Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e31362e302f32322d3232203d3e203536303139.roa
File:                     3137352e32352e31362e302f32322d3232203d3e203536303139.roa (raw, json)
Hash identifier:          tHrtticFb/kaAPQ3nFDiGDo+vJmPwYUx2vev/Sc5g84=
Subject key identifier:   C7:A9:36:5E:EB:D0:8B:98:D9:95:C0:1C:61:07:71:2F:A9:D6:3E:72
Certificate issuer:       /CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Certificate serial:       2829B9C17539C62E60D6EBF3E4B0F368DE276039
Authority key identifier: 51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e31362e302f32322d3232203d3e203536303139.roa
Signing time:             Tue 14 Apr 2026 06:46:49 +0000
ROA not before:           Tue 14 Apr 2026 06:41:49 +0000
ROA not after:            Tue 13 Apr 2027 06:46:49 +0000
asID:                     56019
IP address blocks:        175.25.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 09:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:29:b9:c1:75:39:c6:2e:60:d6:eb:f3:e4:b0:f3:68:de:27:60:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
        Validity
            Not Before: Apr 14 06:41:49 2026 GMT
            Not After : Apr 13 06:46:49 2027 GMT
        Subject: CN=C7A9365EEBD08B98D995C01C6107712FA9D63E72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:79:92:3f:04:75:43:0e:c6:be:79:c8:6e:9b:
                    ae:d4:00:6c:e0:d2:fc:ac:a2:c2:1d:ec:09:fc:1f:
                    21:65:47:8a:1d:93:97:32:b5:e4:22:ae:d2:0c:66:
                    64:ae:0f:b9:2a:23:96:8f:e3:3f:99:c3:85:2f:c8:
                    46:1c:01:a8:f5:a5:60:a5:ac:c7:d2:e2:63:1d:3c:
                    1c:60:77:6a:32:53:2d:5b:de:e7:47:81:e8:df:a9:
                    9b:1f:6f:ec:e8:e4:56:06:38:91:e8:22:d2:82:cd:
                    15:26:e6:f9:db:71:7a:8e:58:a1:40:12:b5:a2:51:
                    32:9e:75:4a:53:66:61:2e:d5:a5:3b:1f:5b:4c:a4:
                    99:ee:9f:e3:dc:44:12:6f:76:a9:68:6a:6c:8b:d7:
                    2e:27:66:0b:51:c5:2a:80:b8:a4:63:ac:ca:68:65:
                    f4:d8:2d:b6:1b:9c:5e:14:da:f0:48:05:6a:bf:50:
                    36:d5:a4:f8:ef:2e:5c:a8:8e:a6:cb:41:77:e5:7c:
                    d7:20:c8:8e:39:e5:26:f8:bf:ac:bd:64:37:5a:91:
                    b3:bd:a0:2d:66:c4:88:e0:69:65:04:f1:99:2c:6e:
                    24:28:19:24:29:22:a2:e3:6a:3a:63:b9:30:43:a2:
                    a9:a5:b0:83:c3:3d:b7:72:6f:f9:57:eb:da:ad:e1:
                    e1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A9:36:5E:EB:D0:8B:98:D9:95:C0:1C:61:07:71:2F:A9:D6:3E:72
            X509v3 Authority Key Identifier:
                keyid:51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e31362e302f32322d3232203d3e203536303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.25.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:0a:39:5b:0f:13:2f:7b:9c:48:69:12:61:e3:ff:c0:d9:dd:
         a3:26:ee:64:eb:80:82:61:fa:5a:28:2e:b1:65:6f:d5:24:dc:
         f1:47:86:1d:76:95:ef:ea:9b:4a:f9:1e:d8:c8:64:cf:e8:a0:
         0c:b4:fb:8a:aa:9c:bd:fe:37:e3:ca:e6:2c:de:a6:cb:a5:a0:
         f8:c4:be:1c:8f:31:dc:58:c9:b5:c7:53:a5:23:59:f2:83:c2:
         29:cb:23:dc:90:12:b6:23:fc:ef:e0:27:bc:c1:22:3f:81:62:
         fe:e3:cb:37:8b:d5:85:ff:c6:35:c5:24:22:eb:aa:21:ff:91:
         51:92:4f:35:c1:c0:41:8e:ba:a8:5c:a7:72:d2:b4:c9:33:b7:
         75:51:32:0f:ae:1d:d4:a6:83:13:db:4c:60:a8:1d:7d:a5:d6:
         3a:7c:fe:73:57:9b:6d:b7:86:57:0d:e0:e7:0f:21:7b:85:1a:
         2b:55:f3:45:df:63:61:ea:ca:9a:da:0f:be:a4:45:9b:1b:e9:
         a4:b0:7d:8d:a2:5b:78:2e:16:24:09:f4:7d:2a:f5:26:da:9e:
         7d:9a:4b:63:b5:1a:b3:3c:86:98:0a:b8:d6:2e:fb:4c:b4:9c:
         83:d0:ce:35:c2:6a:71:b9:53:b2:9f:91:ff:34:60:9e:d0:0a:
         57:51:25:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:10:13 2026 by rpki-client