Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3235322e302f32322d3232203d3e203435303739.roa
File:                     3130312e35322e3235322e302f32322d3232203d3e203435303739.roa (raw, json)
Hash identifier:          GGpT/gQuCclqTLaZ//iNBEeCMR7FdEl+NURk4CpYXRk=
Subject key identifier:   66:69:76:0E:25:F4:3F:80:11:D6:33:A4:13:E7:73:37:CF:34:F8:56
Certificate issuer:       /CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
Certificate serial:       1678B5DE678DC5113538E382B5FC3851EB419E29
Authority key identifier: 68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3235322e302f32322d3232203d3e203435303739.roa
Signing time:             Thu 14 May 2026 09:14:43 +0000
ROA not before:           Thu 14 May 2026 09:09:43 +0000
ROA not after:            Thu 13 May 2027 09:14:43 +0000
asID:                     45079
IP address blocks:        101.52.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:78:b5:de:67:8d:c5:11:35:38:e3:82:b5:fc:38:51:eb:41:9e:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
        Validity
            Not Before: May 14 09:09:43 2026 GMT
            Not After : May 13 09:14:43 2027 GMT
        Subject: CN=6669760E25F43F8011D633A413E77337CF34F856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:39:5e:9b:49:da:58:a5:65:28:15:80:4b:71:
                    92:02:02:c9:e8:70:73:5d:1d:f6:e3:ed:31:d7:6c:
                    aa:a3:1f:ba:90:2d:8f:5a:38:90:ef:93:41:0e:f3:
                    89:d4:82:15:7e:df:b4:22:5e:cb:df:68:e0:68:06:
                    b3:2e:d1:18:9f:1f:a2:d4:59:ba:4f:49:d9:aa:ef:
                    b6:63:b5:c5:14:52:66:5c:6b:c8:dc:67:de:de:38:
                    21:5c:3b:c5:01:db:cc:23:c3:dc:1e:e3:94:e1:a0:
                    32:de:44:53:30:5f:c2:d7:67:90:2a:98:f4:d6:2e:
                    a1:14:63:89:a1:93:f9:2d:24:39:1f:7a:c3:8d:7c:
                    2e:86:29:e5:9c:81:d8:a8:08:89:24:e9:4c:67:cb:
                    ce:a9:c2:39:72:c3:0e:30:81:ab:9a:74:17:49:88:
                    e4:84:b4:c7:18:8a:1d:58:83:f5:dd:86:e4:f5:bc:
                    ba:39:43:c4:d8:c9:7d:bf:d5:38:64:0e:df:9e:d6:
                    8f:22:f6:f8:54:06:0e:3d:86:a0:e1:50:4f:de:d2:
                    c7:fc:ec:71:3a:ab:2e:b1:dd:38:3a:f7:0d:95:13:
                    64:82:c1:c2:6e:f9:f0:14:09:87:fc:96:d9:b6:f7:
                    60:c9:e0:5b:8c:d0:89:72:06:8b:a0:aa:01:1f:7e:
                    b6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:69:76:0E:25:F4:3F:80:11:D6:33:A4:13:E7:73:37:CF:34:F8:56
            X509v3 Authority Key Identifier:
                keyid:68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3235322e302f32322d3232203d3e203435303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.52.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:db:fd:cb:32:d6:43:7c:c3:d9:4f:d0:6b:55:67:96:2d:1a:
         e6:ae:32:a5:66:b2:82:41:af:83:df:1f:31:19:da:6d:13:44:
         2f:c5:f1:6b:61:75:43:71:f1:2f:c1:c8:90:11:71:05:58:8b:
         bf:6f:a6:06:4c:6c:cb:0b:9a:e9:6d:56:d5:0f:2f:3c:de:d0:
         e9:d8:9e:98:ea:53:10:db:d1:31:eb:7c:ff:af:4d:ae:01:60:
         2d:57:57:fe:dd:b5:8b:1a:6c:d7:20:74:b9:f9:2e:23:0a:86:
         0c:79:99:1a:b8:d2:cb:7a:84:93:36:7d:8b:0d:b6:1f:bd:7f:
         f8:89:fb:ca:67:ec:7f:01:d0:1d:b7:1c:7b:9f:ce:eb:d3:67:
         03:4d:39:4e:c4:7a:e9:7d:30:32:e8:d7:97:e3:e3:5a:8c:05:
         be:bc:a3:51:6d:a1:ff:1d:ab:06:fa:3b:07:0f:93:b7:2f:5c:
         d8:4f:e7:50:4b:38:87:6a:11:dd:d2:08:a4:80:53:0f:f6:31:
         fa:83:1c:ce:ee:ac:57:b9:f5:b9:f4:e1:1a:54:03:bd:87:17:
         b7:81:39:67:79:d9:e3:12:0e:be:ec:28:8e:a9:1e:ab:0d:80:
         51:7f:00:e6:ae:23:ca:4e:ba:f9:d5:0f:45:6e:c0:b5:e0:3c:
         be:dd:f2:e8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:15 2026 by rpki-client