Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e32342e302f32332d3233203d3e203536303139.roa
File:                     3137352e32352e32342e302f32332d3233203d3e203536303139.roa (raw, json)
Hash identifier:          g0n75Oq/n805cVKpjNxKbDfk/gjdOVurC0iiXhtSuDQ=
Subject key identifier:   BA:CF:10:6C:3C:28:68:CE:B3:73:AD:4F:3A:00:F9:52:D2:7A:3C:06
Certificate issuer:       /CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Certificate serial:       2BD068DCA9EA09791741A6D571880E6D26A4E642
Authority key identifier: 51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e32342e302f32332d3233203d3e203536303139.roa
Signing time:             Tue 14 Apr 2026 06:46:50 +0000
ROA not before:           Tue 14 Apr 2026 06:41:50 +0000
ROA not after:            Tue 13 Apr 2027 06:46:50 +0000
asID:                     56019
IP address blocks:        175.25.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 09:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d0:68:dc:a9:ea:09:79:17:41:a6:d5:71:88:0e:6d:26:a4:e6:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
        Validity
            Not Before: Apr 14 06:41:50 2026 GMT
            Not After : Apr 13 06:46:50 2027 GMT
        Subject: CN=BACF106C3C2868CEB373AD4F3A00F952D27A3C06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ad:06:b6:9f:b8:b0:ce:3e:ff:e6:f1:7b:48:
                    57:fe:6d:46:0f:b4:76:c7:67:dd:1d:c0:da:05:5a:
                    49:6b:8e:94:45:f8:ea:6a:5e:99:7f:3b:21:60:c2:
                    41:5e:44:eb:8e:57:dc:87:f1:ad:ab:9e:5b:0c:a1:
                    c5:23:b8:0c:af:63:df:f1:84:f6:d1:f9:84:6c:ea:
                    cb:0d:a0:83:8c:a1:c8:02:6f:e8:0b:32:66:64:d0:
                    e7:74:d3:ae:b2:e8:32:98:12:9f:91:52:4f:eb:35:
                    5f:1c:0e:c4:40:c1:d6:23:f6:0e:ba:62:2e:a6:e5:
                    4a:8d:53:17:c5:e9:cd:bb:6f:0e:f4:cc:5c:87:77:
                    06:9f:bf:d2:4a:b7:53:f4:33:bb:b7:ab:cf:85:de:
                    30:f5:10:9f:1c:15:48:a0:46:22:27:53:43:40:7f:
                    d9:2d:12:6a:81:da:a0:bb:23:24:7b:79:90:00:81:
                    69:b9:c7:b4:5b:f8:29:1b:df:ca:e2:50:f2:3e:dd:
                    7f:27:a7:0a:68:1a:4e:98:94:73:ad:15:58:9e:b4:
                    f0:a5:d7:0d:80:3c:ed:da:c4:da:1d:f6:67:c6:44:
                    1e:62:77:ae:37:dd:56:33:15:47:cd:a6:e4:e4:1d:
                    8a:88:97:81:69:52:9c:89:44:83:c2:6b:13:6d:7f:
                    a2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CF:10:6C:3C:28:68:CE:B3:73:AD:4F:3A:00:F9:52:D2:7A:3C:06
            X509v3 Authority Key Identifier:
                keyid:51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e32342e302f32332d3233203d3e203536303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.25.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:1e:6c:e1:f5:f5:32:42:4b:9c:dd:df:47:05:2e:56:5f:d4:
         95:aa:77:69:41:2e:10:68:61:93:43:16:f2:db:fa:eb:d5:09:
         62:5c:e8:25:ef:74:60:e7:69:56:78:78:3b:89:94:b4:5a:f0:
         49:bd:48:78:dd:f1:38:24:2c:25:99:f3:a1:d3:38:46:e0:02:
         e8:24:9b:cd:bc:ed:38:80:75:f9:b5:77:a0:a2:56:3c:65:f5:
         bc:a8:f2:f0:0d:f9:e2:12:6f:78:0b:63:bf:36:9f:52:b9:7c:
         d4:5f:06:d9:17:2b:d9:0a:61:72:33:ce:49:18:09:43:e2:2b:
         ee:1e:a7:e4:32:01:82:81:2e:35:42:c4:17:82:3f:de:5d:c3:
         19:50:45:da:0c:a6:df:06:76:7c:9b:02:de:8d:4f:44:be:94:
         a4:c9:df:c6:f3:47:d6:ec:dc:71:2e:d9:e1:34:d7:de:9c:ff:
         b3:10:db:73:60:68:2a:5d:72:e4:a4:d9:63:03:30:b5:c6:1e:
         1e:91:1e:50:7c:e4:b4:f4:94:8a:46:bc:fa:bf:6d:99:91:fd:
         89:9c:a3:08:b7:7c:52:d1:cc:0b:5d:f4:e6:a6:1a:54:d2:54:
         95:63:fa:b5:5e:86:f0:2f:3b:d5:a2:0c:4e:2f:08:9b:e0:93:
         3e:fa:a3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:19:12 2026 by rpki-client