Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e36382e302f32332d3233203d3e203435303739.roa
File:                     3130312e35322e36382e302f32332d3233203d3e203435303739.roa (raw, json)
Hash identifier:          lmX8SqzafTLKAyh5NSfAeXJjEdt2ApNPCtMClbQ3s1I=
Subject key identifier:   09:B1:1F:0D:63:53:55:5B:03:75:4B:78:86:43:28:A1:51:8B:E7:54
Certificate issuer:       /CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
Certificate serial:       596BD8501E5FF9A8631031AC64086174E90B00D5
Authority key identifier: 68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e36382e302f32332d3233203d3e203435303739.roa
Signing time:             Fri 15 May 2026 08:42:26 +0000
ROA not before:           Fri 15 May 2026 08:37:26 +0000
ROA not after:            Fri 14 May 2027 08:42:26 +0000
asID:                     45079
IP address blocks:        101.52.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:6b:d8:50:1e:5f:f9:a8:63:10:31:ac:64:08:61:74:e9:0b:00:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
        Validity
            Not Before: May 15 08:37:26 2026 GMT
            Not After : May 14 08:42:26 2027 GMT
        Subject: CN=09B11F0D6353555B03754B78864328A1518BE754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:18:33:75:f0:df:4c:60:96:b8:53:aa:2d:71:
                    ca:c6:c0:54:61:07:46:3f:df:63:b9:18:d6:df:ef:
                    8a:01:25:f1:26:0c:21:5a:f5:98:1c:4e:af:ee:51:
                    32:7a:51:4f:c1:86:fa:14:8e:62:26:e8:dd:cb:05:
                    20:21:81:87:46:f9:b1:91:0f:9c:b0:b4:7e:1d:6b:
                    97:8d:f0:df:2e:26:72:cc:b7:7d:a8:c8:ec:5b:02:
                    f0:23:7f:35:ec:a7:37:78:c8:ee:e6:96:04:54:a9:
                    9e:5a:8a:dc:7c:0c:28:7b:ca:9a:ba:d3:7b:bd:77:
                    d2:6d:e5:fd:35:68:19:5a:0e:cc:2a:02:28:7a:a0:
                    a3:b7:61:98:93:5a:a8:67:8c:65:d3:74:88:17:79:
                    df:95:c0:5b:20:0e:c7:85:07:ec:aa:13:6e:c9:61:
                    75:cf:91:f7:a1:b7:a3:4a:d5:8a:9c:66:34:f8:1b:
                    a8:f3:0e:0d:76:8f:bd:83:4e:c9:ae:09:b9:98:5e:
                    fe:64:af:0d:2a:02:f7:8b:0e:80:61:bd:51:e1:be:
                    22:d7:1e:43:5c:5f:e3:df:5d:e6:53:20:44:17:c9:
                    c7:88:3f:8d:b2:7b:82:62:1b:72:51:cc:6a:d0:38:
                    5b:bf:71:24:73:36:a0:36:9c:51:b0:a8:b1:ea:05:
                    a4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B1:1F:0D:63:53:55:5B:03:75:4B:78:86:43:28:A1:51:8B:E7:54
            X509v3 Authority Key Identifier:
                keyid:68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e36382e302f32332d3233203d3e203435303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.52.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:29:8e:6c:f3:e6:e0:a2:ca:15:08:7f:f5:b9:a3:c5:26:d8:
         de:34:1b:ea:52:22:4d:4d:14:1a:ce:d6:21:31:af:f0:b1:07:
         6b:03:6f:c7:b3:fb:8b:7c:9c:e7:6e:ee:4b:d9:3d:56:7e:f9:
         d2:dc:b5:fc:00:f1:ac:28:40:38:53:ca:8d:0d:57:ec:c1:dd:
         30:47:91:8c:36:a0:37:46:0c:75:b4:82:89:19:29:c4:dc:6a:
         f8:cc:08:47:f9:20:38:13:fa:6f:b0:e9:c1:10:ba:c3:1b:29:
         06:84:e3:ef:d2:62:03:a1:c8:b1:4d:ad:2e:3d:a0:0e:a8:9d:
         39:71:43:f5:10:54:74:7f:df:c9:b3:b3:c6:12:37:e8:72:51:
         61:67:05:98:2b:8b:23:b0:42:e8:40:72:05:41:ea:cf:7f:16:
         00:e5:03:59:38:09:7c:c4:17:30:ab:20:3d:4e:66:a4:04:53:
         97:48:84:b6:bf:32:66:dc:e1:51:b8:9b:38:55:b2:b3:48:d8:
         df:82:04:c2:4c:41:04:5a:05:bb:93:8c:31:f6:02:70:ef:9e:
         e2:64:b4:0e:3e:c7:38:7a:7f:16:d6:5f:e6:2b:22:3f:dc:8d:
         67:f0:2f:12:f7:1b:59:e8:5d:80:9b:bc:74:92:87:08:76:aa:
         e3:74:2b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:27 2026 by rpki-client