Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3233392e302f32342d3234203d3e2034383136.roa
File:                     3130312e35322e3233392e302f32342d3234203d3e2034383136.roa (raw, json)
Hash identifier:          DjyklUIHdH+m1IzvPP/3OF71Z80vNd7W31wqzlwVaB4=
Subject key identifier:   79:FA:4A:75:03:6D:DC:CD:B6:E6:AF:0F:8A:DD:1F:33:00:D0:06:CA
Certificate issuer:       /CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
Certificate serial:       13AAA5D6BA4DC7BD7398632DC8AE6FF257B5FEDA
Authority key identifier: 68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3233392e302f32342d3234203d3e2034383136.roa
Signing time:             Fri 15 May 2026 08:48:26 +0000
ROA not before:           Fri 15 May 2026 08:43:26 +0000
ROA not after:            Fri 14 May 2027 08:48:26 +0000
asID:                     4816
IP address blocks:        101.52.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:aa:a5:d6:ba:4d:c7:bd:73:98:63:2d:c8:ae:6f:f2:57:b5:fe:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
        Validity
            Not Before: May 15 08:43:26 2026 GMT
            Not After : May 14 08:48:26 2027 GMT
        Subject: CN=79FA4A75036DDCCDB6E6AF0F8ADD1F3300D006CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:43:7b:0b:6c:bf:36:93:52:b3:2d:96:57:62:
                    76:eb:18:01:ab:5c:d5:5d:ef:ff:50:a6:39:7e:39:
                    97:90:cc:a2:5a:6f:f7:d8:8a:d7:1a:b1:76:3c:01:
                    9d:34:9f:7a:10:ad:59:b7:8a:d8:5a:56:71:15:de:
                    ae:d0:db:83:aa:cb:a6:4e:3b:73:16:b1:70:42:e1:
                    7d:23:c8:cb:0d:50:39:51:23:cc:fc:56:ae:74:ef:
                    a6:72:07:92:63:8f:da:f3:86:45:79:1e:fe:ab:a5:
                    10:57:dc:58:f9:8c:8a:e7:3b:3c:bd:2d:30:ba:aa:
                    c9:7a:24:51:e6:d7:09:b0:82:c0:ba:59:77:37:69:
                    0a:4b:44:f4:b0:27:2f:ad:8c:63:2e:37:af:d4:6f:
                    20:46:e6:78:e4:8f:f3:6a:54:e2:e8:5f:ea:56:8b:
                    ca:ad:95:ee:b9:4b:34:b2:f9:6c:f0:21:06:32:8d:
                    1f:0b:94:3a:30:f3:06:70:0e:40:ef:a1:95:10:df:
                    c8:53:df:e8:71:bd:69:ca:75:e0:16:ee:df:26:2d:
                    8a:74:b2:70:d5:db:26:d2:5b:5e:35:b1:40:ad:ea:
                    24:c5:65:84:48:25:fe:52:46:f5:6c:b6:ed:19:17:
                    ae:25:f6:f9:a0:7d:89:f9:d8:f8:aa:9f:61:fc:fd:
                    e4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FA:4A:75:03:6D:DC:CD:B6:E6:AF:0F:8A:DD:1F:33:00:D0:06:CA
            X509v3 Authority Key Identifier:
                keyid:68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3233392e302f32342d3234203d3e2034383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.52.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:76:4d:a0:cc:03:aa:e5:49:2c:97:88:3e:2d:9c:14:fc:e2:
         6f:5a:2f:02:b2:48:7f:3f:59:a9:45:5a:db:1d:3e:e8:9c:0b:
         49:40:d7:2c:74:a0:13:68:27:f5:05:5f:8a:f8:c1:62:4c:99:
         8f:91:52:03:5f:b9:7c:f6:d0:b3:94:9f:6e:6e:08:9d:82:8e:
         c3:b5:4e:44:3e:a5:28:60:20:56:66:7a:56:f3:67:e3:20:e8:
         5d:07:e5:ba:0b:80:a4:40:ea:a5:a7:a5:47:4f:ce:3b:4f:7c:
         30:8e:7e:3c:99:0b:df:ef:6d:3e:1e:b0:7e:53:84:0c:c3:30:
         16:f9:95:40:36:1f:2b:19:b2:2c:f7:97:ec:1a:02:4b:f3:90:
         89:5c:e0:93:cb:80:82:95:66:de:8d:8b:19:5a:5a:35:af:6b:
         56:8e:b8:d3:15:82:f0:8f:78:9f:44:e5:67:50:85:27:18:3b:
         1f:b5:c2:fc:a2:07:c6:ae:05:08:98:d1:50:51:1a:50:d8:88:
         75:19:41:05:95:7b:72:41:cb:23:98:7f:ad:5d:8e:a4:ed:f4:
         98:57:df:cf:3d:f1:52:01:fb:fa:b5:1a:d9:64:f0:8d:2d:da:
         4a:d0:08:af:16:1b:0a:d8:92:6a:23:6c:61:8a:3f:7e:e0:59:
         ae:30:19:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:53:30 2026 by rpki-client