Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3234302e302f32322d3232203d3e2034383437.roa
File:                     3130312e35322e3234302e302f32322d3232203d3e2034383437.roa (raw, json)
Hash identifier:          IulYoBFmjdCG5Z0p4UH1Jkb/h+OHqZyayxygjnluJzQ=
Subject key identifier:   D3:28:EF:A1:82:7D:A9:C0:F5:70:CF:64:AA:45:F6:8A:FD:52:74:F6
Certificate issuer:       /CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
Certificate serial:       1059087C9AA603A462500884FF696344EA73BB4F
Authority key identifier: 68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3234302e302f32322d3232203d3e2034383437.roa
Signing time:             Fri 15 May 2026 08:37:44 +0000
ROA not before:           Fri 15 May 2026 08:32:44 +0000
ROA not after:            Fri 14 May 2027 08:37:44 +0000
asID:                     4847
IP address blocks:        101.52.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:59:08:7c:9a:a6:03:a4:62:50:08:84:ff:69:63:44:ea:73:bb:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
        Validity
            Not Before: May 15 08:32:44 2026 GMT
            Not After : May 14 08:37:44 2027 GMT
        Subject: CN=D328EFA1827DA9C0F570CF64AA45F68AFD5274F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6d:48:97:9d:b5:41:4e:f0:a0:61:7a:40:79:
                    6c:17:2e:69:02:0a:18:e5:b9:87:77:0f:c2:35:5e:
                    8e:98:b3:63:53:62:d5:4a:9b:4d:0c:b9:4e:35:a1:
                    f1:78:53:cd:ac:9f:62:19:df:ab:fc:89:00:7c:be:
                    81:97:85:ba:c6:56:92:05:9e:f0:c9:72:1c:b4:4c:
                    04:5e:8d:36:50:5a:03:1b:6d:c2:09:23:4d:07:c1:
                    de:6e:aa:18:3f:a3:df:54:9c:e1:c2:1f:cf:e2:58:
                    0f:bd:00:08:66:8b:32:7b:3e:22:dc:3b:55:06:0c:
                    4e:68:cd:c4:af:e0:20:c1:01:f9:7c:c9:31:b9:92:
                    db:14:ba:ae:5f:18:91:37:5e:bb:4d:62:48:0c:ef:
                    77:ce:5f:55:16:93:a1:74:bf:03:23:be:61:38:69:
                    c1:3f:8e:11:11:41:4e:5d:6b:9f:65:9c:ba:a4:51:
                    a6:31:bb:9d:36:6c:43:de:96:04:6a:00:55:e9:92:
                    1e:2e:dd:3d:70:e4:cc:64:a7:e8:79:ae:ca:51:6b:
                    75:39:18:95:4d:35:6c:a3:9b:74:1e:71:9d:df:fc:
                    90:a7:d0:16:8e:ee:fc:ef:cf:ef:f0:e8:df:f1:2d:
                    ec:e6:c7:42:5b:b8:2d:d6:a1:2a:e0:a5:5d:1e:d6:
                    f4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:28:EF:A1:82:7D:A9:C0:F5:70:CF:64:AA:45:F6:8A:FD:52:74:F6
            X509v3 Authority Key Identifier:
                keyid:68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3234302e302f32322d3232203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.52.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:29:07:37:aa:80:bd:0d:59:9d:b4:c9:a9:ae:73:74:6b:20:
         3f:80:ee:be:4f:ff:13:58:f7:ed:38:82:6b:8d:a3:fe:9a:48:
         ad:0b:d7:8a:85:76:6b:4f:ee:29:d3:40:59:85:d8:a3:6c:12:
         f1:05:bd:2c:3b:93:93:68:43:aa:cd:7b:59:56:6b:a1:16:29:
         45:3c:a7:6b:87:32:c9:04:9b:9e:f0:12:d7:21:20:e3:95:6f:
         a0:4f:a2:65:f6:03:9d:93:27:36:6a:98:16:19:da:91:f9:40:
         30:73:6f:7a:2a:d1:1b:34:10:ab:12:b2:ac:b3:7c:71:de:ad:
         00:20:9f:09:cc:e3:4e:2b:2d:6f:ab:77:09:40:4b:49:70:00:
         b3:74:61:16:81:ee:bc:f2:9d:1c:2c:6d:db:5a:cb:39:24:58:
         b9:75:2f:af:8f:84:fa:8f:d0:df:8e:3a:b5:81:8b:5a:36:2a:
         6e:72:17:52:78:88:a3:80:07:37:06:d0:a4:b7:83:d0:29:d8:
         86:23:66:57:d1:61:3c:16:6a:be:73:e5:cf:f6:2e:f0:e2:3b:
         a6:c8:65:01:32:7b:38:72:0d:26:bf:62:38:57:35:10:dd:46:
         df:1b:4f:b9:5a:cd:0d:5d:58:e9:39:99:f2:e8:48:b4:3c:c9:
         d8:57:c3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:53:22 2026 by rpki-client