Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3231322e302f32322d3232203d3e2034383131.roa
File:                     3130312e35322e3231322e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier:          8FE4vyHMbI+MqMO08Dyd+r16921SV6K14zJUodc8GPc=
Subject key identifier:   CF:9D:22:B3:29:53:63:DC:1B:FB:8B:60:3A:AB:4A:CA:66:68:67:B1
Certificate issuer:       /CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
Certificate serial:       3938064F6131702AA0E825570D6B356E78D22252
Authority key identifier: 68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3231322e302f32322d3232203d3e2034383131.roa
Signing time:             Thu 14 May 2026 09:02:26 +0000
ROA not before:           Thu 14 May 2026 08:57:26 +0000
ROA not after:            Thu 13 May 2027 09:02:26 +0000
asID:                     4811
IP address blocks:        101.52.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:38:06:4f:61:31:70:2a:a0:e8:25:57:0d:6b:35:6e:78:d2:22:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
        Validity
            Not Before: May 14 08:57:26 2026 GMT
            Not After : May 13 09:02:26 2027 GMT
        Subject: CN=CF9D22B3295363DC1BFB8B603AAB4ACA666867B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:60:ff:cc:61:46:ea:19:b6:46:1d:8e:8d:ab:
                    f5:b7:73:b7:f3:48:98:02:34:4a:c8:13:48:1e:fe:
                    1e:ff:82:df:62:4b:6f:a8:7b:53:8f:0c:c5:b4:ef:
                    a8:aa:ac:08:a4:cb:e6:c7:62:42:da:89:b7:af:b8:
                    4c:c2:b0:17:e8:67:75:92:62:df:b8:4f:a2:62:c7:
                    2b:ab:73:e4:9f:00:8b:ef:19:52:8a:e1:bd:1d:3f:
                    27:37:cd:29:97:68:1d:89:47:69:74:b6:6e:fb:49:
                    46:09:e7:f2:f4:c2:72:e0:14:e9:5f:29:97:d1:cd:
                    ca:a5:21:6c:1a:ef:29:b2:0b:02:a4:90:b2:d0:37:
                    44:d5:3b:c1:44:3a:1a:79:d3:1f:ec:7c:a6:16:7e:
                    25:f7:90:60:5b:17:89:39:45:92:d6:c5:fa:52:c8:
                    14:e7:a1:d1:c0:a3:ac:08:d1:b9:bb:ca:58:8c:2f:
                    ca:58:4a:df:2e:5f:27:d8:17:bf:83:57:6d:78:77:
                    fa:7a:ef:65:e8:60:fd:0f:40:74:4a:04:52:2b:83:
                    7a:1b:b8:2b:7e:d9:d7:17:5c:70:1d:97:80:de:52:
                    e8:6c:04:5d:6e:11:86:3e:3f:cb:29:58:60:a5:5c:
                    ef:14:d8:23:64:44:ec:a9:c9:35:8e:46:16:82:53:
                    60:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9D:22:B3:29:53:63:DC:1B:FB:8B:60:3A:AB:4A:CA:66:68:67:B1
            X509v3 Authority Key Identifier:
                keyid:68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3231322e302f32322d3232203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.52.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:05:3e:4d:c9:63:1c:de:d4:79:1e:04:83:55:92:ca:5d:09:
         41:cb:3a:51:2f:17:3f:af:9f:f4:a7:4b:b8:05:52:d1:9f:af:
         db:a4:bf:79:e7:76:e2:30:e3:a5:a8:79:44:e5:61:be:40:95:
         b5:70:8d:52:a1:77:5b:f7:a4:a0:27:93:dc:76:f7:11:3d:29:
         90:1e:ec:10:e0:35:4b:8c:32:58:74:4b:fa:ef:7b:4e:49:75:
         e2:fd:ba:08:ed:ae:3c:de:46:e5:28:ae:9c:90:7b:c8:92:7c:
         e6:7f:d0:ce:48:e6:d2:f9:66:29:75:a4:e5:fb:be:3e:8b:24:
         d1:10:8e:24:de:10:c1:83:5e:95:7c:5d:a7:80:16:d2:89:1a:
         9f:f1:e7:f1:b2:d5:e0:a2:0e:ba:70:e2:7b:a6:d4:7b:3e:71:
         23:18:9f:eb:2a:4f:a8:37:90:da:2c:06:8b:7b:9f:2f:0c:8b:
         8f:0b:01:79:8c:30:94:8f:83:fa:32:e8:0e:16:6f:ba:92:b0:
         90:39:ee:20:75:41:37:da:35:7c:d3:c5:f4:18:e6:3f:33:e5:
         ff:40:84:1a:77:4b:fc:d0:0d:93:0e:19:9e:d6:8f:ca:04:a9:
         1c:de:f7:97:ef:bd:b3:2e:11:c4:6b:c7:be:33:a1:9b:72:f2:
         be:b0:19:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:53:14 2026 by rpki-client