB:61:58:89:2F:A7:64:A3
Certificate issuer:       /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
Certificate serial:       261870989055E4D0ED717F5549726886A2DFBD0D
Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3139302e302f32342d3234203d3e20313335363239.roa
Signing time:             Wed 12 Aug 2026 07:46:52 +0000
ROA not before:           Wed 12 Aug 2026 07:41:52 +0000
ROA not after:            Wed 11 Aug 2027 07:46:52 +0000
asID:                     135629
IP address blocks:        52.82.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 13:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:18:70:98:90:55:e4:d0:ed:71:7f:55:49:72:68:86:a2:df:bd:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
        Validity
            Not Before: Aug 12 07:41:52 2026 GMT
            Not After : Aug 11 07:46:52 2027 GMT
        Subject: CN=1B6CE9B31838B08BF6627B93FB6158892FA764A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cc:52:ec:bd:35:45:c4:5a:ec:6c:f2:a6:4c:
                    8f:b1:d0:e9:d7:14:a1:9c:6b:fb:80:a0:3f:b5:7b:
                    0d:b8:94:89:e5:04:54:c6:95:8f:e7:eb:44:23:74:
                    89:c3:c4:3a:f2:82:6d:60:e4:50:56:bc:c8:20:80:
                    11:ac:a9:26:eb:29:8f:3d:6a:64:83:52:50:47:53:
                    f5:38:6d:b4:ec:2a:95:ca:93:d1:56:2a:10:6f:b7:
                    c5:62:bc:ff:ae:3c:47:28:c8:41:dd:6f:71:f3:70:
                    7c:44:8e:e0:d2:99:5c:b6:6b:df:31:28:23:49:5e:
                    69:e6:c8:c5:6c:dc:b8:8b:43:42:0f:6d:6b:d8:eb:
                    38:3f:5b:c5:37:c6:95:c1:23:4b:51:90:ac:42:3b:
                    f5:fe:8a:0a:16:c1:30:eb:67:7c:b7:a1:b6:fb:75:
                    4a:d7:f1:36:b1:ec:2c:1f:d7:27:99:43:a9:7c:7f:
                    eb:41:3d:23:a7:10:5f:d6:95:be:94:d8:1f:a0:05:
                    38:32:43:2a:98:a1:36:7e:01:eb:0e:3b:0e:32:c4:
                    45:87:88:f4:64:b6:9a:d8:a5:23:2e:72:58:60:99:
                    3e:e5:ec:9a:43:ee:c7:ec:e9:c1:00:5e:e6:8f:11:
                    b8:52:9e:8e:b2:60:01:3a:36:fe:73:87:98:c4:6a:
                    72:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6C:E9:B3:18:38:B0:8B:F6:62:7B:93:FB:61:58:89:2F:A7:64:A3
            X509v3 Authority Key Identifier:
                keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3139302e302f32342d3234203d3e20313335363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.82.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:83:d6:e3:a8:7b:ad:d0:41:3d:9f:85:4d:5f:64:1f:4f:c2:
         20:5a:cf:ce:98:3f:bc:d8:20:ea:23:85:cd:90:5e:21:aa:b6:
         16:2a:d3:1e:7c:63:2e:9a:f5:fd:29:d2:e6:1c:36:0a:fc:7b:
         7f:92:5e:54:65:6e:1e:39:d8:58:b7:b9:97:2c:70:15:b0:d7:
         57:a0:2f:79:bd:04:47:72:ad:d2:6e:30:1f:1a:e0:85:f3:2e:
         85:85:9f:19:b3:1b:4c:dc:22:65:4f:c6:1f:1f:c4:b8:1d:f4:
         75:bc:0a:7d:57:10:e5:ca:fc:f0:f9:a2:25:df:0b:54:81:52:
         35:f3:ca:18:b2:13:d0:60:d5:e4:52:98:9b:a0:53:f4:6e:c7:
         94:5a:ab:66:67:68:5e:48:2c:94:62:67:dd:ea:1d:7f:d4:43:
         f1:99:7e:99:28:8a:82:62:e0:88:11:ef:2f:90:92:42:fc:a1:
         73:37:e6:1f:64:12:70:11:29:de:97:d5:e3:06:86:4a:70:03:
         70:cf:52:89:25:ac:18:2a:6a:75:43:35:fa:26:bd:57:b5:ea:
         94:e3:be:33:2f:03:f4:a8:a5:0c:b2:ed:8f:82:94:d4:38:72:
         f2:29:fd:18:10:7c:89:d3:fd:24:68:17:bb:1d:09:37:59:c9:
         ce:8c:ba:8d
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUJhhwmJBV5NDtcX9VSXJohqLfvQ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0
NkE3REY2RDAeFw0yNjA4MTIwNzQxNTJaFw0yNzA4MTEwNzQ2NTJaMDMxMTAvBgNV
BAMTKDFCNkNFOUIzMTgzOEIwOEJGNjYyN0I5M0ZCNjE1ODg5MkZBNzY0QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXzFLsvTVFxFrsbPKmTI+x0OnX
FKGca/uAoD+1ew24lInlBFTGlY/n60QjdInDxDrygm1g5FBWvMgggBGsqSbrKY89
amSDUlBHU/U4bbTsKpXKk9FWKhBvt8VivP+uPEcoyEHdb3HzcHxEjuDSmVy2a98x
KCNJXmnmyMVs3LiLQ0IPbWvY6zg/W8U3xpXBI0tRkKxCO/X+igoWwTDrZ3y3obb7
dUrX8Tax7Cwf1yeZQ6l8f+tBPSOnEF/Wlb6U2B+gBTgyQyqYoTZ+AesOOw4yxEWH
iPRktprYpSMuclhgmT7l7JpD7sfs6cEAXuaPEbhSno6yYAE6Nv5zh5jEanK3AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUG2zpsxg4sIv2YnuT+2FYiS+nZKMwHwYDVR0j
BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy
NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDk4MjQwMy8xLzM1MzIyZTM4MzIy
ZTMxMzkzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNTM2MzIzOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEADRSvjANBgkqhkiG9w0BAQsFAAOCAQEApoPW46h7rdBBPZ+FTV9kH0/C
IFrPzpg/vNgg6iOFzZBeIaq2FirTHnxjLpr1/SnS5hw2Cvx7f5JeVGVuHjnYWLe5
lyxwFbDXV6Aveb0ER3Kt0m4wHxrghfMuhYWfGbMbTNwiZU/GHx/EuB30dbwKfVcQ
5cr88PmiJd8LVIFSNfPKGLIT0GDV5FKYm6BT9G7HlFqrZmdoXkgslGJn3eodf9RD
8Zl+mSiKgmLgiBHvL5CSQvyhczfmH2QScBEp3pfV4waGSnADcM9SiSWsGCpqdUM1
+ia9V7XqlOO+My8D9KilDLLtj4KU1Dhy8in9GBB8idP9JGgXux0JN1nJzoy6jQ==
-----END CERTIFICATE-----
Generated at Sat Aug 29 07:12:21 2026 by rpki-client