Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e302e302f31362d3136203d3e203536303139.roa
File:                     3137352e32352e302e302f31362d3136203d3e203536303139.roa (raw, json)
Hash identifier:          I+omeHGTewEMSUafWw5O2tFTA7ajKQzj9c1tD/JoKDM=
Subject key identifier:   E8:00:12:3F:59:F5:A4:24:9C:D9:F3:BB:D4:CC:D6:2A:0A:DD:CF:77
Certificate issuer:       /CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Certificate serial:       5A3A3A05A28622326E5E7CA149847FD507964FCB
Authority key identifier: 51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e302e302f31362d3136203d3e203536303139.roa
Signing time:             Tue 14 Apr 2026 06:41:54 +0000
ROA not before:           Tue 14 Apr 2026 06:36:54 +0000
ROA not after:            Tue 13 Apr 2027 06:41:54 +0000
asID:                     56019
IP address blocks:        175.25.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 09:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:3a:3a:05:a2:86:22:32:6e:5e:7c:a1:49:84:7f:d5:07:96:4f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
        Validity
            Not Before: Apr 14 06:36:54 2026 GMT
            Not After : Apr 13 06:41:54 2027 GMT
        Subject: CN=E800123F59F5A4249CD9F3BBD4CCD62A0ADDCF77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3d:c3:e2:e8:ba:a2:1d:8c:d9:7e:f6:5c:e6:
                    f1:3f:33:4d:7f:71:82:ad:11:a8:78:3e:81:3f:8c:
                    16:aa:e8:40:33:ca:b4:ff:79:04:3d:a0:62:41:32:
                    ba:c5:c1:c8:cb:b6:a7:3c:64:94:f8:14:b7:7d:a9:
                    6e:fa:07:6e:4f:a1:85:90:09:af:19:9a:93:2c:ed:
                    09:f0:79:aa:61:a8:df:ce:d0:a9:96:f3:1a:22:1e:
                    6d:65:fc:50:cc:18:21:27:07:62:48:f5:f0:71:64:
                    e1:dd:5c:58:0a:e1:ae:12:62:54:53:09:ad:9a:1d:
                    ce:28:6e:a2:e9:3f:37:75:60:20:3c:3e:a1:6b:03:
                    9e:9f:1c:fb:f1:bd:63:9c:0b:c7:e4:21:f0:2c:3b:
                    b2:e4:ff:fd:1b:4a:4e:1b:da:be:74:3d:18:f1:6e:
                    62:4c:eb:13:93:e9:09:fc:02:90:a2:04:8b:bc:8f:
                    90:6b:d0:06:f3:c4:07:80:49:8d:2f:02:eb:e1:03:
                    1d:a4:bf:6a:d6:7e:77:d2:38:09:e4:1f:11:2c:b4:
                    f5:1e:d9:fa:a0:e5:b9:4f:97:d4:1d:ea:f3:ad:10:
                    c1:47:80:8b:7a:a3:23:10:95:86:90:a2:92:49:91:
                    31:0f:63:64:86:a7:e4:72:c1:69:40:74:a0:8e:c0:
                    73:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:00:12:3F:59:F5:A4:24:9C:D9:F3:BB:D4:CC:D6:2A:0A:DD:CF:77
            X509v3 Authority Key Identifier:
                keyid:51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e302e302f31362d3136203d3e203536303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.25.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         21:86:3d:04:a6:df:f4:4c:98:18:a9:a5:96:67:c0:bb:1b:dd:
         9e:98:41:22:0e:fa:b0:7a:a1:d3:40:68:e5:97:ea:23:4d:43:
         a8:99:11:b7:f1:75:1d:94:f0:fd:86:2b:8d:36:8a:58:2b:1f:
         71:3f:3f:6a:ed:67:9c:ee:a0:55:20:3f:a5:d5:aa:dc:3c:f9:
         e0:ad:3d:b4:5d:c4:06:e3:06:4b:35:2a:d8:97:c0:de:50:25:
         99:c9:dc:14:aa:53:71:6e:ab:fa:04:a5:b9:d9:b8:c1:0c:c7:
         23:f5:19:6b:52:fc:b5:12:d6:67:42:29:8e:30:5e:3b:e4:f5:
         6a:18:91:87:f8:29:54:d6:61:44:4d:cc:8b:02:19:77:55:40:
         ac:44:90:b3:32:aa:2e:81:44:12:ba:0b:67:b5:9f:cd:b8:7b:
         7b:68:68:79:15:55:0a:b7:ce:57:87:37:88:8b:32:22:8c:65:
         ac:66:4c:a3:04:63:08:a4:6a:de:1f:a0:d7:e5:2a:09:a0:b8:
         7c:bb:32:17:68:a1:92:6a:b0:74:d2:6a:42:e5:3d:27:ea:9e:
         f2:e7:85:1e:95:33:38:a8:f3:bb:6b:87:f5:dd:f4:ea:50:00:
         14:04:6c:76:ef:47:ff:08:98:6e:48:a3:a5:7a:e9:9c:ab:4e:
         5f:2b:a6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:22:10 2026 by rpki-client