Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3233362e302f32332d3233203d3e203435303739.roa
File:                     3130312e35322e3233362e302f32332d3233203d3e203435303739.roa (raw, json)
Hash identifier:          3gS6MttpmcQjYDbjTUlSY5+KU7ZkZysJZf7FaHcoyaM=
Subject key identifier:   B1:4C:B2:C6:EC:1A:FA:D4:E2:DB:23:B0:C3:B5:4F:B0:99:0B:27:66
Certificate issuer:       /CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
Certificate serial:       4E04FDC75E63FDCD5EB9E2744D6F419C7EC01367
Authority key identifier: 68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3233362e302f32332d3233203d3e203435303739.roa
Signing time:             Fri 15 May 2026 08:46:49 +0000
ROA not before:           Fri 15 May 2026 08:41:49 +0000
ROA not after:            Fri 14 May 2027 08:46:49 +0000
asID:                     45079
IP address blocks:        101.52.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:04:fd:c7:5e:63:fd:cd:5e:b9:e2:74:4d:6f:41:9c:7e:c0:13:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
        Validity
            Not Before: May 15 08:41:49 2026 GMT
            Not After : May 14 08:46:49 2027 GMT
        Subject: CN=B14CB2C6EC1AFAD4E2DB23B0C3B54FB0990B2766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1b:61:2a:a4:f2:99:1b:72:99:ff:2e:00:33:
                    0b:ca:63:79:05:04:2c:dd:bd:81:cf:9f:44:fe:95:
                    2e:da:49:2f:b9:33:db:82:f0:76:cc:2c:39:df:00:
                    78:43:a5:8a:63:85:f2:6d:d8:6c:60:74:b7:4c:9e:
                    41:8a:35:30:b1:e6:c0:5f:22:4d:f1:b3:81:87:4b:
                    2f:b5:de:92:be:a5:7c:5e:56:c7:79:bb:ee:74:c3:
                    04:38:d9:75:00:35:80:1f:0f:dc:64:0a:cf:f4:0b:
                    59:ad:9d:36:27:11:e9:8d:42:88:bd:6d:14:89:fe:
                    60:1f:3f:80:82:5f:f3:97:0e:44:6a:b9:27:4f:bc:
                    b1:54:d9:44:aa:5d:8b:37:4b:b8:2a:62:f7:50:5d:
                    43:12:b9:b5:01:27:1e:3d:2c:5a:41:ea:3c:44:a0:
                    b2:3d:92:28:26:7b:ce:09:9f:32:67:7c:e6:77:c4:
                    c6:2d:79:be:54:5e:76:c0:58:9e:9c:ef:32:2e:a5:
                    8c:10:b3:bb:1a:b6:fd:21:3a:bb:6f:ab:f7:62:33:
                    09:33:d6:3d:53:88:55:86:34:0b:10:50:67:58:34:
                    4c:cc:87:53:53:d0:b9:45:a0:90:0f:86:17:e8:a7:
                    14:99:4a:3e:b4:59:cf:26:74:18:8b:b9:6e:ec:77:
                    50:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4C:B2:C6:EC:1A:FA:D4:E2:DB:23:B0:C3:B5:4F:B0:99:0B:27:66
            X509v3 Authority Key Identifier:
                keyid:68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3233362e302f32332d3233203d3e203435303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.52.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:69:91:cd:08:8f:af:58:d0:5d:f4:c2:df:c3:7d:44:5a:85:
         e6:4e:81:f6:a3:13:d4:18:e3:16:40:a9:23:44:ac:dc:d3:43:
         51:67:35:98:d6:68:ae:2d:c4:56:c4:cf:9c:59:58:99:e1:9c:
         6f:ae:9a:62:91:0b:61:4a:b7:74:5a:4b:de:16:f3:cf:00:5e:
         a0:0c:72:42:15:e5:9a:91:46:df:95:2f:da:da:bf:97:9d:f9:
         7f:f4:5e:49:30:4c:b9:91:e4:12:b8:85:f8:7b:47:28:c9:6b:
         87:3b:77:d8:b8:d6:d4:30:cb:ee:3a:8b:c2:28:10:46:8a:98:
         5c:2b:c1:c9:e5:c3:fd:39:3d:46:78:c5:db:a2:06:ee:70:02:
         18:3a:6a:53:04:9a:fa:16:96:42:2f:53:5f:70:86:4a:6a:e9:
         13:96:2b:54:ea:d7:63:eb:42:ff:b9:7d:3d:f3:9a:1a:76:88:
         4a:19:62:0c:54:4b:6c:6e:14:8b:8f:26:9c:cb:6b:6f:29:33:
         12:46:20:d6:dd:7d:59:2d:39:fa:1f:0c:3c:74:18:bb:7d:9f:
         55:ac:03:6d:96:76:e4:d3:29:8f:bf:59:c2:f1:35:99:41:c3:
         1a:62:ec:b2:40:d9:05:a4:89:58:7d:e5:92:b8:a4:39:44:86:
         61:cb:8a:04
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:01 2026 by rpki-client