Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3234342e302f32322d3232203d3e2034383038.roa
File:                     3130312e35322e3234342e302f32322d3232203d3e2034383038.roa (raw, json)
Hash identifier:          fj5OkO66ZCCrtA6iglxHggXz7/zxYTJxIk5uyu1mobI=
Subject key identifier:   2B:8D:51:02:B8:FC:89:1D:4B:93:23:2E:D6:14:86:9D:97:8A:EC:ED
Certificate issuer:       /CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
Certificate serial:       6A93DD53C143617DA6F3C495A3FEC9F25DD1DC4F
Authority key identifier: 68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3234342e302f32322d3232203d3e2034383038.roa
Signing time:             Fri 15 May 2026 08:39:57 +0000
ROA not before:           Fri 15 May 2026 08:34:57 +0000
ROA not after:            Fri 14 May 2027 08:39:57 +0000
asID:                     4808
IP address blocks:        101.52.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:93:dd:53:c1:43:61:7d:a6:f3:c4:95:a3:fe:c9:f2:5d:d1:dc:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
        Validity
            Not Before: May 15 08:34:57 2026 GMT
            Not After : May 14 08:39:57 2027 GMT
        Subject: CN=2B8D5102B8FC891D4B93232ED614869D978AECED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:53:d9:30:1c:7d:c1:d7:b5:38:2f:b9:c4:8f:
                    58:fb:98:a4:99:09:30:b3:96:ee:25:93:81:96:66:
                    53:ce:c8:e2:be:63:c4:e4:d1:8d:24:42:df:3f:52:
                    1a:80:dd:a8:79:d0:a3:ab:64:b0:33:f6:1d:48:49:
                    f1:51:b4:67:11:db:78:6e:5f:8b:47:70:67:94:5f:
                    00:92:56:45:0f:18:cd:67:d7:3c:b6:0a:ad:2d:d8:
                    9e:28:6a:31:3c:12:e6:56:d4:f3:7d:dd:48:6e:a2:
                    a6:7f:2b:96:22:84:3b:0e:5a:cf:2c:09:0b:ac:3e:
                    c6:82:ba:5e:0e:10:22:ed:f0:28:53:4a:53:fe:7d:
                    b1:24:6d:18:07:c1:86:a7:fd:4c:dc:f7:75:11:4a:
                    7a:ac:bc:f3:66:93:ca:0e:5f:46:10:2b:bd:ba:66:
                    64:d5:a1:38:9d:88:7d:b4:0d:12:cf:79:9b:58:c7:
                    cb:fb:a3:96:63:a8:36:ba:a9:00:67:ad:fa:4f:2a:
                    ef:4b:79:23:e4:34:cc:01:07:0f:3b:e8:49:be:2b:
                    17:67:13:9d:8d:b3:78:23:72:91:0f:99:bc:76:3c:
                    57:bf:2e:ef:b0:eb:0c:0a:0a:70:b4:c3:b7:e1:19:
                    1c:ae:5a:b5:9e:ab:a1:24:d5:0c:06:48:49:35:8a:
                    d6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:8D:51:02:B8:FC:89:1D:4B:93:23:2E:D6:14:86:9D:97:8A:EC:ED
            X509v3 Authority Key Identifier:
                keyid:68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3234342e302f32322d3232203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.52.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:a3:51:db:68:48:34:20:06:a6:fa:b1:d0:de:ee:44:7e:5e:
         71:5c:2e:4c:31:6f:fb:69:f7:fd:c5:29:10:92:e2:92:19:0a:
         9d:db:f8:88:1a:b9:0f:0a:10:5f:fa:c5:6e:1d:c0:4c:fb:63:
         c8:f1:0e:78:8c:ad:da:1f:21:9a:17:a1:82:d7:58:0f:1b:69:
         31:3a:01:db:11:a2:8a:91:bb:a1:34:b7:fc:e0:cb:12:93:5e:
         37:92:1b:66:aa:b4:fd:16:e0:75:8d:cf:f9:84:f5:4c:91:90:
         d9:08:fc:1a:6e:e9:14:8d:05:69:cb:8d:6d:31:37:ac:70:2c:
         31:f1:92:e0:3d:20:df:b1:13:54:3c:8a:ad:4b:8b:a7:18:00:
         6b:31:c0:c0:b2:33:87:14:5a:a8:a0:5b:b8:60:56:01:ef:82:
         fe:b1:46:97:77:f3:23:54:46:cd:ea:17:31:2e:c3:81:33:73:
         72:64:1b:75:ce:4f:c9:38:87:5a:dd:4a:a7:ae:32:50:c5:b1:
         c6:90:66:2b:02:7a:20:96:fb:15:f4:ed:21:e7:d8:19:ec:12:
         f9:0b:bf:fe:fd:50:86:3b:cf:f1:0a:1e:d8:9d:d5:32:a0:54:
         1d:b9:2b:ce:90:ab:2f:2e:d5:7c:7e:ce:61:7c:fe:15:09:06:
         6a:ed:f2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:53:33 2026 by rpki-client