Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3233322e302f32342d3234203d3e2034383136.roa
File:                     3130312e35322e3233322e302f32342d3234203d3e2034383136.roa (raw, json)
Hash identifier:          hp6Pz9uKpxz9SVLcexfH0dsTCy+itTA+Cm3SnpkfdJc=
Subject key identifier:   7B:20:AC:7B:87:FB:FC:07:6D:A2:76:32:39:D2:2F:A0:72:D3:16:5F
Certificate issuer:       /CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
Certificate serial:       38176DE2594B41A4046CB077A846B5C11009F31A
Authority key identifier: 68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3233322e302f32342d3234203d3e2034383136.roa
Signing time:             Fri 15 May 2026 08:45:09 +0000
ROA not before:           Fri 15 May 2026 08:40:09 +0000
ROA not after:            Fri 14 May 2027 08:45:09 +0000
asID:                     4816
IP address blocks:        101.52.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:17:6d:e2:59:4b:41:a4:04:6c:b0:77:a8:46:b5:c1:10:09:f3:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
        Validity
            Not Before: May 15 08:40:09 2026 GMT
            Not After : May 14 08:45:09 2027 GMT
        Subject: CN=7B20AC7B87FBFC076DA2763239D22FA072D3165F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:81:ce:ea:f2:47:f6:5d:21:13:0c:f5:81:23:
                    a2:b4:c3:11:e9:2a:0f:c8:66:97:f9:15:63:29:74:
                    6a:0b:88:37:65:77:a7:19:51:fe:63:87:12:84:51:
                    02:41:58:b3:05:8b:85:1e:9b:c3:98:a1:77:75:f5:
                    52:99:5a:3c:60:dc:e2:ce:d6:34:a7:7e:bf:44:3a:
                    5d:70:05:8e:a0:4c:73:36:c0:b8:c3:d3:a9:9c:10:
                    9f:e8:69:b4:ec:9a:fa:cc:5c:58:98:ed:3a:23:17:
                    a1:47:94:e9:36:36:78:fa:e1:32:cf:88:8a:15:cb:
                    96:67:64:13:15:cf:7f:99:c7:e5:74:e1:12:98:d8:
                    81:ba:21:87:e6:c2:70:ac:b0:c3:f9:f1:b9:7f:74:
                    b8:23:82:3c:dc:0e:8b:c2:f7:f7:71:4e:af:0a:04:
                    bf:08:99:67:65:76:8d:4f:38:c8:f0:96:eb:b9:2f:
                    8f:c5:00:3b:bf:8a:ab:5a:b6:60:d9:11:1e:2f:3c:
                    9d:15:8f:b3:a2:78:7e:7d:6d:ac:69:94:61:52:81:
                    84:56:a3:5c:3b:5a:51:e0:97:86:9d:14:d7:32:de:
                    e8:ea:2d:1d:20:43:aa:df:2c:cf:68:5f:77:9b:96:
                    5a:aa:a1:d5:77:21:2f:4a:81:93:e1:e4:23:a7:54:
                    34:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:20:AC:7B:87:FB:FC:07:6D:A2:76:32:39:D2:2F:A0:72:D3:16:5F
            X509v3 Authority Key Identifier:
                keyid:68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3233322e302f32342d3234203d3e2034383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.52.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:86:16:94:72:8e:6c:3b:59:12:20:3c:22:81:df:cf:cb:4c:
         0b:a7:bb:d4:10:8d:53:c7:9f:f7:cc:d5:29:6e:1e:d9:f2:0e:
         f3:72:c3:51:fa:b4:f8:58:43:d1:7e:10:9c:bb:bd:28:d3:10:
         d6:44:94:c6:06:fe:db:84:8c:c4:a1:d8:ad:e8:f4:1f:d1:70:
         5a:66:d3:fe:18:58:38:37:a3:f3:77:c5:60:a3:c1:44:d6:27:
         c8:a0:be:53:7f:c7:3e:52:5a:f8:b3:94:1d:6d:55:78:d6:a9:
         53:4c:d2:61:ff:4e:20:3a:f8:b3:b9:b9:6d:c3:65:44:ca:69:
         9b:8b:b9:30:3a:98:3d:44:e9:c0:66:b6:f6:32:40:68:27:94:
         15:04:62:55:2e:87:ed:bd:97:1d:0b:03:e5:d9:e5:3e:e5:1e:
         2b:38:86:e1:df:77:dd:74:0d:56:a5:06:e8:e7:66:b7:eb:44:
         2e:11:4e:38:8b:00:e4:8f:fc:d0:0e:f5:43:83:a0:0d:d1:c2:
         b0:7e:29:63:72:9b:c7:77:64:68:9e:19:47:e0:60:ee:ed:aa:
         9b:88:2a:6d:4f:4d:02:1b:8a:95:66:ac:75:c0:42:54:52:f8:
         a3:5d:cd:61:b4:87:91:fe:88:7f:75:40:87:51:64:ea:96:e0:
         77:ae:32:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:57:28 2026 by rpki-client