Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3133352e302f32342d3234203d3e203435303739.roa
File:                     3130312e35322e3133352e302f32342d3234203d3e203435303739.roa (raw, json)
Hash identifier:          Ch/lgLvNNQGq8bQhhImGrXeyRezFV+z+Fvj3o3XXWQ0=
Subject key identifier:   B3:28:98:19:92:18:95:E2:46:AC:04:BF:F5:A2:05:B8:E5:0E:4E:BA
Certificate issuer:       /CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
Certificate serial:       61AB996E72A84DC2AE17F02A2895233BE29B1FD1
Authority key identifier: 68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3133352e302f32342d3234203d3e203435303739.roa
Signing time:             Thu 14 May 2026 08:44:29 +0000
ROA not before:           Thu 14 May 2026 08:39:29 +0000
ROA not after:            Thu 13 May 2027 08:44:29 +0000
asID:                     45079
IP address blocks:        101.52.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ab:99:6e:72:a8:4d:c2:ae:17:f0:2a:28:95:23:3b:e2:9b:1f:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
        Validity
            Not Before: May 14 08:39:29 2026 GMT
            Not After : May 13 08:44:29 2027 GMT
        Subject: CN=B3289819921895E246AC04BFF5A205B8E50E4EBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:41:e8:89:c6:76:1b:ef:47:42:eb:e4:32:4b:
                    a5:09:e4:26:e1:b2:ab:b5:f1:80:39:65:83:d1:53:
                    48:ce:86:6e:18:67:ad:66:4c:3c:1b:38:6b:27:8b:
                    16:a3:3a:fa:62:6d:77:d1:a0:14:11:06:67:15:da:
                    ed:fc:e7:68:6a:1d:05:43:96:51:4a:19:80:f1:85:
                    b2:4f:80:fd:0e:94:f4:5d:77:2c:03:61:c2:6c:45:
                    34:40:b7:4a:bc:8c:c0:83:58:38:81:06:66:35:4d:
                    64:f3:2a:17:ff:cb:66:ef:5b:75:dc:78:65:61:ce:
                    a4:3b:b7:61:70:b1:94:67:86:3c:0a:0f:63:3c:43:
                    b0:a8:77:c4:15:cf:5f:63:18:17:ba:7b:4b:aa:ab:
                    15:0c:f8:39:82:6d:f8:fd:aa:be:c0:ed:67:e7:32:
                    c8:84:38:62:97:09:3c:ac:c5:ae:1e:68:91:75:f9:
                    7b:c6:c8:42:dc:c1:59:c1:cc:2c:aa:d3:94:7b:97:
                    24:bc:f3:7f:ad:81:55:cf:d9:28:44:4e:1a:4d:7e:
                    61:f1:55:38:06:10:8b:39:0f:5d:cc:75:37:d2:b5:
                    d1:f7:ef:7b:a6:29:9e:7b:90:6c:21:3f:c9:c5:b8:
                    38:9b:0a:9e:2d:a4:ec:62:43:65:ec:f5:4f:51:f1:
                    f1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:28:98:19:92:18:95:E2:46:AC:04:BF:F5:A2:05:B8:E5:0E:4E:BA
            X509v3 Authority Key Identifier:
                keyid:68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3133352e302f32342d3234203d3e203435303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.52.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:28:5c:df:ee:e4:60:90:cf:5f:26:63:45:d7:36:f7:7d:ed:
         11:ba:81:61:ba:e8:88:f8:6f:09:d8:82:ed:72:d2:1b:88:5e:
         39:dc:f7:b2:bb:2a:71:e4:94:48:f1:42:fc:5b:38:c5:73:f2:
         42:43:f6:ba:18:d9:58:98:1e:2e:90:ff:46:dd:75:c1:b7:e6:
         5c:e7:f4:07:85:c9:af:f7:bb:27:f1:30:ac:65:7a:65:02:1f:
         4e:1b:db:23:d7:b2:5a:30:f0:b4:3a:f5:28:40:17:a2:15:65:
         68:a7:f3:7a:0e:16:81:5b:df:b4:72:17:a8:f8:10:55:a8:03:
         d9:ff:50:b5:ab:f2:00:3e:4e:08:00:e2:91:40:d2:67:88:00:
         3d:10:5e:d5:99:a4:c2:2e:67:e3:34:73:22:4d:b6:8b:35:43:
         53:5b:55:55:66:7a:08:58:cf:c6:e1:70:5d:0c:86:01:08:9d:
         5c:78:67:2b:fa:e9:57:97:cd:57:61:7f:34:71:00:f3:d9:c2:
         20:73:7e:50:28:23:b0:90:c6:a1:6d:78:f3:65:fd:07:36:63:
         8d:6c:9e:1e:b9:2c:50:06:36:1e:ed:06:6f:ea:64:d3:6c:45:
         e7:40:08:01:03:ee:05:12:dc:18:8a:fe:43:d2:55:d4:03:9e:
         bc:53:e6:c6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:18 2026 by rpki-client