Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e33302e302f32332d3233203d3e203233373234.roa
File:                     3137352e32352e33302e302f32332d3233203d3e203233373234.roa (raw, json)
Hash identifier:          b6hZCfQh9uDuGmi16oVdPqS3V+Ki8uFUHWq0eO/YDr4=
Subject key identifier:   A0:8D:6F:BE:3F:27:DA:6B:70:71:0E:9B:E0:D9:4A:2E:24:34:48:6D
Certificate issuer:       /CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Certificate serial:       546A24BF32288FDE93506EBC77EF010846DC58DD
Authority key identifier: 51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e33302e302f32332d3233203d3e203233373234.roa
Signing time:             Tue 14 Apr 2026 06:46:49 +0000
ROA not before:           Tue 14 Apr 2026 06:41:49 +0000
ROA not after:            Tue 13 Apr 2027 06:46:49 +0000
asID:                     23724
IP address blocks:        175.25.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:6a:24:bf:32:28:8f:de:93:50:6e:bc:77:ef:01:08:46:dc:58:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
        Validity
            Not Before: Apr 14 06:41:49 2026 GMT
            Not After : Apr 13 06:46:49 2027 GMT
        Subject: CN=A08D6FBE3F27DA6B70710E9BE0D94A2E2434486D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:da:7d:20:b8:a1:fa:ca:79:d8:23:06:d1:b0:
                    dc:eb:87:ac:74:13:b4:2a:b2:fd:82:db:f6:9a:01:
                    e5:84:76:83:5e:4e:f9:1a:db:8c:89:1f:23:ca:ab:
                    9c:4d:10:e5:74:f0:81:58:d3:86:f3:d7:b2:e7:da:
                    3a:3a:42:6a:aa:2b:09:c7:4e:d0:92:d5:29:d0:7e:
                    1b:e1:ee:b0:a3:e3:e5:ff:4f:c1:1c:06:1c:d1:d9:
                    e0:fd:a7:79:62:e7:48:74:40:bd:a2:fa:8c:cf:ea:
                    f4:88:57:bc:55:ce:89:93:62:50:23:03:e2:a1:34:
                    5d:f3:73:ef:34:d9:66:c1:d4:c9:52:fb:54:32:6d:
                    eb:86:52:d5:dd:de:30:30:7b:ed:49:8d:38:42:3b:
                    d0:bf:39:10:fa:8c:86:2d:c0:84:95:5e:0c:aa:25:
                    04:f3:ce:c8:f0:34:30:7c:5d:66:cb:b3:0d:24:a6:
                    94:cd:fd:cb:e6:36:5a:f0:b3:a7:03:be:86:15:e3:
                    2b:9d:32:2b:0e:19:ad:21:26:dd:d4:e3:a4:53:5a:
                    09:80:d9:4c:a5:62:26:d9:0b:d9:10:9b:e8:01:c6:
                    70:d7:70:d7:92:ae:c5:a5:19:ab:3e:07:55:6c:39:
                    67:6e:bc:c3:7b:06:24:05:0f:52:4e:44:fe:60:eb:
                    6a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8D:6F:BE:3F:27:DA:6B:70:71:0E:9B:E0:D9:4A:2E:24:34:48:6D
            X509v3 Authority Key Identifier:
                keyid:51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e33302e302f32332d3233203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.25.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:6f:2c:3c:02:82:7b:c1:d6:94:bf:33:1d:53:be:fd:d0:e7:
         5c:99:b9:51:ef:10:48:74:c5:e1:4a:54:1e:b9:a5:ad:23:ad:
         c6:11:f7:58:94:90:58:b3:c7:0f:85:ca:37:80:46:58:2e:a3:
         cf:90:f8:55:94:da:18:e0:06:7d:ff:8c:96:61:d3:44:e9:f6:
         dc:c1:9b:3c:b8:fb:8e:57:5f:f5:62:76:21:d0:5f:4a:f9:58:
         51:ee:30:e8:57:0b:2c:bb:97:e9:9f:b4:e2:2b:f8:55:d5:b6:
         c8:8f:a4:25:5a:d7:ae:e3:4a:8b:69:a5:8e:a0:5c:14:2f:fe:
         ee:d4:11:2b:fd:80:95:6c:e3:8a:53:6f:a4:c7:ce:c6:d6:bd:
         b8:a6:9a:5e:77:b7:b2:7b:b4:3f:e9:14:a7:6a:54:fe:e5:81:
         fa:a2:01:d7:c3:52:74:2f:7c:6c:d7:16:f7:dd:e5:1f:ff:b2:
         0d:82:c2:a7:6b:22:df:7f:1c:85:fa:86:c3:18:e9:8f:a2:a2:
         1f:b9:f3:31:d4:34:d9:3d:73:ef:88:da:82:8e:b7:11:4e:5c:
         52:6e:e2:4a:5a:20:98:7b:8a:71:6d:c1:6b:49:49:ad:f2:45:
         83:e3:16:29:fc:98:80:2d:3e:e6:c6:4b:f0:b2:e0:50:83:af:
         f9:42:53:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:13:21 2026 by rpki-client