Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e32382e302f32332d3233203d3e203233373234.roa
File:                     3137352e32352e32382e302f32332d3233203d3e203233373234.roa (raw, json)
Hash identifier:          JtJVgsQayQN+hMYBaHcv+HJBGVtY8+bnqocXNz7//wI=
Subject key identifier:   C4:C4:8B:D8:CA:2C:C8:B4:9F:5E:CE:7A:79:85:4C:C9:73:63:B3:2E
Certificate issuer:       /CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Certificate serial:       34E965CDE701E002319DB492AC27CF7F82BEA8B6
Authority key identifier: 51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e32382e302f32332d3233203d3e203233373234.roa
Signing time:             Tue 14 Apr 2026 06:46:49 +0000
ROA not before:           Tue 14 Apr 2026 06:41:49 +0000
ROA not after:            Tue 13 Apr 2027 06:46:49 +0000
asID:                     23724
IP address blocks:        175.25.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 09:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e9:65:cd:e7:01:e0:02:31:9d:b4:92:ac:27:cf:7f:82:be:a8:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
        Validity
            Not Before: Apr 14 06:41:49 2026 GMT
            Not After : Apr 13 06:46:49 2027 GMT
        Subject: CN=C4C48BD8CA2CC8B49F5ECE7A79854CC97363B32E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b3:86:6a:35:69:87:18:7e:ca:e7:4d:6a:f5:
                    db:9f:76:de:1b:ae:50:62:2c:c8:8c:84:86:35:a0:
                    5d:74:f6:a8:d9:4c:64:6b:7a:9f:aa:e2:18:d6:c1:
                    93:94:60:8e:72:6b:2e:35:9e:10:1e:a0:b0:b0:4f:
                    9f:27:28:61:84:5d:17:fa:2b:5e:19:10:88:9c:0a:
                    0b:a6:f4:16:b0:48:24:82:e9:eb:0b:92:d7:6b:cd:
                    35:58:89:81:70:83:7e:49:de:f8:1a:60:1e:45:04:
                    4b:a5:4d:d3:37:d7:d7:b8:ec:16:a2:d1:d2:46:da:
                    f6:65:e2:b5:e9:c1:a5:25:45:e5:58:6c:0d:62:f9:
                    d3:67:cc:f7:24:1b:00:6e:ff:5d:33:8b:e4:b2:e6:
                    a5:e0:be:99:90:f3:e2:94:27:01:3f:26:ea:cc:1c:
                    ac:38:43:9e:c5:49:9c:18:43:67:77:89:81:e9:70:
                    3a:82:ae:21:d6:f2:20:5d:ce:b1:e5:16:c6:cd:4f:
                    01:9c:b0:07:47:46:e0:4d:08:50:62:0a:3e:06:c8:
                    d5:f7:7d:41:d7:a9:fe:7d:4c:5b:61:b4:b3:be:53:
                    7f:af:89:1f:f9:80:84:c7:fd:7f:46:bb:c9:45:6e:
                    e5:48:8f:3f:72:77:d0:19:e8:d9:21:e8:12:26:0b:
                    b4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C4:8B:D8:CA:2C:C8:B4:9F:5E:CE:7A:79:85:4C:C9:73:63:B3:2E
            X509v3 Authority Key Identifier:
                keyid:51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e32382e302f32332d3233203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.25.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:3f:0e:f2:16:e2:d9:da:8d:4e:ff:00:11:83:70:87:32:0c:
         c3:1f:45:21:c4:8f:2a:05:dd:b2:b5:b0:3f:ec:a0:f8:68:4d:
         b7:13:ba:8d:f1:47:b3:40:47:5d:07:d5:e2:3e:ec:f8:aa:b7:
         0b:2e:4a:a0:dc:9a:74:af:2a:36:f7:77:59:fb:45:6a:d0:ac:
         47:9d:5f:9f:3b:66:b4:ef:2a:0b:eb:30:4d:e5:eb:ef:af:e1:
         8a:58:1f:ea:88:3f:ca:0d:9c:7f:81:a6:37:41:0d:b2:10:16:
         a6:4a:4a:fd:d8:ab:08:99:01:9d:8f:32:c0:df:8e:a9:6b:4b:
         7d:d4:c7:48:aa:a6:36:03:c7:a9:73:80:f1:27:5a:d6:2e:7a:
         2c:89:79:f4:42:ae:c1:1f:37:4f:d2:14:c4:d6:6f:65:ce:6a:
         fe:ee:2e:1c:da:8a:00:cb:1f:75:fb:32:bd:f8:ba:80:ed:dc:
         6a:56:af:fb:dd:2d:e7:b5:1f:33:4a:bd:fa:7e:ec:6c:53:b0:
         cc:f6:36:82:e3:70:24:7e:6d:70:bc:d2:f4:c4:66:42:0c:47:
         d3:af:d4:18:59:14:c3:1d:64:17:99:fe:c4:e8:97:58:81:d1:
         60:aa:4f:52:42:5b:b8:52:f1:be:9d:a6:e6:c3:c3:f0:d9:46:
         0c:9f:19:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:55:42 2026 by rpki-client