Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3233382e302f32332d3233203d3e203435303739.roa
File:                     3130312e35322e3233382e302f32332d3233203d3e203435303739.roa (raw, json)
Hash identifier:          4scvDv4A3u0YaKFUdTYnVmqllYo+JVKT4zrUucC5N58=
Subject key identifier:   E3:A9:24:3B:8B:75:A1:55:F6:DD:1D:4E:0B:42:FE:D6:38:C8:9B:29
Certificate issuer:       /CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
Certificate serial:       2D578CF020C615AF556EE5C06649D7E472581B17
Authority key identifier: 68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3233382e302f32332d3233203d3e203435303739.roa
Signing time:             Fri 15 May 2026 08:49:04 +0000
ROA not before:           Fri 15 May 2026 08:44:04 +0000
ROA not after:            Fri 14 May 2027 08:49:04 +0000
asID:                     45079
IP address blocks:        101.52.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:57:8c:f0:20:c6:15:af:55:6e:e5:c0:66:49:d7:e4:72:58:1b:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
        Validity
            Not Before: May 15 08:44:04 2026 GMT
            Not After : May 14 08:49:04 2027 GMT
        Subject: CN=E3A9243B8B75A155F6DD1D4E0B42FED638C89B29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:23:dd:82:30:be:eb:92:64:0b:ff:96:97:f7:
                    23:e6:03:47:0a:51:4e:04:f1:ca:64:aa:14:03:c2:
                    9d:84:ef:dd:ac:c3:64:bb:02:e0:15:bc:9b:d0:c8:
                    59:7b:e9:10:69:38:f4:e3:6d:8d:88:56:96:c1:3e:
                    52:44:50:3d:93:49:a2:27:68:33:9c:42:eb:51:46:
                    db:e7:11:14:e5:e1:d7:07:a9:1c:42:3f:ab:8e:fd:
                    6c:78:2d:4e:76:a8:bd:1b:8b:9b:d8:9a:c7:59:76:
                    7d:46:c5:cd:cb:a6:7a:77:42:25:5f:a8:b5:3d:99:
                    66:26:53:24:4d:86:a4:36:33:3c:6f:1f:b6:0f:3a:
                    19:7d:04:3d:fd:2c:f5:29:0c:f6:32:02:f7:af:d1:
                    36:f4:40:10:47:57:dd:33:f6:c8:a2:5a:9e:76:08:
                    b1:98:9d:b9:e2:2f:5e:09:a6:0a:46:e6:49:d3:5b:
                    31:92:59:8a:f0:80:bc:7c:d1:e7:22:5a:33:1b:d4:
                    2d:21:39:ea:9a:73:4b:fb:8c:23:f6:e5:a7:49:42:
                    70:b8:9b:3a:e2:88:bd:d8:25:61:a8:23:6d:30:cf:
                    06:b0:a7:ce:14:cb:63:e2:b1:d4:92:d2:c3:65:95:
                    eb:2a:69:12:94:2a:7f:eb:1e:73:b8:16:28:77:ec:
                    0d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A9:24:3B:8B:75:A1:55:F6:DD:1D:4E:0B:42:FE:D6:38:C8:9B:29
            X509v3 Authority Key Identifier:
                keyid:68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3233382e302f32332d3233203d3e203435303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.52.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:1f:9c:86:db:38:fa:04:a0:f6:07:55:aa:b5:d2:fd:01:eb:
         0d:87:0b:d4:b3:53:37:6d:6f:04:bd:9f:e8:60:7d:ae:a0:92:
         a4:d0:3f:db:50:2a:f5:4c:31:e0:ea:a8:28:60:b9:fb:76:51:
         dc:f1:91:b7:15:c9:26:1b:53:6f:b4:19:3a:9f:05:04:33:e9:
         6c:0e:f7:67:66:c5:f8:73:d1:3a:71:ac:4e:d6:3b:f3:4d:f0:
         7e:93:ec:31:1d:c9:1f:8c:f9:42:0c:e5:4b:00:d3:66:96:9a:
         f0:90:28:9d:34:96:5f:89:46:b1:34:ef:04:08:a8:f9:09:35:
         d6:09:58:b8:01:ca:71:b1:3e:07:ac:3c:99:ab:c6:ec:19:f8:
         35:87:95:f6:e9:1d:88:9f:d9:c0:1e:c9:5c:8d:6c:55:aa:bd:
         6e:31:58:bc:79:71:08:5f:d5:26:d3:40:39:7c:37:36:fd:56:
         59:8f:ae:05:f4:b7:e1:65:dd:df:c6:ed:26:23:c4:6b:f6:51:
         44:5a:5e:ba:ac:96:ee:e7:b2:b4:62:7f:06:92:39:3a:72:b4:
         9f:46:7e:7e:a6:7e:8e:58:b3:a2:90:fd:f5:a0:4c:d0:f5:b0:
         eb:f0:de:42:39:6c:ab:9b:01:73:63:b8:8d:a7:27:e0:8e:08:
         6d:62:f3:aa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:52:40 2026 by rpki-client