Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3134302e302f32322d3232203d3e203435303739.roa
File:                     3130312e35322e3134302e302f32322d3232203d3e203435303739.roa (raw, json)
Hash identifier:          0U0VfFK77M2BJBnCCW/5eFwBCxv1HHnFA89ssBrINIs=
Subject key identifier:   28:96:53:38:BF:30:1B:88:BB:36:86:5A:CF:20:83:E4:8E:77:4F:54
Certificate issuer:       /CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
Certificate serial:       530FBC2B1C9C1703377F5EA058E13DD146DA1F51
Authority key identifier: 68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3134302e302f32322d3232203d3e203435303739.roa
Signing time:             Thu 14 May 2026 08:45:11 +0000
ROA not before:           Thu 14 May 2026 08:40:11 +0000
ROA not after:            Thu 13 May 2027 08:45:11 +0000
asID:                     45079
IP address blocks:        101.52.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:0f:bc:2b:1c:9c:17:03:37:7f:5e:a0:58:e1:3d:d1:46:da:1f:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
        Validity
            Not Before: May 14 08:40:11 2026 GMT
            Not After : May 13 08:45:11 2027 GMT
        Subject: CN=28965338BF301B88BB36865ACF2083E48E774F54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6b:81:06:4d:59:bc:ad:19:7e:b4:cc:49:39:
                    99:66:f4:be:be:e9:34:21:8d:a3:96:6d:01:ff:86:
                    73:0a:64:0b:cf:81:7e:2a:ab:11:d5:ed:60:2b:b1:
                    31:bc:b3:cd:22:ed:22:0b:62:81:c6:e1:90:64:56:
                    d1:88:ee:44:c0:66:aa:84:40:f0:c1:4d:96:2e:34:
                    5f:99:0e:90:94:25:52:42:c4:32:9a:86:50:6f:b7:
                    be:a3:d9:62:b1:36:be:e3:ef:97:b3:d9:c5:14:2f:
                    ad:a1:7d:29:b7:7a:f7:05:2b:c5:fd:e4:a0:d7:0b:
                    3a:61:26:10:37:dd:2d:38:e1:71:4f:35:e6:f9:45:
                    b4:86:0b:38:35:5b:3c:12:e2:5d:eb:ec:5b:39:93:
                    95:40:b5:a8:41:cf:89:a9:78:3e:1e:98:ae:89:f7:
                    c3:44:bf:7b:ac:05:df:f8:d7:1f:bd:47:c3:09:24:
                    b9:62:ba:33:33:6a:f1:fb:c5:3d:78:0f:f8:4e:a8:
                    c8:df:fb:d1:89:8b:db:08:9a:54:2c:c1:15:1d:c7:
                    f9:fd:cb:70:60:d8:d4:f5:d4:fa:e9:e2:f3:5a:06:
                    04:cb:f8:99:fb:e2:56:dc:f3:82:1a:77:3c:16:00:
                    0e:7b:10:77:e5:11:8e:5f:25:d8:11:29:c4:86:67:
                    de:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:96:53:38:BF:30:1B:88:BB:36:86:5A:CF:20:83:E4:8E:77:4F:54
            X509v3 Authority Key Identifier:
                keyid:68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3134302e302f32322d3232203d3e203435303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.52.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:75:60:91:c7:41:d0:62:4c:56:79:3e:d4:89:70:06:e1:ae:
         54:69:1e:3e:a6:cd:d0:63:87:76:47:0c:2c:2d:72:a5:00:c4:
         31:82:2b:cd:2d:41:bf:a8:9e:41:f8:08:00:6f:c9:fc:b2:6e:
         c0:69:f0:23:4c:54:9a:d6:6a:e7:9a:6e:48:37:f2:ac:47:91:
         e6:ec:ab:9f:cf:0d:7e:ac:99:d9:75:cc:2b:a7:ca:a9:84:02:
         2d:4b:77:96:08:2e:3e:7a:d4:55:7d:ad:8e:b6:a6:7b:1c:8d:
         57:cf:8b:17:97:f4:e2:3b:ed:52:00:c6:55:16:3d:db:10:3f:
         c7:d3:e2:e7:e5:0e:2f:7e:f5:e6:85:56:02:56:5a:0c:1a:cc:
         c2:ff:c7:08:14:7e:59:54:d2:f6:44:c5:24:60:6f:d1:91:2e:
         b9:2a:32:13:ef:10:a6:0f:90:17:d3:c3:6c:8e:cc:c3:0f:8d:
         94:ea:ba:1e:37:46:e8:b1:c8:12:a7:d8:e3:92:1b:71:f2:33:
         78:40:ea:e1:6e:ed:b7:65:b9:28:7f:7d:48:23:0f:62:32:13:
         a2:1a:b7:97:9f:3b:7c:ab:d0:af:f6:73:45:80:b8:f7:6e:4c:
         ad:0a:78:31:af:07:c4:e4:47:ac:c9:fb:0a:1c:76:1d:58:28:
         3e:b7:df:c7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:20 2026 by rpki-client