Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e31362e302f32312d3231203d3e203536303139.roa
File:                     3137352e32352e31362e302f32312d3231203d3e203536303139.roa (raw, json)
Hash identifier:          okIqP3ZcLfD7t1uL5mPxi2T3au93XV0dSJd4giM8SJY=
Subject key identifier:   6D:BE:D2:74:B9:F8:AB:26:3C:FA:16:BE:C5:EC:01:77:BE:6A:A5:06
Certificate issuer:       /CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Certificate serial:       78A0B61AA9A73381C0E96494C91DBA9E1B2E759A
Authority key identifier: 51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e31362e302f32312d3231203d3e203536303139.roa
Signing time:             Tue 14 Apr 2026 06:46:50 +0000
ROA not before:           Tue 14 Apr 2026 06:41:50 +0000
ROA not after:            Tue 13 Apr 2027 06:46:50 +0000
asID:                     56019
IP address blocks:        175.25.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 09:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a0:b6:1a:a9:a7:33:81:c0:e9:64:94:c9:1d:ba:9e:1b:2e:75:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
        Validity
            Not Before: Apr 14 06:41:50 2026 GMT
            Not After : Apr 13 06:46:50 2027 GMT
        Subject: CN=6DBED274B9F8AB263CFA16BEC5EC0177BE6AA506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7b:85:76:4c:02:25:16:75:fd:78:95:26:d7:
                    5c:5c:c4:b5:4a:09:c9:7d:8e:e8:39:1d:3e:a5:84:
                    a5:d7:c5:30:6e:9b:c4:16:5e:10:e3:27:c4:f7:29:
                    95:48:c7:1c:dc:0a:b7:ea:95:08:ee:11:ad:99:31:
                    66:64:a6:9b:76:59:d4:3b:76:ad:26:41:81:be:d2:
                    38:00:cb:14:c1:84:c1:03:75:7f:bb:4a:e1:14:6a:
                    f5:44:28:c0:67:d2:c7:3a:a6:d7:90:7b:a7:fa:b9:
                    75:6a:8d:58:c3:9c:66:c3:fa:25:70:2a:f6:a7:38:
                    9c:b3:20:55:af:7b:2f:87:b7:0e:e9:ed:e1:72:66:
                    48:59:b9:34:bc:1c:83:5a:b2:79:11:6a:b9:bb:2f:
                    b2:5c:93:90:19:47:91:69:82:d3:af:6c:c4:cc:b7:
                    5e:04:be:71:8f:3d:40:f1:81:20:19:f9:91:79:3a:
                    b4:a2:ac:38:78:96:6e:d9:39:04:aa:56:f3:5a:12:
                    e4:1b:cd:cf:e0:54:55:13:6f:13:af:1d:80:e8:83:
                    0c:7d:92:9e:49:2c:8d:f6:31:bc:07:3a:f1:fc:04:
                    19:43:0c:cd:6b:60:e9:84:3c:56:c5:97:84:c1:63:
                    b2:c6:ac:96:46:76:1e:8f:40:c9:fe:c4:20:14:d2:
                    6a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BE:D2:74:B9:F8:AB:26:3C:FA:16:BE:C5:EC:01:77:BE:6A:A5:06
            X509v3 Authority Key Identifier:
                keyid:51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e31362e302f32312d3231203d3e203536303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.25.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         95:98:64:c7:2e:e3:f4:cd:33:3d:15:7d:cd:72:c6:33:fc:c4:
         a3:cb:b1:39:99:e1:d5:0b:24:6d:51:fb:df:a7:43:32:f3:1f:
         e8:ea:72:f6:51:87:d2:c8:47:b6:b5:a5:96:46:1c:8a:1a:aa:
         87:6b:ef:e5:cd:d6:f4:bb:9b:9e:9c:fe:07:4d:e5:0f:fd:4b:
         53:28:71:d1:de:49:86:46:6c:bc:8e:de:e7:30:17:dd:0a:70:
         c4:60:36:d1:41:e9:a7:fa:69:f3:e8:e6:9c:59:0d:8a:d1:6a:
         fe:f8:3c:b6:c4:d8:95:a1:a4:0d:fb:e7:c2:75:b6:0c:40:2f:
         a7:fc:78:21:bf:9d:63:d5:6b:26:f3:7c:a6:ea:4e:d9:19:50:
         1b:91:3d:2a:e0:13:ea:30:10:21:67:a8:fa:5b:e3:89:1e:b0:
         19:4f:19:22:97:40:b8:0b:12:91:ab:23:3f:19:c3:8f:30:dd:
         71:91:67:c4:34:21:27:a4:24:de:e6:c2:22:bb:84:36:6d:b4:
         99:6e:6a:24:1b:17:96:66:72:50:99:2c:0f:0b:66:1f:84:b3:
         90:a1:7c:a9:63:cb:5f:0a:48:0f:1a:cc:1f:48:b8:42:12:a2:
         49:86:a2:3a:0e:53:5f:95:ae:75:98:95:2d:9c:8c:8d:6e:e8:
         69:d2:b3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:10:12 2026 by rpki-client