Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3233362e302f32332d3233203d3e203137363232.roa
File:                     3130312e35322e3233362e302f32332d3233203d3e203137363232.roa (raw, json)
Hash identifier:          iWkk2w1nYB0X50QEsMCLy1c9lg6gvVacNzpuAeVlR3s=
Subject key identifier:   A2:CD:F3:80:AA:F9:78:D4:2A:0E:0D:BD:68:7F:C3:57:23:CF:19:7E
Certificate issuer:       /CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
Certificate serial:       18F2BF1B55FFDB9FDCBA883BC0FEF4E37803017B
Authority key identifier: 68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3233362e302f32332d3233203d3e203137363232.roa
Signing time:             Fri 15 May 2026 08:46:49 +0000
ROA not before:           Fri 15 May 2026 08:41:49 +0000
ROA not after:            Fri 14 May 2027 08:46:49 +0000
asID:                     17622
IP address blocks:        101.52.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f2:bf:1b:55:ff:db:9f:dc:ba:88:3b:c0:fe:f4:e3:78:03:01:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
        Validity
            Not Before: May 15 08:41:49 2026 GMT
            Not After : May 14 08:46:49 2027 GMT
        Subject: CN=A2CDF380AAF978D42A0E0DBD687FC35723CF197E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:09:dd:b9:ee:14:a9:b4:cc:e2:9d:20:f7:aa:
                    10:9e:39:09:08:d4:ca:4d:f4:33:ab:02:01:b3:ce:
                    35:27:77:38:56:33:91:02:ba:8b:ea:98:9c:ae:db:
                    34:a2:b2:ea:e2:8a:1c:07:55:66:0a:01:d3:72:58:
                    10:e7:38:33:e5:1b:f8:64:23:dc:00:8c:70:e2:e0:
                    10:21:54:2b:59:85:45:08:ef:72:84:93:fc:68:af:
                    df:f3:f3:6c:e0:16:df:66:c4:6f:36:32:b9:ef:af:
                    95:37:b0:b4:2e:5b:e2:ab:28:54:46:b4:e7:4f:73:
                    59:71:0a:32:0a:3b:ba:39:b5:a8:92:c8:f1:d2:af:
                    52:4b:bd:f7:5b:ad:3d:49:4b:af:f6:ee:8c:0e:e0:
                    ea:79:e8:34:39:7b:5f:b8:f8:64:10:b9:89:e6:8c:
                    0f:7b:86:0a:2e:20:1c:55:97:59:96:1d:f6:7d:1c:
                    cc:83:b3:33:9a:66:e2:61:19:79:b7:6d:43:39:0d:
                    71:f3:a8:08:c2:42:e5:63:38:51:eb:7e:db:b3:5d:
                    c0:e1:0c:75:67:20:a5:21:c7:a6:4a:31:40:75:13:
                    79:6b:1a:5c:a1:da:38:9c:62:fb:a1:90:52:29:18:
                    01:9c:9c:c2:bb:fc:14:39:d8:5b:19:3c:72:ac:aa:
                    57:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:CD:F3:80:AA:F9:78:D4:2A:0E:0D:BD:68:7F:C3:57:23:CF:19:7E
            X509v3 Authority Key Identifier:
                keyid:68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3233362e302f32332d3233203d3e203137363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.52.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:95:f8:f8:b6:e0:8f:69:d8:88:4b:92:66:8b:ae:d6:07:02:
         08:34:9b:3f:a4:1a:22:06:a3:c2:80:3e:3a:14:2f:cf:d6:c6:
         e0:2d:4e:10:c5:5b:0c:81:75:26:df:88:23:c4:db:40:04:01:
         29:7d:d2:e3:a4:1f:c4:9d:ad:a5:49:fb:67:96:b1:47:dd:05:
         df:fc:c9:86:5d:06:35:08:a0:a7:90:f5:89:07:b5:6c:d0:f9:
         eb:20:ef:e1:9d:d0:4d:b2:8b:c0:4f:66:4d:b7:f9:cf:2f:61:
         d8:f7:24:b9:ea:91:62:23:2c:c6:c6:8e:43:26:ed:bc:3d:3e:
         70:f4:b2:e9:0d:52:38:b4:02:9f:98:05:43:12:d9:af:cf:44:
         3c:57:d3:73:54:e8:22:d4:72:9f:f7:54:d3:dd:d8:8d:e5:39:
         f6:dd:e1:64:23:3e:d0:05:5f:ab:81:b8:3e:e9:0d:c6:1e:7c:
         8b:3d:f3:a1:bc:06:59:ba:1f:cd:eb:63:9c:53:a2:5c:6a:f9:
         58:51:3a:73:1c:bb:64:ce:41:fe:35:da:86:f5:85:1f:bd:a4:
         3e:ad:ad:af:5e:21:98:fb:eb:15:b7:74:fe:c6:da:e3:bc:a5:
         9a:de:3a:a7:a5:70:45:b5:04:f9:3a:20:c9:e3:cf:ac:f7:87:
         ed:78:ff:b8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:53:08 2026 by rpki-client