Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e362e302f32342d3234203d3e203435303739.roa
File:                     3130312e35322e362e302f32342d3234203d3e203435303739.roa (raw, json)
Hash identifier:          anRVMMZf0eWXjlDRJk62+M2a1q9mhdJj124o1CE72AU=
Subject key identifier:   B8:D7:65:6D:02:8D:9E:DA:CF:C7:0A:C9:71:44:4D:2D:46:6A:D3:F0
Certificate issuer:       /CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
Certificate serial:       3578CB542A25C17C28F98BA03C57734B1E815899
Authority key identifier: 68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e362e302f32342d3234203d3e203435303739.roa
Signing time:             Thu 14 May 2026 08:44:29 +0000
ROA not before:           Thu 14 May 2026 08:39:29 +0000
ROA not after:            Thu 13 May 2027 08:44:29 +0000
asID:                     45079
IP address blocks:        101.52.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:78:cb:54:2a:25:c1:7c:28:f9:8b:a0:3c:57:73:4b:1e:81:58:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
        Validity
            Not Before: May 14 08:39:29 2026 GMT
            Not After : May 13 08:44:29 2027 GMT
        Subject: CN=B8D7656D028D9EDACFC70AC971444D2D466AD3F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:47:8f:ca:b8:47:ee:c4:c5:37:15:24:c6:23:
                    7f:23:7e:e1:1d:88:fa:73:70:1e:e2:9c:aa:5a:5a:
                    42:21:83:6b:9a:98:92:14:d3:ec:13:5d:78:1c:21:
                    06:ea:db:38:f7:88:29:09:51:43:c4:ef:4e:f2:5b:
                    48:53:e6:f4:3f:77:81:f6:2e:18:5a:84:97:f5:b2:
                    e9:c9:d7:77:fd:74:6a:ad:20:15:f3:c9:73:d9:a2:
                    43:e8:c7:5e:b6:2e:f7:68:69:14:28:da:c6:c4:41:
                    5a:b3:81:54:9a:76:50:8e:2a:22:cc:de:2f:3a:c9:
                    45:3a:8f:8e:2f:45:4d:77:5c:a8:83:05:c7:42:ee:
                    0a:01:3f:4c:93:e8:5c:92:3d:f2:e9:8d:8e:3d:73:
                    71:4b:e8:cb:2b:23:e9:88:16:fd:3e:5b:b2:6a:46:
                    ec:c4:47:1e:80:c2:d3:3e:ce:75:9d:75:7f:71:d3:
                    ee:03:d6:fd:45:f4:95:11:5c:20:dd:bd:45:71:d9:
                    48:a5:aa:47:87:ae:61:5b:bc:4b:dc:49:cd:5b:f7:
                    20:3f:75:b3:77:c5:83:80:34:d3:e7:3e:7e:8a:dd:
                    57:58:45:81:8c:ca:4f:85:2c:1a:a0:a4:43:1d:99:
                    49:82:d3:ac:2c:86:30:11:7d:32:e0:9f:a2:5a:fb:
                    86:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D7:65:6D:02:8D:9E:DA:CF:C7:0A:C9:71:44:4D:2D:46:6A:D3:F0
            X509v3 Authority Key Identifier:
                keyid:68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e362e302f32342d3234203d3e203435303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.52.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:26:93:ae:7b:27:db:00:91:8e:79:3b:7b:12:c8:3a:4f:59:
         b0:84:09:4c:ac:ed:67:08:92:d8:ae:1f:0a:96:5f:a3:54:3e:
         48:44:1c:00:3d:ad:69:19:df:d5:cc:01:96:04:43:65:69:a1:
         f9:4c:41:84:61:b6:9f:8f:60:12:0f:be:39:06:17:ee:9f:c7:
         f4:66:e0:66:6e:71:a5:e3:df:e0:1c:a7:b6:e0:4a:96:69:15:
         dc:26:99:2d:3c:29:19:13:be:8c:06:f4:2e:01:ea:5d:b5:63:
         14:85:fc:0f:74:90:9f:c9:7a:29:4f:e4:34:36:7e:b8:59:3e:
         38:9c:5e:22:08:b1:6f:95:53:87:e9:71:24:bf:61:15:56:5d:
         70:f7:ce:38:76:27:dd:da:3f:83:02:d8:4f:08:4d:2d:55:b8:
         f7:70:7e:ab:9c:0a:81:96:39:c1:47:d3:bd:4f:c6:88:a5:e5:
         90:ce:4b:5b:6a:37:a8:d9:16:2d:2c:59:ee:6f:91:ee:3c:aa:
         ea:0e:74:d2:25:3b:93:b2:e8:41:66:3f:3e:3c:72:5f:96:47:
         94:f9:c1:15:b8:91:81:e9:2e:b3:1e:59:46:49:07:ef:4e:73:
         50:cd:7e:c3:55:aa:f1:e4:84:1b:b8:80:13:44:59:87:48:dc:
         90:89:ac:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:57:00 2026 by rpki-client