Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3231362e302f32322d3232203d3e203137363231.roa
File:                     3130312e35322e3231362e302f32322d3232203d3e203137363231.roa (raw, json)
Hash identifier:          AIfWaLMuPw43NjKgjvicUM/17wesC2WWp5B1p4OhkQQ=
Subject key identifier:   9E:51:5B:E9:46:43:D9:CB:B0:05:58:47:D9:EE:54:49:BE:C5:8C:C3
Certificate issuer:       /CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
Certificate serial:       7B7FFD18A76D860575DE797B97371A8A27EFD50A
Authority key identifier: 68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3231362e302f32322d3232203d3e203137363231.roa
Signing time:             Thu 14 May 2026 09:12:38 +0000
ROA not before:           Thu 14 May 2026 09:07:38 +0000
ROA not after:            Thu 13 May 2027 09:12:38 +0000
asID:                     17621
IP address blocks:        101.52.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:7f:fd:18:a7:6d:86:05:75:de:79:7b:97:37:1a:8a:27:ef:d5:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
        Validity
            Not Before: May 14 09:07:38 2026 GMT
            Not After : May 13 09:12:38 2027 GMT
        Subject: CN=9E515BE94643D9CBB0055847D9EE5449BEC58CC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e7:8b:8c:39:ce:50:96:43:dd:35:4c:b0:4a:
                    bc:14:32:1e:ff:e7:9d:b5:ac:17:6b:0d:dd:2b:59:
                    73:ae:c7:03:e3:2d:42:f2:cd:73:00:7b:44:8f:e3:
                    24:8d:aa:ab:b8:83:70:13:71:bb:6f:a7:97:9f:4b:
                    7f:56:cd:79:3f:18:6e:7e:da:1a:3d:89:60:18:8c:
                    25:a7:77:48:55:82:c3:be:c3:00:f5:3f:6c:ec:76:
                    f1:42:3e:b0:ab:a6:20:da:d8:f5:21:20:27:aa:a9:
                    23:2f:db:47:69:64:3a:c1:fd:0f:13:6f:f7:7a:dd:
                    28:38:47:9d:47:ad:49:10:ed:30:ef:0e:56:2f:8a:
                    37:92:4f:8f:a6:ae:2a:cc:fd:07:80:f4:85:ed:3b:
                    60:88:ee:af:a0:1f:b5:89:71:34:e4:16:ac:8f:3c:
                    13:bc:7e:ac:83:b5:03:07:38:ce:48:9c:d6:d5:83:
                    67:2a:97:7f:be:ad:2d:2c:af:62:e7:94:7b:09:54:
                    5a:ad:d2:b2:5c:b5:b2:a6:9b:32:d0:0d:11:e6:23:
                    36:db:ed:19:6b:b0:fd:9d:b8:a6:c1:63:b1:0a:13:
                    c5:76:a4:84:63:92:21:83:97:9a:b6:bb:8e:97:1f:
                    fa:10:b1:ef:e6:d4:bb:0d:89:34:74:83:f7:a8:ae:
                    1a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:51:5B:E9:46:43:D9:CB:B0:05:58:47:D9:EE:54:49:BE:C5:8C:C3
            X509v3 Authority Key Identifier:
                keyid:68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3231362e302f32322d3232203d3e203137363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.52.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:cb:26:68:5c:1c:eb:cc:45:fc:8b:83:d0:3d:26:79:d0:31:
         e7:e4:53:b7:59:ff:59:a1:a9:7c:5c:eb:ea:02:4a:12:48:26:
         91:89:1b:e9:e6:26:85:36:ba:5d:f3:72:99:f7:49:58:de:07:
         57:ba:bc:cb:bf:58:cf:58:22:23:3f:80:cb:33:be:1b:f9:d1:
         94:2e:c1:71:05:b6:5f:b6:91:cf:a3:93:c7:e0:24:03:c9:19:
         14:d1:1e:4f:f8:e8:aa:ea:4a:f9:dc:04:43:60:b2:33:b3:92:
         15:11:29:58:3a:6a:52:75:bf:20:aa:71:b6:2e:86:4a:0f:68:
         66:5c:30:4a:59:f4:7f:1a:8a:0b:f6:0e:76:3e:20:df:8a:d3:
         f2:1d:8a:f8:8d:b1:97:2e:c9:f1:8e:15:4e:4b:bb:15:12:77:
         d9:86:63:df:08:15:c5:f5:4f:6f:f7:8c:34:ff:7b:fd:89:ee:
         5f:03:43:ed:10:36:52:a6:5e:1e:64:fc:09:a0:ff:58:b6:23:
         c1:19:9e:0a:d8:62:72:33:cd:90:19:44:03:64:85:d0:69:d9:
         e5:8e:77:de:c7:b9:89:52:2b:42:78:88:71:34:04:9b:0c:e0:
         96:e5:cc:eb:78:72:ce:09:4a:f0:7a:68:1e:62:91:16:ed:06:
         f7:a0:20:fd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:53:31 2026 by rpki-client