Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e33322e302f32312d3231203d3e2034383038.roa
File:                     3137352e32352e33322e302f32312d3231203d3e2034383038.roa (raw, json)
Hash identifier:          YwNtkqPGd78pQ8wxzLdUEE713anbTgvq01Y0FsfpJic=
Subject key identifier:   69:9B:97:82:45:CC:83:29:A5:55:93:20:EC:D1:A8:A4:43:14:57:17
Certificate issuer:       /CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Certificate serial:       3769D7162C751ACBD983C0CBE77A0893740E0C6B
Authority key identifier: 51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e33322e302f32312d3231203d3e2034383038.roa
Signing time:             Tue 14 Apr 2026 06:46:50 +0000
ROA not before:           Tue 14 Apr 2026 06:41:50 +0000
ROA not after:            Tue 13 Apr 2027 06:46:50 +0000
asID:                     4808
IP address blocks:        175.25.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 09:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:69:d7:16:2c:75:1a:cb:d9:83:c0:cb:e7:7a:08:93:74:0e:0c:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
        Validity
            Not Before: Apr 14 06:41:50 2026 GMT
            Not After : Apr 13 06:46:50 2027 GMT
        Subject: CN=699B978245CC8329A5559320ECD1A8A443145717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:49:43:a1:43:3b:07:93:64:c8:2e:8b:e3:5b:
                    26:d7:3a:15:6b:29:d9:02:00:08:07:ca:9b:3b:6d:
                    87:f9:fb:81:6b:6e:1f:63:ec:49:a4:47:4c:50:73:
                    38:8b:0c:ef:44:9c:58:01:7a:b7:b3:fd:68:d9:9b:
                    3f:73:0b:40:d6:6d:19:02:1c:9d:5a:ff:87:6d:fe:
                    f5:34:46:c4:b2:2b:7a:f3:39:00:d0:29:82:b0:55:
                    66:e2:e6:6f:29:60:ea:1d:7d:fa:7d:ff:11:3e:84:
                    c4:95:7d:06:89:0d:09:0a:45:a3:f0:af:c7:91:4c:
                    a1:be:c2:e1:51:a1:fc:c0:c9:2e:b5:71:51:82:4b:
                    a9:f1:13:91:de:27:b2:24:27:8f:a4:f7:e8:79:27:
                    52:3f:92:ab:1e:95:e6:51:2f:58:d4:a6:61:d6:55:
                    d4:8f:bf:36:dd:50:a2:a2:b8:a8:b4:88:a4:66:a6:
                    78:49:14:7c:d4:cb:13:1e:7d:70:0a:9b:87:25:e7:
                    f1:f4:33:0f:e8:2f:1e:33:0b:5c:43:5f:a2:e1:67:
                    3a:6d:ab:20:de:0c:24:3d:44:2e:77:92:6c:0b:62:
                    b3:53:e5:fd:ca:d7:14:c7:a3:ca:71:23:44:e8:37:
                    da:07:46:19:78:ec:6d:92:07:6f:48:70:19:a5:77:
                    10:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9B:97:82:45:CC:83:29:A5:55:93:20:EC:D1:A8:A4:43:14:57:17
            X509v3 Authority Key Identifier:
                keyid:51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e33322e302f32312d3231203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.25.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         88:11:32:d3:1b:13:1f:82:1c:bf:0c:89:95:19:33:fb:0c:d2:
         b9:ef:e4:f2:c3:a0:0c:08:4e:ce:88:c7:71:b6:a8:b6:8f:d9:
         d8:5b:7d:e9:c2:a4:94:69:a1:88:a4:3c:d3:3d:38:4e:b2:e8:
         cd:ac:00:aa:48:df:54:a1:21:2c:83:65:15:c1:aa:db:72:c1:
         a8:5d:da:8c:c4:69:2b:af:02:59:36:d9:69:9a:f5:ac:94:1f:
         ab:bb:26:e1:15:cb:bd:6e:9b:47:5b:f6:ac:1d:6f:96:76:13:
         38:dd:84:b1:6e:51:67:02:87:ce:d2:9a:55:0d:28:03:e6:67:
         ff:73:51:73:95:9e:44:13:23:cc:7f:2a:e4:2c:7d:d4:12:a3:
         84:11:b7:69:17:29:a9:fe:1a:68:39:f5:19:e4:87:a3:db:fe:
         fd:c3:3c:4f:be:ab:ff:12:55:2f:64:b5:35:0e:d3:8a:80:35:
         f6:d0:95:dc:9a:d3:9d:b1:29:a4:b0:1c:be:25:3b:80:7f:62:
         2b:3a:0b:ef:f4:00:dc:a5:c8:a6:d1:61:73:fd:72:c5:dc:dd:
         d8:0c:14:17:58:db:31:e7:f4:a2:ee:cd:25:d8:f0:68:ed:9d:
         6b:b7:91:a3:a8:e7:85:33:82:99:cb:88:9f:f1:93:c8:4d:0a:
         ea:43:80:47
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUN2nXFix1GsvZg8DL53oIk3QODGswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTExNzlENjc1QzNDQjU2QTJENDRBQTYwRkEyQjkzMzBB
MEMwNjY4MDAeFw0yNjA0MTQwNjQxNTBaFw0yNzA0MTMwNjQ2NTBaMDMxMTAvBgNV
BAMTKDY5OUI5NzgyNDVDQzgzMjlBNTU1OTMyMEVDRDFBOEE0NDMxNDU3MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmSUOhQzsHk2TILovjWybXOhVr
KdkCAAgHyps7bYf5+4Frbh9j7EmkR0xQcziLDO9EnFgBerez/WjZmz9zC0DWbRkC
HJ1a/4dt/vU0RsSyK3rzOQDQKYKwVWbi5m8pYOodffp9/xE+hMSVfQaJDQkKRaPw
r8eRTKG+wuFRofzAyS61cVGCS6nxE5HeJ7IkJ4+k9+h5J1I/kqseleZRL1jUpmHW
VdSPvzbdUKKiuKi0iKRmpnhJFHzUyxMefXAKm4cl5/H0Mw/oLx4zC1xDX6LhZzpt
qyDeDCQ9RC53kmwLYrNT5f3K1xTHo8pxI0ToN9oHRhl47G2SB29IcBmldxDHAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUaZuXgkXMgymlVZMg7NGopEMUVxcwHwYDVR0j
BBgwFoAUURedZ1w8tWotRKpg+iuTMKDAZoAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjI3NjU5ODY5ODYwNjU5NS8wLzUxMTc5RDY3NUMzQ0I1NkEyRDQ0QUE2MEZBMkI5
MzMwQTBDMDY2ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTExNzlENjc1QzNDQjU2QTJENDRBQTYwRkEyQjkzMzBBMEMwNjY4MC5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2Mjc2NTk4Njk4NjA2NTk1LzAvMzEzNzM1MmUzMjM1
MmUzMzMyMmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzQzODMwMzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAOvGSAwDQYJKoZIhvcNAQELBQADggEBAIgRMtMbEx+CHL8MiZUZM/sM0rnv5PLD
oAwITs6Ix3G2qLaP2dhbfenCpJRpoYikPNM9OE6y6M2sAKpI31ShISyDZRXBqtty
wahd2ozEaSuvAlk22Wma9ayUH6u7JuEVy71um0db9qwdb5Z2EzjdhLFuUWcCh87S
mlUNKAPmZ/9zUXOVnkQTI8x/KuQsfdQSo4QRt2kXKan+Gmg59Rnkh6Pb/v3DPE++
q/8SVS9ktTUO04qANfbQldya052xKaSwHL4lO4B/Yis6C+/0ANylyKbRYXP9csXc
3dgMFBdY2zHn9KLuzSXY8GjtnWu3kaOo54UzgpnLiJ/xk8hNCupDgEc=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:53:38 2026 by rpki-client