Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e32382e302f32322d3232203d3e203233373234.roa
File:                     3137352e32352e32382e302f32322d3232203d3e203233373234.roa (raw, json)
Hash identifier:          grMx0tNCZ+0PAoa6Iib1LXS0l+u2Id60i+wNKWlYw7E=
Subject key identifier:   93:C1:EF:8A:13:2E:D0:77:00:7E:E1:5B:E7:45:E1:05:0E:2C:2C:BB
Certificate issuer:       /CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Certificate serial:       0DFCBEFB1C563B25C81D6983AFBB7C409D22AE21
Authority key identifier: 51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e32382e302f32322d3232203d3e203233373234.roa
Signing time:             Tue 14 Apr 2026 06:41:55 +0000
ROA not before:           Tue 14 Apr 2026 06:36:55 +0000
ROA not after:            Tue 13 Apr 2027 06:41:55 +0000
asID:                     23724
IP address blocks:        175.25.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 09:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:fc:be:fb:1c:56:3b:25:c8:1d:69:83:af:bb:7c:40:9d:22:ae:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
        Validity
            Not Before: Apr 14 06:36:55 2026 GMT
            Not After : Apr 13 06:41:55 2027 GMT
        Subject: CN=93C1EF8A132ED077007EE15BE745E1050E2C2CBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c9:3d:25:7e:df:bd:99:ce:ad:90:39:b6:eb:
                    ed:5b:ad:8b:1c:26:f1:46:f6:c3:09:af:f5:78:aa:
                    c9:24:4b:c9:c7:49:bc:5f:c3:96:44:71:50:3b:50:
                    b1:15:07:be:61:8d:3c:f2:6b:70:6b:0b:bc:92:63:
                    d4:10:8f:c2:8f:5f:a8:7d:6c:e8:fb:07:a1:ee:67:
                    49:a2:40:21:6e:4f:27:7c:c5:05:f5:91:fc:a5:1d:
                    a2:01:a8:6b:0b:9f:68:c6:82:dc:ee:ef:16:73:07:
                    b3:51:e2:2e:e6:21:81:f5:33:7b:90:da:3b:a6:a6:
                    fc:89:12:0f:6d:b0:30:d8:c8:3b:17:e3:5b:86:c0:
                    ce:cb:bb:3a:7b:1b:22:13:1d:18:6c:69:fd:be:c8:
                    bf:ed:45:e6:95:27:bf:86:9e:af:c7:0f:d3:cf:1f:
                    f0:03:2e:d9:5d:c0:67:45:ef:ef:c1:0f:cd:ba:8c:
                    a7:44:37:56:92:60:0e:61:5f:8a:77:8b:4d:b1:f9:
                    0d:2d:cb:ef:b0:d4:c2:17:ce:6e:20:87:0a:db:b2:
                    e7:4f:6a:b3:c8:4b:74:f0:f7:a4:90:23:65:3e:8b:
                    4d:41:f0:f3:71:ad:a7:49:6b:ee:dd:ae:8f:ec:c5:
                    e9:37:af:8b:ef:25:db:3e:72:30:2f:cf:0e:0a:ff:
                    05:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C1:EF:8A:13:2E:D0:77:00:7E:E1:5B:E7:45:E1:05:0E:2C:2C:BB
            X509v3 Authority Key Identifier:
                keyid:51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e32382e302f32322d3232203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.25.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:39:d0:a7:e8:80:c4:b8:d2:05:18:28:7b:ad:5a:95:aa:c6:
         6f:9a:bd:24:0a:bd:90:74:74:b6:ec:51:47:20:f2:0b:eb:df:
         d4:3c:2d:a3:bb:bd:d3:80:2c:4f:14:ac:52:c5:d9:cc:5a:3a:
         1c:71:bd:2e:54:7e:2d:5a:f4:e6:b7:eb:df:98:32:4d:cd:00:
         8a:53:3d:87:34:d7:04:4f:84:20:de:68:61:5a:15:23:4b:4f:
         d4:e3:c0:3f:a7:b4:71:06:79:6c:7c:ed:d2:0c:76:b1:9e:d8:
         53:5f:fe:ec:f3:5a:e2:99:6e:8a:6f:95:f8:37:1c:96:e1:b4:
         54:af:a0:56:ea:1b:74:13:b8:b3:8d:bf:fe:44:30:05:5b:36:
         12:e1:c8:31:42:ce:aa:f9:f9:22:4f:db:f3:df:74:da:fa:81:
         23:31:13:3b:d3:55:d6:27:cb:0c:9f:03:4b:8c:bd:00:7e:0c:
         03:04:69:9b:9e:56:82:c0:d0:65:88:1e:40:5a:a9:ac:e8:ed:
         12:3a:d7:25:b7:0e:a5:eb:64:d3:66:7f:11:a7:b5:96:41:12:
         44:a5:03:14:a7:89:3e:f3:fb:d9:92:16:ac:87:56:3a:c8:47:
         30:97:e8:07:11:bb:99:d5:ee:4d:1d:ad:70:8c:e2:bc:33:9f:
         01:7a:79:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:44:54 2026 by rpki-client