Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3234302e302f32322d3232203d3e203435303739.roa
File:                     3130312e35322e3234302e302f32322d3232203d3e203435303739.roa (raw, json)
Hash identifier:          Lg9uxWErNBvHx9+gwqFzHuECMy4hEiFs5WLmEw58LCw=
Subject key identifier:   FF:C2:CF:B5:84:6C:51:0D:02:05:60:A7:C8:C5:97:C1:3E:73:F7:01
Certificate issuer:       /CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
Certificate serial:       116EB5510DDE6C9A936AA432F3459FC0681ECADB
Authority key identifier: 68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3234302e302f32322d3232203d3e203435303739.roa
Signing time:             Fri 15 May 2026 08:37:44 +0000
ROA not before:           Fri 15 May 2026 08:32:44 +0000
ROA not after:            Fri 14 May 2027 08:37:44 +0000
asID:                     45079
IP address blocks:        101.52.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:6e:b5:51:0d:de:6c:9a:93:6a:a4:32:f3:45:9f:c0:68:1e:ca:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
        Validity
            Not Before: May 15 08:32:44 2026 GMT
            Not After : May 14 08:37:44 2027 GMT
        Subject: CN=FFC2CFB5846C510D020560A7C8C597C13E73F701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4a:8e:51:d1:8b:50:fb:98:56:b3:ef:da:a5:
                    30:c2:e5:e8:a1:df:fa:3b:03:d1:27:59:e9:a6:9c:
                    d2:38:bc:33:21:33:99:c9:21:15:c1:da:1e:85:da:
                    d7:3f:10:17:05:c2:74:2d:22:6f:ca:04:e2:e6:0a:
                    d0:30:4b:fa:c3:6d:a0:cc:aa:7d:56:36:1e:d4:fc:
                    90:73:3d:f8:a6:eb:61:2a:f1:45:4c:df:cc:3c:7a:
                    51:3d:ab:e7:65:55:a5:43:82:37:a1:3f:a5:be:11:
                    7b:82:77:8f:31:d7:49:ba:42:d3:09:97:55:0f:94:
                    78:08:ef:59:2a:82:01:f9:23:f5:d2:8b:80:9e:ce:
                    5e:bd:66:ff:c6:70:d8:76:f7:a7:e5:46:98:81:2c:
                    df:30:cb:e8:82:cb:cd:36:5c:19:3e:79:fd:f8:ba:
                    c4:96:c1:8f:34:ab:4c:83:6a:43:59:e2:42:0c:95:
                    79:93:37:0c:c6:93:a9:71:d3:df:21:7d:28:e2:14:
                    f1:89:44:cf:89:aa:1d:ec:f3:82:0f:dc:a7:6c:bd:
                    71:37:f5:8f:4e:36:69:a1:f7:fb:c4:a9:e2:a7:0b:
                    67:4f:34:e1:e7:c7:db:60:88:4e:ed:2c:b4:85:dd:
                    68:67:af:26:5c:f8:c1:c1:56:ef:95:c3:22:b5:47:
                    58:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C2:CF:B5:84:6C:51:0D:02:05:60:A7:C8:C5:97:C1:3E:73:F7:01
            X509v3 Authority Key Identifier:
                keyid:68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3234302e302f32322d3232203d3e203435303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.52.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:ba:72:9d:98:87:79:83:0f:bb:95:9e:d4:61:32:ce:bd:30:
         94:f5:a4:72:dc:99:06:dc:28:52:51:1b:be:5e:da:32:5b:81:
         39:4f:ef:37:b6:6e:c1:06:5f:67:de:1f:0e:54:41:03:7a:8c:
         77:11:6e:7b:b1:55:de:71:a5:25:a2:bb:e4:88:21:1b:73:39:
         e6:ce:5e:6c:12:25:c9:bf:99:67:39:5c:f0:82:64:98:10:a5:
         fb:1a:b4:53:70:48:33:a9:e2:d7:64:85:ae:05:eb:52:c6:87:
         78:ad:c1:b3:9c:4d:b6:3a:68:3e:d9:05:a9:3a:60:f7:50:08:
         9f:55:e7:69:27:03:11:84:2e:fe:13:bc:9d:a6:7f:32:47:37:
         07:3f:51:7a:2f:70:da:00:d8:e9:bb:4a:a3:e7:50:d3:b6:b6:
         f0:ed:78:7b:be:69:41:69:d4:38:bb:65:48:09:fd:dc:5f:29:
         17:3b:7c:0c:a8:93:c3:00:de:de:ea:16:46:47:b3:22:bb:4b:
         af:c3:03:e0:6a:0b:56:87:57:3e:92:69:fd:36:4a:96:8d:ac:
         7c:9d:d6:27:59:46:54:e9:54:67:13:ae:7c:3e:b3:7d:66:ee:
         06:46:65:2f:08:bd:5a:c9:70:75:6c:50:bb:77:21:ac:04:51:
         15:b3:9f:00
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:14 2026 by rpki-client