Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e342e302f32342d3234203d3e203435303739.roa
File:                     3130312e35322e342e302f32342d3234203d3e203435303739.roa (raw, json)
Hash identifier:          p4KIjfQxIBNAeCyvuB9oahCNU3QOSLGvFfAnBXOSNv8=
Subject key identifier:   25:4F:62:46:98:2E:B7:B9:56:84:64:86:3C:4A:6A:23:A6:59:4A:D6
Certificate issuer:       /CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
Certificate serial:       0F514E298F91F0951CF63DCB461A11CADFEC3793
Authority key identifier: 68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e342e302f32342d3234203d3e203435303739.roa
Signing time:             Thu 14 May 2026 08:44:29 +0000
ROA not before:           Thu 14 May 2026 08:39:29 +0000
ROA not after:            Thu 13 May 2027 08:44:29 +0000
asID:                     45079
IP address blocks:        101.52.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:51:4e:29:8f:91:f0:95:1c:f6:3d:cb:46:1a:11:ca:df:ec:37:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
        Validity
            Not Before: May 14 08:39:29 2026 GMT
            Not After : May 13 08:44:29 2027 GMT
        Subject: CN=254F6246982EB7B9568464863C4A6A23A6594AD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:30:be:1a:a6:18:5f:35:19:87:26:43:37:26:
                    c0:95:61:6c:aa:05:8b:8c:15:b8:64:ce:3a:53:5d:
                    57:ad:42:53:fd:c3:7f:02:84:40:c4:6a:97:7f:c5:
                    8e:9b:f6:02:76:7d:d6:fd:76:57:47:e1:58:be:af:
                    8d:a4:b8:0a:82:8b:70:31:77:b5:6f:64:97:c0:8a:
                    b3:18:8a:04:ef:e6:ec:61:1f:ed:b6:51:5a:d7:ef:
                    78:5f:a4:10:7b:6c:d1:73:8b:c4:a1:2f:a9:d3:37:
                    8f:e9:7e:f9:2b:53:15:dd:e8:f1:1c:43:1e:c1:11:
                    f6:8b:25:38:b0:6f:b8:92:a2:67:73:75:2f:f8:6d:
                    9b:8e:f5:d6:a7:c4:71:84:0a:f2:31:11:8c:1b:24:
                    e6:58:ba:3f:b9:c3:30:d6:fb:c2:05:c8:09:d4:07:
                    5f:68:ca:56:61:1a:ac:5e:d8:e5:f6:2d:44:c8:34:
                    8b:fd:67:4b:e7:af:20:53:06:09:62:1a:dc:d7:ec:
                    b5:9e:99:c6:17:55:f9:b3:f5:7f:ee:fd:1b:60:b1:
                    25:72:1b:62:39:8b:6f:d7:70:e9:7f:cb:be:d6:03:
                    3d:de:b9:45:5a:30:6e:67:1b:d3:57:c3:71:de:e3:
                    d7:07:9c:17:3a:40:2a:cf:0d:0f:2b:5c:37:a8:3d:
                    20:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:4F:62:46:98:2E:B7:B9:56:84:64:86:3C:4A:6A:23:A6:59:4A:D6
            X509v3 Authority Key Identifier:
                keyid:68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e342e302f32342d3234203d3e203435303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.52.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:89:2e:ac:b7:13:69:44:37:c2:b2:1a:1e:43:82:61:4a:e9:
         04:3f:f4:7c:02:fd:de:d1:1a:20:2a:cc:66:e5:4f:1e:8b:fb:
         41:f0:9e:df:d4:8d:30:d9:ff:40:22:91:0b:23:dc:1a:3c:23:
         8f:6f:01:ea:28:30:78:54:3f:85:c6:f6:79:c7:d7:cf:cc:13:
         38:58:c0:79:b6:7c:e5:f9:c8:6b:1a:60:e4:fa:6c:8d:1b:91:
         38:be:6a:82:f3:86:1e:4d:25:bf:93:81:7d:ca:a0:c7:d4:ac:
         63:56:73:2e:4e:67:7f:81:64:4b:7a:23:af:bc:3a:e7:46:ad:
         83:09:3b:02:7a:6c:e6:1b:72:28:ba:91:77:c0:fd:f9:3e:51:
         a8:fa:d4:07:1e:55:81:91:6b:52:c1:30:1c:62:ec:34:8d:42:
         4e:fd:3b:eb:70:93:28:10:ed:68:1a:62:3c:ad:02:d2:c2:86:
         ce:30:af:35:4f:8e:2b:e0:16:db:35:fd:ec:8f:14:d8:10:5a:
         96:41:4c:e1:68:f0:85:e6:38:c5:d8:e7:e3:e3:ec:a1:a2:20:
         df:2f:23:cc:34:cf:0e:61:fe:85:70:d2:fb:b8:38:2d:07:95:
         ec:91:8c:b8:9e:c2:4d:11:8f:3b:49:b6:f8:8b:f8:99:b6:18:
         46:2d:7c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:53:07 2026 by rpki-client