Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3131362e302f32322d3232203d3e203435303739.roa
File:                     3130312e35322e3131362e302f32322d3232203d3e203435303739.roa (raw, json)
Hash identifier:          QFZbIbhzNruGcELBkrybzmSCsUH1uaygTB0og3sGbVI=
Subject key identifier:   49:37:BD:62:D2:D8:B6:FA:BC:37:5F:46:D2:41:30:D0:89:89:52:57
Certificate issuer:       /CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
Certificate serial:       403CEFA71A979F3F8C613BEE3CC7341333AF3309
Authority key identifier: 68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3131362e302f32322d3232203d3e203435303739.roa
Signing time:             Thu 14 May 2026 08:45:11 +0000
ROA not before:           Thu 14 May 2026 08:40:11 +0000
ROA not after:            Thu 13 May 2027 08:45:11 +0000
asID:                     45079
IP address blocks:        101.52.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:3c:ef:a7:1a:97:9f:3f:8c:61:3b:ee:3c:c7:34:13:33:af:33:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
        Validity
            Not Before: May 14 08:40:11 2026 GMT
            Not After : May 13 08:45:11 2027 GMT
        Subject: CN=4937BD62D2D8B6FABC375F46D24130D089895257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:66:5d:fd:45:b6:da:6e:05:88:28:c7:8f:95:
                    d4:62:9c:42:f1:e8:be:f1:70:04:90:2b:7a:2e:17:
                    8b:1c:01:ce:a1:b4:0e:3a:90:1e:90:f1:cb:45:c2:
                    6e:3b:1b:04:76:5e:37:d4:0a:76:ea:b9:67:0a:b2:
                    6d:16:b5:29:1c:42:dd:0d:a5:6c:c2:37:50:dc:18:
                    2c:b9:00:e7:cc:70:ff:19:4b:80:11:26:fc:98:54:
                    2b:6c:72:e5:eb:e7:c3:1f:a4:93:bb:e5:72:23:42:
                    33:9a:63:b6:76:8d:79:01:1f:8f:06:ab:16:37:47:
                    96:e9:fe:a1:1d:b4:cf:0e:83:2c:68:0d:13:00:91:
                    6b:02:69:64:96:b2:f8:56:47:6c:45:84:cb:74:42:
                    23:7b:38:70:26:82:7a:1d:dc:4b:a0:28:db:c8:df:
                    84:91:72:97:ff:3b:95:ff:55:35:1b:b7:26:a7:89:
                    bf:3d:45:32:e3:26:09:f6:25:bd:ed:4c:95:62:f5:
                    64:8b:c6:c9:9e:10:c3:76:ce:4e:4c:5b:d4:f5:dd:
                    a1:97:dd:e9:e6:8e:66:3f:5e:ca:a5:8b:12:77:4d:
                    a7:a8:87:a1:5d:9c:d6:70:71:46:f5:25:7c:ac:52:
                    ab:93:43:77:37:3d:f9:2b:1c:1c:fc:2b:ab:8f:36:
                    0d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:37:BD:62:D2:D8:B6:FA:BC:37:5F:46:D2:41:30:D0:89:89:52:57
            X509v3 Authority Key Identifier:
                keyid:68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3131362e302f32322d3232203d3e203435303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.52.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:2f:52:97:cb:f7:92:6a:28:c3:3b:69:6c:64:b1:7d:67:57:
         a0:2b:91:fa:81:fd:e8:0b:eb:c1:ae:2d:37:13:8f:ad:0e:c0:
         e4:a6:0c:5f:70:b2:bc:8e:e3:60:74:08:0d:cf:f3:15:dc:e7:
         e2:ba:ca:3d:29:bb:a7:38:96:05:f5:fb:05:2b:f2:8e:6b:48:
         e5:6a:7e:0a:2f:50:2a:1e:8b:86:2d:e3:7a:88:cc:84:6e:c2:
         95:eb:89:ae:f5:9f:cd:1a:a1:eb:45:bc:88:c6:e0:42:12:66:
         ea:9a:d7:56:fc:78:72:f9:8f:fd:5d:71:75:1f:b1:d3:98:82:
         6f:e3:78:f2:5a:e5:7e:50:a3:cc:93:e4:5a:0d:5d:9b:3d:39:
         54:fd:c4:80:91:56:8f:fb:00:2f:ac:bb:3e:b2:3d:15:3e:7a:
         03:08:64:ee:aa:3e:ea:19:bb:3c:6c:8f:93:15:14:f3:37:69:
         00:d2:b6:c7:39:b9:c2:58:22:f0:e7:5a:47:c2:9b:a7:11:51:
         5d:af:16:7d:cb:06:dd:09:9e:2d:8a:1c:8d:f8:76:ce:e4:26:
         8e:76:f2:13:61:cb:09:6a:38:a6:ef:fe:b4:9b:cb:a8:00:78:
         0f:d1:0a:eb:3b:ac:6c:f0:ca:80:20:1c:f7:0d:e5:91:73:32:
         24:30:9b:e1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:19 2026 by rpki-client