Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e32342e302f32322d3232203d3e203233373234.roa
File:                     3137352e32352e32342e302f32322d3232203d3e203233373234.roa (raw, json)
Hash identifier:          dnViiR/6j4TiUuJsver6UPyXfWko5Tx9mKcAiG++u48=
Subject key identifier:   AD:10:44:65:43:FB:4E:A4:9B:29:FB:67:61:D3:39:35:47:C4:31:9F
Certificate issuer:       /CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Certificate serial:       5A8413C679516B647AE8EAD283A30FA5A87ED262
Authority key identifier: 51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e32342e302f32322d3232203d3e203233373234.roa
Signing time:             Tue 14 Apr 2026 06:41:55 +0000
ROA not before:           Tue 14 Apr 2026 06:36:55 +0000
ROA not after:            Tue 13 Apr 2027 06:41:55 +0000
asID:                     23724
IP address blocks:        175.25.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 09:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:84:13:c6:79:51:6b:64:7a:e8:ea:d2:83:a3:0f:a5:a8:7e:d2:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
        Validity
            Not Before: Apr 14 06:36:55 2026 GMT
            Not After : Apr 13 06:41:55 2027 GMT
        Subject: CN=AD10446543FB4EA49B29FB6761D3393547C4319F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d8:b8:2a:69:e3:56:f1:78:4e:50:cb:47:69:
                    58:af:68:5d:0a:97:56:b3:ed:25:b5:89:2c:0b:f9:
                    45:6b:8f:63:20:7d:73:a8:33:19:a4:ae:00:46:b0:
                    0a:34:0d:87:3e:8c:fc:2c:0f:6a:54:44:34:81:06:
                    2f:73:fe:aa:dd:0d:f1:dc:db:75:93:43:f2:91:ed:
                    34:28:bb:48:88:66:12:cc:d5:30:83:2a:c4:68:87:
                    b7:66:dd:51:8d:56:a6:74:e5:ae:12:a9:63:0f:11:
                    12:0e:d7:9f:1c:cd:88:eb:17:0f:7d:07:2f:ba:c2:
                    6b:57:05:63:10:7d:59:4d:48:12:05:e1:5f:3a:16:
                    eb:89:fa:7e:2d:40:55:f9:61:bc:67:9c:3e:c6:16:
                    84:9c:1a:58:41:39:22:c6:75:2e:67:c6:f9:4a:45:
                    ce:9e:b8:96:7a:b3:4f:4a:4d:ab:d3:02:9e:81:fa:
                    ff:2b:f3:9f:d1:3b:62:bf:b0:c6:b7:f6:73:0f:d4:
                    ec:ad:92:b2:c4:d6:ee:ec:74:36:71:8b:7f:17:fd:
                    fd:91:9c:a3:63:3c:6f:ea:02:59:bd:cf:cb:ee:07:
                    d8:75:2c:08:86:8a:2b:ed:bc:21:c8:44:56:2c:01:
                    22:7d:7b:ea:18:12:1b:d0:5c:ed:8f:62:6f:92:df:
                    63:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:10:44:65:43:FB:4E:A4:9B:29:FB:67:61:D3:39:35:47:C4:31:9F
            X509v3 Authority Key Identifier:
                keyid:51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e32342e302f32322d3232203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.25.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:de:fc:66:bd:be:43:db:07:57:dd:ea:4d:d1:83:b9:25:df:
         a9:e0:3d:26:e2:a9:9a:fd:f5:70:22:8a:b8:61:db:04:50:cc:
         dc:8d:bb:7d:e6:88:c0:ae:8c:da:0f:6c:2d:26:0f:f9:40:49:
         f0:00:1c:df:db:ed:0d:69:6e:f2:42:e0:56:79:58:8a:59:a0:
         07:02:fb:16:a2:66:47:c2:ba:af:ff:3c:50:18:6c:98:83:e9:
         bb:77:02:5b:34:04:36:65:02:84:5b:ac:f7:33:ec:3c:b7:54:
         36:fd:c4:cf:fd:2f:16:9a:68:d4:39:61:33:70:16:e5:03:05:
         b7:47:74:00:4e:a8:1f:36:af:24:05:62:85:9f:84:07:83:78:
         70:f7:ea:6c:6d:3e:90:f5:7a:10:6c:1d:2e:ca:24:9d:0b:7c:
         a7:49:80:ee:91:10:0d:cb:17:fc:fe:b0:82:c6:71:2a:79:32:
         b7:05:5e:24:a0:00:a5:a7:ec:90:ce:ae:50:ff:3c:40:27:76:
         2c:d3:1e:5e:60:71:9b:3e:32:0f:fe:cf:58:25:fa:47:9e:c9:
         d4:c4:28:3e:b5:18:f9:b0:2f:7d:36:33:b8:2b:e7:69:c8:4e:
         27:fd:31:89:a0:19:58:9d:a2:8b:6f:6c:5b:39:c7:6a:a9:10:
         62:c5:e7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:19:08 2026 by rpki-client