Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3234382e302f32322d3232203d3e203435303739.roa
File:                     3130312e35322e3234382e302f32322d3232203d3e203435303739.roa (raw, json)
Hash identifier:          u+JsbusSvCdMps72gwte4JCQpWKLjigR+TuldW2ldbk=
Subject key identifier:   88:F5:A3:A8:C9:4E:70:57:04:D5:57:7B:E6:D1:A6:64:D4:BC:67:0D
Certificate issuer:       /CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
Certificate serial:       29238D624596CD12626891B9CF24685F172A4BC7
Authority key identifier: 68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3234382e302f32322d3232203d3e203435303739.roa
Signing time:             Thu 14 May 2026 09:14:06 +0000
ROA not before:           Thu 14 May 2026 09:09:06 +0000
ROA not after:            Thu 13 May 2027 09:14:06 +0000
asID:                     45079
IP address blocks:        101.52.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:23:8d:62:45:96:cd:12:62:68:91:b9:cf:24:68:5f:17:2a:4b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
        Validity
            Not Before: May 14 09:09:06 2026 GMT
            Not After : May 13 09:14:06 2027 GMT
        Subject: CN=88F5A3A8C94E705704D5577BE6D1A664D4BC670D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:89:79:d2:05:29:e4:ab:d0:29:85:f7:ef:94:
                    a1:80:56:19:f0:f1:3c:cc:a0:93:2c:b8:de:1c:34:
                    35:c3:4d:7a:f6:cb:49:61:33:77:57:bc:fc:31:78:
                    b9:6f:82:4f:8e:b9:7f:1e:bc:bf:d6:f0:d8:fa:3b:
                    d8:99:4a:67:68:bb:71:49:cf:d1:5d:aa:2c:28:46:
                    25:85:59:10:8f:bf:5a:24:5e:f8:11:9c:d5:cf:06:
                    7d:fd:52:e4:d8:cf:c7:b4:70:05:b7:73:73:79:12:
                    1e:ba:fe:26:13:cb:cc:c7:a5:58:33:6e:6d:5a:da:
                    ca:98:5c:2b:48:64:6f:d2:79:91:69:47:4a:48:ce:
                    9b:8e:76:82:a2:6b:9d:d2:bc:9d:17:bc:30:b7:e8:
                    77:ff:e5:e3:2c:6b:22:ee:cd:56:59:c2:8b:85:22:
                    7f:e3:eb:cb:6f:ec:03:ff:e0:0f:e2:f2:81:df:b6:
                    70:0f:bf:ec:7d:bc:89:40:f5:45:ae:93:28:43:58:
                    77:c3:51:8a:56:5a:71:0c:7e:d0:46:bf:dc:b2:85:
                    94:58:ef:25:ad:5a:18:5c:1f:fc:2f:97:7f:5d:ff:
                    e2:df:a5:34:3f:4e:6a:bf:4f:b9:24:b3:b6:a9:7e:
                    35:07:6d:f3:7b:80:d2:ea:51:1e:3b:dd:39:78:0c:
                    85:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F5:A3:A8:C9:4E:70:57:04:D5:57:7B:E6:D1:A6:64:D4:BC:67:0D
            X509v3 Authority Key Identifier:
                keyid:68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3234382e302f32322d3232203d3e203435303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.52.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:14:0d:34:16:2b:5f:24:a8:f5:0e:f7:85:29:9c:c6:38:72:
         38:24:58:23:a6:6b:aa:1b:c3:14:df:85:9a:e5:06:34:93:53:
         21:01:c4:89:0b:2a:6e:4c:54:5e:c6:8c:65:b3:1f:8f:f8:7f:
         f1:66:7b:3a:fc:d8:3c:e1:d3:39:0b:38:79:bb:88:5c:ed:68:
         8d:63:d9:8e:da:29:2b:73:44:c2:65:ad:05:09:6a:5f:c3:b4:
         ae:2d:f3:f5:c4:2b:8b:e8:e6:b6:d8:47:b4:86:26:10:49:57:
         9f:e8:c8:0b:c3:74:24:c7:9c:b8:c0:fb:c1:a6:1e:86:e2:5f:
         17:3d:19:08:eb:7b:9c:ac:13:75:56:e9:44:3a:43:b4:87:ed:
         70:9b:16:68:2c:65:24:1e:f1:de:04:96:51:51:44:e1:16:66:
         28:27:8e:ce:5a:e6:98:9a:77:4a:99:c2:8d:cc:8d:ce:9e:1f:
         ab:b0:43:2d:16:d3:e9:11:1d:7d:f6:af:65:a8:0d:f7:d7:10:
         bf:b4:c4:9f:22:55:43:37:1a:55:ef:3b:a0:22:46:75:c7:25:
         94:7f:d5:9e:b5:e8:84:13:e4:2b:cd:cb:86:38:92:05:19:1b:
         48:37:0d:75:a5:88:8d:eb:9c:b4:39:98:30:63:86:91:84:df:
         9f:4f:d5:02
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:54:30 2026 by rpki-client