Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e31362e302f32312d3231203d3e203233373234.roa
File:                     3137352e32352e31362e302f32312d3231203d3e203233373234.roa (raw, json)
Hash identifier:          YPasVe3K3ht2mnfxR8Yo1hyHz55y4WAhHj8Of8R6/3k=
Subject key identifier:   FB:1D:0A:C5:4E:E9:84:6D:F7:F0:5C:8D:9B:39:D9:07:8B:9D:24:6F
Certificate issuer:       /CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Certificate serial:       2672915D50AAF11E9FCF15E57E9754AD0B2FDBF6
Authority key identifier: 51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e31362e302f32312d3231203d3e203233373234.roa
Signing time:             Tue 14 Apr 2026 06:46:50 +0000
ROA not before:           Tue 14 Apr 2026 06:41:50 +0000
ROA not after:            Tue 13 Apr 2027 06:46:50 +0000
asID:                     23724
IP address blocks:        175.25.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 09:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:72:91:5d:50:aa:f1:1e:9f:cf:15:e5:7e:97:54:ad:0b:2f:db:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
        Validity
            Not Before: Apr 14 06:41:50 2026 GMT
            Not After : Apr 13 06:46:50 2027 GMT
        Subject: CN=FB1D0AC54EE9846DF7F05C8D9B39D9078B9D246F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:83:c2:01:16:65:88:3d:21:ca:80:9b:ea:42:
                    28:62:2d:27:d9:86:d0:75:40:3a:47:db:ae:69:b5:
                    7c:ab:6c:33:e8:07:c6:c8:2c:73:cb:ce:f1:e8:b5:
                    ed:be:31:19:5a:e2:b6:9c:d3:7d:d1:68:51:e1:2c:
                    c4:bc:9e:00:7e:0d:80:c8:80:e0:e4:e5:1b:90:b4:
                    a6:cd:a2:20:88:b4:31:45:bd:92:e0:a1:34:fc:67:
                    90:01:d6:b7:de:f4:65:14:1e:6a:20:3f:92:1f:af:
                    d8:d0:72:c0:b3:28:b5:5c:20:87:78:b7:b4:70:6e:
                    20:b0:b5:a4:17:3e:e7:90:12:9a:28:55:38:2e:1f:
                    4a:e7:c5:2f:a2:73:2e:15:03:90:70:f7:84:70:67:
                    e2:9d:62:fe:68:a5:25:5b:f4:41:bc:1c:98:81:97:
                    fc:e8:99:56:d0:67:c6:c3:24:e7:c4:f2:5a:63:fc:
                    0f:df:b1:ef:ee:eb:af:9f:d4:3d:d1:05:1d:74:40:
                    73:29:d5:8f:0b:58:17:02:c1:3e:bd:30:9e:13:85:
                    c5:3e:e5:0e:1d:b1:07:dd:11:54:10:b9:35:23:d2:
                    92:ea:2d:f4:f2:ce:30:c4:a4:3c:c0:fb:8b:0e:1a:
                    b1:c7:d0:d8:c6:99:1d:08:a1:5d:ba:01:2d:66:37:
                    04:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:1D:0A:C5:4E:E9:84:6D:F7:F0:5C:8D:9B:39:D9:07:8B:9D:24:6F
            X509v3 Authority Key Identifier:
                keyid:51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e31362e302f32312d3231203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.25.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         14:db:51:56:1b:58:b1:e4:de:fc:ea:0a:a7:ff:58:a0:f4:b1:
         3f:f4:d1:04:d4:9d:9c:c5:6c:bf:33:aa:2a:e6:bf:c5:26:2e:
         85:41:9a:cc:28:eb:a3:07:75:01:20:ee:a6:ee:d4:8c:40:f3:
         24:5b:4c:fe:e1:cb:df:41:95:9b:61:53:54:36:4e:29:1e:26:
         4f:cd:27:26:7c:f9:90:a9:df:8e:a2:f1:48:5d:3d:47:e2:a7:
         3f:cc:34:12:16:7f:fd:de:96:82:48:3e:35:43:ed:96:c3:db:
         cb:a4:49:12:5e:5c:50:6a:c9:8b:81:38:a0:3b:9f:14:c3:3c:
         e7:81:f3:c6:ec:f3:8a:2d:9d:9a:af:db:f1:81:aa:e1:7c:fa:
         ed:37:9f:e1:ae:de:3c:8c:85:81:08:6b:d1:ee:37:28:c5:39:
         5f:dc:de:35:61:20:74:33:69:76:51:da:9c:35:7c:c3:28:65:
         9d:83:97:23:c1:0c:96:61:d1:e6:6e:dc:ed:7f:4a:e6:3d:12:
         01:2c:e5:60:ed:7f:ab:a1:2b:09:e6:ba:d2:49:19:6f:9c:30:
         27:53:90:e2:6e:3e:9a:80:04:5f:be:a3:86:bc:da:cb:61:7e:
         b3:c1:be:47:52:2f:a9:0e:40:6f:e1:0d:45:73:79:5b:66:84:
         c3:ef:ec:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:22:11 2026 by rpki-client