Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e302e302f31352d3234203d3e20313335363239.roa
File:                     35322e38322e302e302f31352d3234203d3e20313335363239.roa (raw, json)
Hash identifier:          BKfKRfeGnTe+uCfmNH8LGxHMZkSFP82yHfMi+FwAgaw=
Subject key identifier:   84:31:13:4C:ED:58:5C:CE:C1:B5:69:92:FD:1B:E5:CD:11:7E:65:1C
Certificate issuer:       /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
Certificate serial:       572985EBB326B93F45702F4674B751895522EA83
Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e302e302f31352d3234203d3e20313335363239.roa
Signing time:             Thu 26 Feb 2026 08:10:47 +0000
ROA not before:           Thu 26 Feb 2026 08:05:47 +0000
ROA not after:            Thu 25 Feb 2027 08:10:47 +0000
asID:                     135629
IP address blocks:        52.82.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 06:59:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:29:85:eb:b3:26:b9:3f:45:70:2f:46:74:b7:51:89:55:22:ea:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
        Validity
            Not Before: Feb 26 08:05:47 2026 GMT
            Not After : Feb 25 08:10:47 2027 GMT
        Subject: CN=8431134CED585CCEC1B56992FD1BE5CD117E651C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:eb:8b:d6:7c:a5:43:03:41:34:71:3e:84:61:
                    3e:ac:77:5f:4c:2b:00:30:7d:24:ef:e4:4b:13:20:
                    b1:06:88:f9:8f:1b:e0:df:50:3a:14:5d:f3:1c:2d:
                    22:d1:ca:41:1d:bb:0f:62:a2:99:a4:f7:52:9f:ed:
                    fc:41:e9:f9:59:ef:d6:99:b7:55:99:01:f2:e7:f9:
                    98:08:ff:2a:96:42:c5:1f:5c:b1:d7:7e:91:16:56:
                    49:5b:8b:91:6d:85:60:d1:6e:c4:bc:b7:34:7f:4b:
                    ea:c1:b0:c4:e2:35:08:96:92:d7:95:c6:1d:80:d2:
                    28:f8:11:9f:ec:4f:31:25:f3:ae:1c:90:df:4b:bf:
                    e4:d8:ba:78:4e:6d:18:a5:ad:8c:2a:31:2a:55:d8:
                    91:94:f2:47:77:3c:50:a8:e1:ff:bd:5d:6d:fc:17:
                    df:90:f2:c3:5d:32:3e:4f:e0:33:6e:b6:69:e8:20:
                    de:b6:58:ec:ad:b1:0e:60:a7:af:c3:8f:ea:48:87:
                    68:e3:35:5d:cf:80:f8:a4:c7:63:72:e2:58:46:25:
                    aa:75:ee:df:4b:97:f0:15:02:73:6c:72:cb:33:23:
                    3c:10:6b:05:ad:c7:58:3a:e2:ab:b0:9c:41:30:cd:
                    a0:4f:b9:02:bc:0a:ad:9c:0c:91:86:f2:af:b3:b8:
                    9a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:31:13:4C:ED:58:5C:CE:C1:B5:69:92:FD:1B:E5:CD:11:7E:65:1C
            X509v3 Authority Key Identifier:
                keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e302e302f31352d3234203d3e20313335363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.82.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         64:8b:1f:b8:84:98:66:8a:26:fe:0d:36:5b:a6:92:57:5c:19:
         c6:ac:bd:a3:fa:d3:fe:57:a7:14:df:f5:66:59:64:55:44:06:
         85:82:76:0f:fb:d2:44:a7:c2:dc:f7:6d:d0:e6:65:e8:fe:9b:
         59:81:cf:29:ac:db:aa:78:9a:f1:fd:46:31:11:6c:b8:3e:43:
         fa:d5:38:3c:12:23:b7:56:74:a6:53:97:e4:aa:e9:2f:4c:36:
         c8:11:88:a0:17:9d:45:41:4c:7b:54:3f:38:de:7e:40:02:8d:
         bd:5f:c8:56:70:49:9a:8c:0f:68:71:a2:f7:41:6c:b0:c7:56:
         74:eb:ab:20:b6:d2:b4:dc:ba:79:8d:9d:2a:a1:b1:ed:99:80:
         e6:3a:92:40:c1:df:c2:e1:0f:bc:af:4c:32:c7:eb:79:a1:bf:
         10:3c:bd:d3:30:32:5c:21:e3:fc:19:b4:9d:b0:ea:99:25:eb:
         7c:0b:d8:f7:5f:08:4a:04:2c:0a:db:db:d2:b4:34:3d:cc:ce:
         0f:f5:74:17:e2:aa:2a:0b:c9:d0:10:7c:51:1f:83:a2:59:9d:
         0c:7a:9e:97:16:5a:5e:c3:1d:dc:f5:6e:e1:c4:59:85:74:bb:
         1c:81:4c:07:b3:19:06:7f:78:3f:1d:86:1b:7b:f4:b0:64:20:
         94:49:6b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:40:51 2026 by rpki-client