Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3230342e302f32322d3232203d3e203435303739.roa
File:                     3130312e35322e3230342e302f32322d3232203d3e203435303739.roa (raw, json)
Hash identifier:          f/mNAJr4Qm0q8aQDJGw8lr/14Jz4SxhDxn3/w0j28Mw=
Subject key identifier:   FD:36:82:01:E5:34:23:2E:8F:D8:83:30:7B:6B:1B:15:18:49:E3:5F
Certificate issuer:       /CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
Certificate serial:       1D7CFEDE8ADF7F9759FC047E2173DCF58644E295
Authority key identifier: 68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3230342e302f32322d3232203d3e203435303739.roa
Signing time:             Fri 15 May 2026 08:36:42 +0000
ROA not before:           Fri 15 May 2026 08:31:42 +0000
ROA not after:            Fri 14 May 2027 08:36:42 +0000
asID:                     45079
IP address blocks:        101.52.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:7c:fe:de:8a:df:7f:97:59:fc:04:7e:21:73:dc:f5:86:44:e2:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
        Validity
            Not Before: May 15 08:31:42 2026 GMT
            Not After : May 14 08:36:42 2027 GMT
        Subject: CN=FD368201E534232E8FD883307B6B1B151849E35F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:14:f5:df:b2:1d:fe:6f:76:6f:6f:e0:41:f4:
                    b8:94:8e:81:ba:49:5b:8c:1b:36:d5:a9:6a:37:bb:
                    2f:b6:04:ca:e9:23:c8:9f:09:7b:1a:4a:b6:85:62:
                    c5:fd:b2:3e:79:e9:84:ba:63:53:80:f5:88:81:44:
                    42:b7:f5:16:f4:91:46:ab:b3:59:b8:2a:04:8e:8b:
                    ef:7c:b1:96:ae:50:7b:95:bf:f5:41:42:8a:80:d0:
                    d1:93:68:72:6d:c0:bb:a4:c3:ca:9a:da:cd:9d:c1:
                    96:9b:1f:b3:50:57:94:17:04:d4:63:fc:14:b4:a1:
                    11:d6:05:f6:0d:72:94:f3:87:4a:3d:f1:ec:36:56:
                    70:94:21:37:f7:2a:ad:62:08:28:f4:d4:97:69:b5:
                    35:bd:84:2b:bd:30:d7:90:b2:83:ed:c0:98:87:09:
                    49:75:b3:fb:3e:06:a6:ed:5d:fb:62:3f:f1:ba:14:
                    d2:36:c3:6c:57:e4:5b:16:d4:f1:7c:b3:be:73:d3:
                    c5:8c:83:f8:86:ed:f4:5a:29:08:01:a1:07:ea:d3:
                    b4:8a:ba:27:5d:e6:8a:15:a1:ee:df:cf:cc:26:10:
                    e0:f6:17:a7:f2:ba:91:26:fd:ad:43:31:e0:d4:76:
                    d5:af:b6:f6:2a:e7:4c:aa:ee:54:d8:e9:8d:d4:cd:
                    e4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:36:82:01:E5:34:23:2E:8F:D8:83:30:7B:6B:1B:15:18:49:E3:5F
            X509v3 Authority Key Identifier:
                keyid:68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3230342e302f32322d3232203d3e203435303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.52.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:a0:eb:83:ab:4a:14:9c:b1:08:b8:be:8b:f1:06:f6:de:65:
         ae:a7:c7:bc:4b:24:76:1b:a1:00:66:8b:c7:91:4a:bb:fe:ea:
         44:b1:20:60:6a:bd:8f:3f:9d:83:2f:ca:b0:a8:6b:74:86:e8:
         ed:97:96:75:95:3d:9d:87:b6:66:e8:ac:bf:0e:c1:56:26:63:
         cc:66:05:1e:3f:aa:78:60:8c:04:4c:03:59:ed:a7:c4:51:57:
         53:9a:eb:5e:3a:7c:72:ec:98:46:6b:8c:14:96:a2:a1:2f:21:
         06:05:8c:65:da:13:55:27:83:1e:75:a8:a2:dd:5a:b5:28:1d:
         7b:b0:33:ac:df:99:4e:e1:49:a9:9b:45:0a:17:56:ce:6a:80:
         66:88:b6:6e:de:fc:6e:f1:58:ad:db:3b:83:f0:7f:77:56:5e:
         b4:15:e9:b2:bc:d3:38:45:92:d6:fc:1a:23:05:86:58:36:9b:
         61:53:25:6a:81:3b:48:89:aa:91:42:ec:22:24:8e:b3:7a:92:
         95:7b:aa:f7:56:42:b4:1b:1d:e6:9b:40:cb:db:2e:99:2f:f4:
         88:73:3e:05:f8:92:9e:44:1d:28:9e:5b:21:7e:f0:72:d5:f2:
         7e:1f:da:0e:90:87:f8:78:7a:19:15:22:3d:58:3c:f2:47:46:
         2d:03:cc:a7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:53:02 2026 by rpki-client