Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3134302e302f32342d3234203d3e203435303739.roa
File:                     3130312e35322e3134302e302f32342d3234203d3e203435303739.roa (raw, json)
Hash identifier:          BU8QWSBfDHMofT4X8oaUoQ0Fbps1teMlCwBq+TnOxn4=
Subject key identifier:   26:85:31:A4:40:8E:74:0D:BD:F9:CD:A9:45:61:6C:F0:31:50:E0:53
Certificate issuer:       /CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
Certificate serial:       67EE98032F0F2E76F20C572FF15F2A095B77593E
Authority key identifier: 68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3134302e302f32342d3234203d3e203435303739.roa
Signing time:             Thu 14 May 2026 08:44:29 +0000
ROA not before:           Thu 14 May 2026 08:39:29 +0000
ROA not after:            Thu 13 May 2027 08:44:29 +0000
asID:                     45079
IP address blocks:        101.52.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ee:98:03:2f:0f:2e:76:f2:0c:57:2f:f1:5f:2a:09:5b:77:59:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
        Validity
            Not Before: May 14 08:39:29 2026 GMT
            Not After : May 13 08:44:29 2027 GMT
        Subject: CN=268531A4408E740DBDF9CDA945616CF03150E053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a5:fc:3a:6e:6f:ea:fb:84:28:fa:bb:40:0c:
                    c1:7c:ff:92:ae:7e:b6:02:d2:28:77:6d:c3:92:8a:
                    73:e8:94:7a:63:74:1f:4b:36:f0:5e:12:a7:c7:35:
                    46:49:a9:8c:c1:5d:bb:6b:a3:b7:77:4a:61:2f:ee:
                    ef:eb:8b:7e:d3:4d:6e:eb:1a:22:9e:52:0e:e4:07:
                    9c:f5:a3:87:1d:49:cd:2b:40:18:98:3a:4e:be:c9:
                    8a:62:c8:14:ea:6f:e0:f0:cc:b2:c2:0b:ee:38:39:
                    d9:70:ce:7c:54:06:28:ed:fd:21:dc:94:f9:c6:33:
                    b0:95:1b:fb:e1:fe:81:94:68:69:5b:e1:88:71:25:
                    97:37:88:0a:57:e7:99:02:99:3f:88:34:29:08:57:
                    13:d1:4a:99:e3:44:ef:7d:ca:8f:a3:e9:4a:2d:09:
                    11:b0:7f:80:58:cf:2f:2c:d9:d4:eb:09:08:92:93:
                    5e:4d:3f:0c:60:5e:60:02:3f:88:7e:b1:d2:1a:56:
                    e1:c8:be:52:13:0c:a4:28:b0:31:e5:3b:84:bd:d0:
                    e2:8b:b2:11:ca:f5:79:8b:17:f2:41:fa:99:07:cd:
                    bf:0f:f4:64:b4:39:bc:1f:ad:2e:d9:20:e3:94:41:
                    76:83:63:59:04:a0:e9:a2:5b:0f:0e:60:9c:88:02:
                    67:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:85:31:A4:40:8E:74:0D:BD:F9:CD:A9:45:61:6C:F0:31:50:E0:53
            X509v3 Authority Key Identifier:
                keyid:68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3134302e302f32342d3234203d3e203435303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.52.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:c9:88:93:d4:96:02:5e:32:dc:ec:6b:93:c0:5e:91:0b:2c:
         f3:b8:75:61:0b:20:0c:1e:d6:89:27:97:d6:b8:e9:7f:aa:f9:
         43:4d:30:eb:eb:b7:52:c1:d2:83:0e:ff:c3:bf:17:fc:58:9c:
         94:c8:f2:3e:22:b3:de:7d:97:de:61:7c:95:b9:75:d2:c9:4c:
         87:56:e0:0d:f0:4c:c9:f0:8c:66:74:38:6e:0d:f2:77:6e:d3:
         9e:03:a2:88:3f:95:32:45:36:0e:7a:17:c0:48:c2:45:2f:17:
         87:9b:6f:44:86:8e:c4:8f:6f:63:08:60:a0:9c:31:70:4b:77:
         13:a5:b2:c7:7a:c5:01:eb:24:4e:23:65:f9:0a:da:b0:2d:8f:
         c0:cc:07:1d:ee:1a:9e:8d:2c:90:39:2d:c7:8e:dc:10:09:a8:
         b5:2a:bd:4e:05:fc:1a:02:59:d0:60:08:6b:15:a4:41:06:e6:
         95:6e:5b:20:79:7a:7b:64:2d:1e:5c:62:b3:f1:dd:5b:ca:9a:
         75:f3:8a:ef:60:9e:d7:91:10:1b:38:2a:29:b8:f3:71:28:a5:
         7c:c2:49:4a:fd:9b:e2:05:3d:82:15:04:94:3c:d5:8a:be:d5:
         b8:55:1a:04:cb:58:90:74:0c:64:8c:96:b4:dc:64:72:55:62:
         33:b4:de:78
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:05 2026 by rpki-client