Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3235322e302f32322d3232203d3e203137363231.roa
File:                     3130312e35322e3235322e302f32322d3232203d3e203137363231.roa (raw, json)
Hash identifier:          uBY4SFBk6xrUQIvmPHZxM7Cuf+gE00/Zhoc4/FIrB4Q=
Subject key identifier:   B3:7F:E2:13:45:11:33:1D:D0:48:B5:77:EF:AF:95:82:A9:7A:F7:8F
Certificate issuer:       /CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
Certificate serial:       68B616550F504DEAC03FBD56081FEB24A86FF106
Authority key identifier: 68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3235322e302f32322d3232203d3e203137363231.roa
Signing time:             Thu 14 May 2026 09:14:43 +0000
ROA not before:           Thu 14 May 2026 09:09:43 +0000
ROA not after:            Thu 13 May 2027 09:14:43 +0000
asID:                     17621
IP address blocks:        101.52.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b6:16:55:0f:50:4d:ea:c0:3f:bd:56:08:1f:eb:24:a8:6f:f1:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
        Validity
            Not Before: May 14 09:09:43 2026 GMT
            Not After : May 13 09:14:43 2027 GMT
        Subject: CN=B37FE2134511331DD048B577EFAF9582A97AF78F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cf:04:29:00:14:1a:ef:94:2d:cd:f9:ac:97:
                    55:57:66:67:0e:1e:c4:44:6a:47:05:50:ff:31:b3:
                    3b:4a:91:da:8b:63:9f:f2:7d:1d:f0:c8:59:46:78:
                    95:92:8b:f2:9d:8a:4e:ab:1a:0b:bb:f3:d5:73:fd:
                    d9:7d:4a:30:d0:e3:e9:23:87:92:df:09:72:00:86:
                    30:11:5b:70:14:73:ad:f3:a1:5f:66:7b:0a:55:fb:
                    c0:e6:74:0c:40:c9:68:ca:97:bb:30:d8:39:1d:44:
                    6f:fa:f6:3a:1f:50:29:35:c5:b0:ea:66:22:cb:d7:
                    42:53:b9:82:3a:16:3c:75:b6:e9:01:7f:d2:b7:5e:
                    9c:0a:4d:4d:34:0c:0f:5d:fb:a1:a2:9e:03:70:31:
                    5c:ca:c9:c3:90:44:45:2b:e0:65:63:cd:eb:bf:91:
                    73:cb:8f:6e:c7:1d:ce:b1:b7:d2:24:6e:af:1f:cd:
                    4d:34:19:5f:70:38:1c:16:db:d3:b5:21:18:84:39:
                    4a:e2:a0:9c:39:ad:07:5d:53:a7:a2:19:93:28:6c:
                    7e:3f:2d:6f:56:da:0a:5e:b4:1f:f0:3e:02:17:89:
                    bb:a1:e3:25:a7:e3:65:48:87:db:7e:36:9d:78:c1:
                    09:d0:b4:7c:36:de:d0:40:98:be:76:f6:52:57:9f:
                    9f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:7F:E2:13:45:11:33:1D:D0:48:B5:77:EF:AF:95:82:A9:7A:F7:8F
            X509v3 Authority Key Identifier:
                keyid:68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3235322e302f32322d3232203d3e203137363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.52.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:58:ff:7e:80:38:1d:33:7c:05:8d:ff:0d:e8:ef:f5:95:41:
         6f:5d:30:e6:25:a9:2a:6e:71:4f:cb:f0:77:21:f6:3c:4e:5a:
         23:d1:17:59:d6:dd:3a:9f:e8:13:fd:7a:7a:b8:53:ef:3e:5a:
         6e:a6:a6:cc:6e:c9:20:a8:f6:ea:07:f4:f1:cd:21:25:7d:19:
         89:42:d5:f4:23:ef:4c:ad:5a:55:76:6d:25:61:21:e7:c9:6e:
         44:67:2d:aa:a2:21:6a:52:ee:e0:94:5b:01:d9:16:72:31:c9:
         0b:8c:5e:af:d7:ec:85:a9:0b:01:8d:f2:e9:e9:49:61:30:21:
         6d:a6:fa:26:14:cc:9c:9d:13:65:3b:c6:a3:38:01:4d:49:c0:
         d5:15:3b:1a:1f:30:98:2a:63:c1:08:2b:62:b3:82:3e:e8:59:
         49:99:b3:27:38:05:81:34:81:04:89:49:4f:4c:2c:03:b3:4b:
         7c:b6:9c:6f:90:6d:58:35:16:30:9d:f2:71:25:b3:06:8c:58:
         08:e6:cb:f4:94:10:12:2d:03:db:af:0f:1b:ca:b7:79:25:54:
         cf:56:28:02:c9:e9:64:8c:a2:84:ea:cf:53:26:a7:a9:c3:76:
         5d:98:e5:50:23:aa:36:ac:aa:95:7e:df:b8:33:f2:2d:9d:0e:
         9a:09:e3:63
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUaLYWVQ9QTerAP71WCB/rJKhv8QYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjgyNkZENEE5MjdBMTBBNDU4QkJGQTdDNkI5RUU0NjdF
RTE1Qjk3QjAeFw0yNjA1MTQwOTA5NDNaFw0yNzA1MTMwOTE0NDNaMDMxMTAvBgNV
BAMTKEIzN0ZFMjEzNDUxMTMzMUREMDQ4QjU3N0VGQUY5NTgyQTk3QUY3OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5zwQpABQa75Qtzfmsl1VXZmcO
HsREakcFUP8xsztKkdqLY5/yfR3wyFlGeJWSi/Kdik6rGgu789Vz/dl9SjDQ4+kj
h5LfCXIAhjARW3AUc63zoV9mewpV+8DmdAxAyWjKl7sw2DkdRG/69jofUCk1xbDq
ZiLL10JTuYI6Fjx1tukBf9K3XpwKTU00DA9d+6GingNwMVzKycOQREUr4GVjzeu/
kXPLj27HHc6xt9Ikbq8fzU00GV9wOBwW29O1IRiEOUrioJw5rQddU6eiGZMobH4/
LW9W2gpetB/wPgIXibuh4yWn42VIh9t+Np14wQnQtHw23tBAmL529lJXn5+xAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUs3/iE0URMx3QSLV376+Vgql6948wHwYDVR0j
BBgwFoAUaCb9SpJ6EKRYu/p8a57kZ+4VuXswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MDA1NTEyMTQyODQ4Mi8wLzY4MjZGRDRBOTI3QTEwQTQ1OEJCRkE3QzZCOUVF
NDY3RUUxNUI5N0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNjgyNkZENEE5MjdBMTBBNDU4QkJGQTdDNkI5RUU0NjdFRTE1Qjk3Qi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4MDA1NTEyMTQyODQ4Mi8wLzMxMzAzMTJlMzUz
MjJlMzIzNTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzEzNzM2MzIzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmU0/DANBgkqhkiG9w0BAQsFAAOCAQEAU1j/foA4HTN8BY3/Dejv9ZVB
b10w5iWpKm5xT8vwdyH2PE5aI9EXWdbdOp/oE/16erhT7z5abqamzG7JIKj26gf0
8c0hJX0ZiULV9CPvTK1aVXZtJWEh58luRGctqqIhalLu4JRbAdkWcjHJC4xer9fs
hakLAY3y6elJYTAhbab6JhTMnJ0TZTvGozgBTUnA1RU7Gh8wmCpjwQgrYrOCPuhZ
SZmzJzgFgTSBBIlJT0wsA7NLfLacb5BtWDUWMJ3ycSWzBoxYCObL9JQQEi0D268P
G8q3eSVUz1YoAsnpZIyihOrPUyanqcN2XZjlUCOqNqyqlX7fuDPyLZ0OmgnjYw==
-----END CERTIFICATE-----
Generated at Fri May 29 23:53:31 2026 by rpki-client