Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3233392e302f32342d3234203d3e203435303739.roa
File:                     3130312e35322e3233392e302f32342d3234203d3e203435303739.roa (raw, json)
Hash identifier:          AlSadlOkVxSvJ8r2elQuq26RcGDzidetlDeDL4evO4w=
Subject key identifier:   26:80:BC:EC:DA:AA:40:5A:E7:13:92:F8:69:C5:31:DB:FC:51:D6:C0
Certificate issuer:       /CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
Certificate serial:       4A1C5AA5FD4B18CBE78006BB30140759214F80DE
Authority key identifier: 68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3233392e302f32342d3234203d3e203435303739.roa
Signing time:             Fri 15 May 2026 08:48:25 +0000
ROA not before:           Fri 15 May 2026 08:43:25 +0000
ROA not after:            Fri 14 May 2027 08:48:25 +0000
asID:                     45079
IP address blocks:        101.52.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:1c:5a:a5:fd:4b:18:cb:e7:80:06:bb:30:14:07:59:21:4f:80:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
        Validity
            Not Before: May 15 08:43:25 2026 GMT
            Not After : May 14 08:48:25 2027 GMT
        Subject: CN=2680BCECDAAA405AE71392F869C531DBFC51D6C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8a:1d:84:7b:3b:81:69:7f:dd:61:f7:33:d2:
                    a0:b8:f8:41:a9:82:b0:52:27:54:65:10:0e:c1:5a:
                    cd:f7:1a:bd:8f:8f:c9:57:65:0f:da:a0:61:80:e7:
                    81:70:d6:a0:d5:f8:1f:35:8e:29:44:6b:4b:f4:6d:
                    95:fb:1d:41:62:f5:cb:71:89:87:d6:83:66:28:00:
                    3a:4c:29:ed:6a:5b:28:6b:38:14:ba:ae:fd:91:46:
                    cd:d2:18:39:e7:45:c1:26:c0:45:35:ef:5e:76:04:
                    e4:3d:82:17:06:97:35:b3:91:ef:2a:ac:c9:d1:ef:
                    60:cd:56:b1:21:d0:4e:92:f0:3d:1d:22:e1:fe:66:
                    6a:9d:68:5f:76:b0:8b:8c:3b:59:e5:4b:15:b8:f7:
                    1b:14:ec:3e:c4:57:79:94:82:74:92:c5:56:3b:22:
                    7f:9d:04:21:2e:c9:4a:31:65:23:28:e4:a6:dd:f6:
                    5c:6a:25:32:4c:89:3b:5e:21:3e:7e:ff:50:1f:f0:
                    81:ce:27:98:23:4c:d1:48:e9:da:f3:d0:02:65:6e:
                    09:01:50:4f:29:85:2a:c3:33:3c:ea:25:af:e2:ac:
                    d2:c4:5f:08:f6:92:c3:e2:6c:d3:4c:47:12:67:77:
                    51:b6:d8:9f:e8:6d:fc:b1:ae:4e:9d:d9:41:d7:d7:
                    d4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:80:BC:EC:DA:AA:40:5A:E7:13:92:F8:69:C5:31:DB:FC:51:D6:C0
            X509v3 Authority Key Identifier:
                keyid:68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3233392e302f32342d3234203d3e203435303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.52.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:41:19:06:fc:81:5f:e8:62:c1:7a:9b:09:7d:50:89:5d:14:
         8c:97:ae:ce:9d:2f:6c:12:01:3c:c3:0c:90:2f:02:18:5c:72:
         7e:18:0c:ec:91:5e:46:a7:46:89:99:08:8b:97:a5:92:18:4d:
         95:35:56:f5:b0:20:1d:a4:2d:cc:2b:8e:e6:a8:5e:c2:ab:fe:
         cc:18:ae:37:25:35:62:b2:b8:4b:e3:3f:8a:b8:0a:79:2c:13:
         66:d5:f0:36:b7:e8:b1:30:5c:5d:83:48:3b:fe:d3:8a:8f:91:
         30:5f:f5:ad:a6:7d:16:1f:55:67:a8:65:1e:d5:75:be:37:ce:
         6a:02:72:f9:99:d1:90:d1:e2:35:70:f0:72:62:6d:fb:88:01:
         67:0c:1d:a5:e6:dc:63:1e:d6:f0:82:62:18:4e:78:7f:6c:98:
         73:2e:6c:e3:68:96:b9:37:3e:1f:46:74:37:d1:59:5e:db:de:
         b2:64:2b:54:2c:49:3d:08:ae:eb:e6:74:1a:04:95:de:bc:08:
         13:1d:8a:f0:a6:68:f7:84:20:7e:ab:26:61:9a:6b:f0:bf:a0:
         0b:d9:22:1a:e5:cd:19:4d:f1:80:cb:ea:58:8f:a4:07:cb:1b:
         b2:1c:68:1a:23:0f:1e:bd:54:2a:61:ad:13:e8:27:d3:42:ca:
         23:c1:e7:64
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:25 2026 by rpki-client