Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e32302e302f32322d3232203d3e203536303139.roa
File:                     3137352e32352e32302e302f32322d3232203d3e203536303139.roa (raw, json)
Hash identifier:          vAyJMycTWlZeKKPc2K9qUzu4GBH2cQJ8HKVDpUL+I7A=
Subject key identifier:   CA:25:53:9E:B6:89:E5:52:15:96:F0:C0:1B:9C:57:03:C4:5C:66:C3
Certificate issuer:       /CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Certificate serial:       1604D4E954F5D1304D84C8F28F4F1B8B232C5321
Authority key identifier: 51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e32302e302f32322d3232203d3e203536303139.roa
Signing time:             Tue 14 Apr 2026 06:41:54 +0000
ROA not before:           Tue 14 Apr 2026 06:36:54 +0000
ROA not after:            Tue 13 Apr 2027 06:41:54 +0000
asID:                     56019
IP address blocks:        175.25.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 09:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:04:d4:e9:54:f5:d1:30:4d:84:c8:f2:8f:4f:1b:8b:23:2c:53:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
        Validity
            Not Before: Apr 14 06:36:54 2026 GMT
            Not After : Apr 13 06:41:54 2027 GMT
        Subject: CN=CA25539EB689E5521596F0C01B9C5703C45C66C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c5:3a:2f:cd:58:75:82:a3:a9:3c:89:36:e8:
                    c8:d1:b9:8b:4d:71:1a:e6:f5:d7:d4:78:60:a7:65:
                    cb:7a:3b:3e:a3:83:d9:3d:14:eb:92:29:29:e3:23:
                    81:06:09:72:d8:c9:67:3f:c3:74:a3:94:c3:b8:85:
                    d9:ba:cd:85:f2:53:4b:e3:d4:49:30:b7:56:3e:80:
                    e3:9f:42:b7:49:00:f7:dd:10:66:27:e7:52:2f:92:
                    6a:76:14:db:0f:6f:55:a0:ad:40:85:40:1a:a6:a2:
                    a3:29:86:e5:ff:a6:a5:9a:e5:35:08:8a:e2:15:2c:
                    ab:16:79:21:c8:dc:9f:b3:4d:f3:b4:84:7c:a0:43:
                    79:72:3b:b3:14:fa:eb:e9:b8:b1:58:2b:0b:72:99:
                    bf:ea:6b:1f:54:81:06:87:ac:7b:d9:4a:90:aa:38:
                    5e:f9:10:7a:1a:4d:3d:b6:ea:2a:1c:ba:ea:cc:2a:
                    b6:69:23:5f:3d:db:5c:c2:b3:fa:26:98:d7:87:c6:
                    e5:47:80:f1:68:3e:ac:17:47:2e:e0:c8:bb:cf:9b:
                    8e:7a:76:55:5d:39:e4:6b:35:58:60:2d:b3:61:58:
                    2c:9f:14:71:d5:ce:1d:41:7f:cc:29:0b:8e:74:c6:
                    38:1e:ea:70:5f:8c:9e:37:ac:74:08:6b:4f:40:06:
                    e0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:25:53:9E:B6:89:E5:52:15:96:F0:C0:1B:9C:57:03:C4:5C:66:C3
            X509v3 Authority Key Identifier:
                keyid:51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e32302e302f32322d3232203d3e203536303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.25.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:37:92:ce:d7:8b:55:76:1e:92:76:82:95:40:86:28:4f:0d:
         c5:ed:6f:11:4e:b6:2d:3d:78:b3:5f:74:d4:22:b3:47:5f:42:
         f1:8b:01:e4:04:88:b0:29:b0:d2:9b:e3:55:ab:8b:e1:68:27:
         d9:59:39:b6:f6:e1:0f:4d:91:b6:e3:94:5d:fd:89:40:0f:9a:
         6c:7f:60:c4:1c:02:a2:30:4b:b9:28:cb:19:bd:02:6f:17:43:
         5d:76:bf:41:30:f7:ce:40:c1:35:31:1a:4c:90:d1:7f:ec:70:
         41:1a:71:09:51:a1:95:77:69:bf:2e:c4:24:57:d5:ee:36:66:
         ef:dd:db:6b:0c:2e:47:50:6d:5f:ad:6b:e7:a1:75:1b:54:a8:
         88:c0:92:b5:8a:25:4f:21:5c:e7:3d:03:c5:4a:db:49:24:97:
         9e:61:54:18:ed:9e:d5:74:1d:5c:0f:76:bb:14:f9:f2:c5:e1:
         64:d8:59:ee:7f:ee:67:54:6d:fc:94:44:c5:ec:5e:ba:05:44:
         b6:0c:df:99:b3:15:57:44:13:77:e5:d1:33:1d:b8:48:ff:4e:
         90:60:a3:ee:a0:8d:3d:ad:df:82:a8:59:c1:3c:f5:42:db:0b:
         6a:3d:82:5a:ad:cf:c3:41:28:44:5a:6a:fc:0b:64:3e:39:d0:
         83:d5:ba:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:25:00 2026 by rpki-client