Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3133362e302f32322d3232203d3e203435303739.roa
File:                     3130312e35322e3133362e302f32322d3232203d3e203435303739.roa (raw, json)
Hash identifier:          6akLwQFOMXgHf7uN2n2G0RfKsVv32wZmu4KT8DcRlpA=
Subject key identifier:   4E:07:90:AD:52:DE:CD:79:43:81:42:AE:A1:2D:31:E7:2E:1F:75:AC
Certificate issuer:       /CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
Certificate serial:       4176F250B78AD07BF284B057FCE6B5E8A0886132
Authority key identifier: 68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3133362e302f32322d3232203d3e203435303739.roa
Signing time:             Thu 14 May 2026 08:45:12 +0000
ROA not before:           Thu 14 May 2026 08:40:12 +0000
ROA not after:            Thu 13 May 2027 08:45:12 +0000
asID:                     45079
IP address blocks:        101.52.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:76:f2:50:b7:8a:d0:7b:f2:84:b0:57:fc:e6:b5:e8:a0:88:61:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
        Validity
            Not Before: May 14 08:40:12 2026 GMT
            Not After : May 13 08:45:12 2027 GMT
        Subject: CN=4E0790AD52DECD79438142AEA12D31E72E1F75AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d1:f5:5c:55:5a:d7:a6:25:f4:4a:a5:cd:fe:
                    d5:5a:31:03:b6:9d:fb:63:45:97:68:22:a6:27:7f:
                    e5:f2:b6:e6:85:fb:b2:ab:c7:ac:d6:40:dd:ef:e3:
                    aa:ec:4f:13:13:3b:af:ba:f5:2e:76:31:27:36:6a:
                    81:a6:d5:79:52:ed:b9:c6:4a:3b:07:d8:a6:5c:30:
                    46:f4:40:c7:f1:82:c5:3b:c0:06:ea:ab:36:b0:a8:
                    82:26:98:66:d0:c6:f5:f7:2c:ef:61:bd:a9:de:5b:
                    3d:76:28:7a:d8:95:25:37:7f:9e:30:9f:42:2b:78:
                    38:50:ea:51:69:57:95:6d:c6:b8:98:94:16:87:10:
                    93:d2:67:4c:ca:f6:56:5f:c7:bd:fb:94:fc:6e:56:
                    28:ad:59:9c:70:c5:78:45:2c:97:9b:f0:e2:6e:a7:
                    4d:02:e7:55:1b:b1:d4:91:9a:e5:65:59:0f:dd:cd:
                    10:75:8e:b0:00:2f:76:33:4e:1b:00:46:f3:17:02:
                    a0:5f:7e:87:3a:8c:8b:ad:4a:9e:25:e4:2f:bd:87:
                    5f:71:ef:87:d0:0a:47:36:31:d0:98:7e:03:9c:d5:
                    62:96:54:0e:2e:22:29:47:d5:54:99:fc:c9:e7:37:
                    aa:da:67:d7:5b:7a:f9:ee:54:69:21:f5:2b:e1:fe:
                    30:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:07:90:AD:52:DE:CD:79:43:81:42:AE:A1:2D:31:E7:2E:1F:75:AC
            X509v3 Authority Key Identifier:
                keyid:68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3133362e302f32322d3232203d3e203435303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.52.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:99:41:a1:ee:87:b2:50:5c:5b:a4:13:b6:f3:57:c5:1e:44:
         8f:aa:83:d7:6a:34:e5:f4:ce:e2:1d:cb:fa:da:9e:95:13:50:
         30:9b:4a:34:22:f3:cb:3f:9b:63:44:07:1d:d0:6c:51:c1:3f:
         e9:ff:48:7f:60:5b:df:4c:ca:d9:41:2f:e1:34:03:6b:1e:db:
         fc:d6:1f:0d:96:7a:ac:d8:39:40:44:85:2f:a2:fa:2c:7c:d2:
         c9:6d:77:34:67:dc:68:84:6a:a1:ee:52:29:4d:ec:f9:5f:31:
         2e:12:6d:2e:d5:35:ef:cc:ae:d0:3b:a5:1c:32:42:7f:c9:8a:
         38:66:e0:c4:f7:5e:7b:75:0e:dc:d1:d7:68:c1:22:66:94:57:
         9f:27:82:5c:1a:56:4d:84:6c:84:99:06:64:24:79:30:0a:40:
         7f:96:1e:8d:0f:05:a0:96:38:4f:59:ec:1f:5d:54:9b:2f:05:
         14:90:30:d8:3b:3a:49:e9:af:46:89:b3:f2:63:4e:f7:4b:31:
         4e:b8:f7:0b:64:ac:96:49:df:9c:06:83:cd:3f:1c:90:25:15:
         c0:a1:49:85:86:10:21:6e:01:67:57:a7:e3:b3:5d:82:3c:e4:
         f9:f0:5e:4b:72:1f:e9:1a:37:fe:6b:59:a4:fc:a6:93:40:89:
         17:99:21:f6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:27 2026 by rpki-client