Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e33362e302f32322d3232203d3e203536303139.roa
File:                     3137352e32352e33362e302f32322d3232203d3e203536303139.roa (raw, json)
Hash identifier:          jVjS6kpZ1c2qRggLBbmRI3tHkGivANuy8gkpUyu2txY=
Subject key identifier:   61:A7:75:9F:8F:56:62:F5:FA:84:74:E1:B7:A1:DA:14:82:BE:6A:31
Certificate issuer:       /CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Certificate serial:       3C6DACFE0D922B5EBF0BC9B109BED8997E0F8658
Authority key identifier: 51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e33362e302f32322d3232203d3e203536303139.roa
Signing time:             Tue 14 Apr 2026 06:46:49 +0000
ROA not before:           Tue 14 Apr 2026 06:41:49 +0000
ROA not after:            Tue 13 Apr 2027 06:46:49 +0000
asID:                     56019
IP address blocks:        175.25.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 09:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:6d:ac:fe:0d:92:2b:5e:bf:0b:c9:b1:09:be:d8:99:7e:0f:86:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
        Validity
            Not Before: Apr 14 06:41:49 2026 GMT
            Not After : Apr 13 06:46:49 2027 GMT
        Subject: CN=61A7759F8F5662F5FA8474E1B7A1DA1482BE6A31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:93:6a:58:d8:a1:75:ff:99:ad:b8:2a:b4:c0:
                    fe:21:9f:c9:9a:db:84:ce:8d:2e:87:a7:41:19:7a:
                    15:a3:de:9d:eb:17:a7:96:b1:28:3d:7f:1e:6f:5f:
                    6a:64:07:ab:eb:50:09:99:87:86:65:62:28:2d:c4:
                    74:71:5c:e6:3a:cd:06:e6:fc:78:b5:87:ce:c3:ae:
                    e4:69:0c:25:b0:ad:23:5e:e1:22:7c:2a:cd:05:2f:
                    1e:5a:b4:77:78:15:ea:8c:a1:49:d5:76:55:97:12:
                    69:0b:d3:cf:01:d0:b7:19:21:2b:39:2d:74:f2:97:
                    21:d7:91:86:1d:12:48:76:b2:a8:f4:56:cd:45:6a:
                    60:03:bb:e0:cc:cd:7f:54:5c:9c:49:2b:01:96:d1:
                    a5:ea:aa:af:b3:a7:70:ce:65:1a:76:34:5e:c2:db:
                    e4:1f:f0:03:3f:67:f5:3f:c7:0d:16:4f:0e:7b:c6:
                    0a:52:30:69:58:5b:7c:05:64:81:a5:bd:49:be:4e:
                    31:1c:a1:3b:80:1a:6b:d7:bd:f5:ca:29:94:8e:ab:
                    c5:89:03:f7:bd:6c:a9:c0:c3:f9:e8:91:92:d1:8f:
                    55:e8:c9:b7:00:3a:5d:cc:59:3d:14:f2:8e:65:03:
                    e6:e0:94:9f:dd:73:25:50:4a:dd:58:50:be:33:e0:
                    42:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A7:75:9F:8F:56:62:F5:FA:84:74:E1:B7:A1:DA:14:82:BE:6A:31
            X509v3 Authority Key Identifier:
                keyid:51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e33362e302f32322d3232203d3e203536303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.25.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:10:9b:f6:39:05:a5:88:1f:2b:f4:b8:4f:75:59:cb:aa:ce:
         ca:6a:fe:eb:22:b7:65:6c:2c:9e:0f:ef:df:62:03:87:44:29:
         35:f7:04:db:76:f9:8c:c7:67:86:54:02:22:4d:81:13:9c:89:
         2a:93:9f:73:66:d8:e9:fa:04:2a:1e:de:a1:c8:63:4e:fe:7b:
         16:71:17:51:37:3b:40:fb:d2:c5:d9:b5:dc:d0:a0:8e:82:ca:
         23:fa:82:e3:21:85:a9:29:11:58:d5:73:4c:c6:bc:d8:cf:49:
         d9:bc:5a:9a:53:4d:68:fa:22:bf:a3:1c:58:cf:27:30:d1:08:
         23:a9:0c:02:32:77:82:00:8d:f3:76:48:f9:52:79:9b:6b:52:
         fb:f7:30:f7:b9:69:ba:9d:ed:37:da:a6:9c:93:a2:3a:14:7e:
         4c:08:e9:d2:0a:b7:06:6d:32:a1:ab:cc:08:27:83:67:e5:bd:
         52:e9:29:fb:52:ba:c2:90:24:9f:91:06:9e:07:04:62:76:d1:
         05:00:f1:58:44:e5:24:88:2e:35:05:52:9e:f9:1e:76:12:01:
         60:b3:52:67:38:5a:3e:da:3c:1a:c3:d1:5b:5b:25:70:8c:28:
         01:a6:f1:d3:78:fe:e7:25:de:e9:c8:31:b8:43:e4:32:13:7a:
         17:c9:68:e4
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUPG2s/g2SK16/C8mxCb7YmX4PhlgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTExNzlENjc1QzNDQjU2QTJENDRBQTYwRkEyQjkzMzBB
MEMwNjY4MDAeFw0yNjA0MTQwNjQxNDlaFw0yNzA0MTMwNjQ2NDlaMDMxMTAvBgNV
BAMTKDYxQTc3NTlGOEY1NjYyRjVGQTg0NzRFMUI3QTFEQTE0ODJCRTZBMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+k2pY2KF1/5mtuCq0wP4hn8ma
24TOjS6Hp0EZehWj3p3rF6eWsSg9fx5vX2pkB6vrUAmZh4ZlYigtxHRxXOY6zQbm
/Hi1h87DruRpDCWwrSNe4SJ8Ks0FLx5atHd4FeqMoUnVdlWXEmkL088B0LcZISs5
LXTylyHXkYYdEkh2sqj0Vs1FamADu+DMzX9UXJxJKwGW0aXqqq+zp3DOZRp2NF7C
2+Qf8AM/Z/U/xw0WTw57xgpSMGlYW3wFZIGlvUm+TjEcoTuAGmvXvfXKKZSOq8WJ
A/e9bKnAw/nokZLRj1XoybcAOl3MWT0U8o5lA+bglJ/dcyVQSt1YUL4z4ELXAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUYad1n49WYvX6hHTht6HaFIK+ajEwHwYDVR0j
BBgwFoAUURedZ1w8tWotRKpg+iuTMKDAZoAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjI3NjU5ODY5ODYwNjU5NS8wLzUxMTc5RDY3NUMzQ0I1NkEyRDQ0QUE2MEZBMkI5
MzMwQTBDMDY2ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTExNzlENjc1QzNDQjU2QTJENDRBQTYwRkEyQjkzMzBBMEMwNjY4MC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2Mjc2NTk4Njk4NjA2NTk1LzAvMzEzNzM1MmUzMjM1
MmUzMzM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzNjMwMzEzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAq8ZJDANBgkqhkiG9w0BAQsFAAOCAQEAcRCb9jkFpYgfK/S4T3VZy6rOymr+
6yK3ZWwsng/v32IDh0QpNfcE23b5jMdnhlQCIk2BE5yJKpOfc2bY6foEKh7eochj
Tv57FnEXUTc7QPvSxdm13NCgjoLKI/qC4yGFqSkRWNVzTMa82M9J2bxamlNNaPoi
v6McWM8nMNEII6kMAjJ3ggCN83ZI+VJ5m2tS+/cw97lpup3tN9qmnJOiOhR+TAjp
0gq3Bm0yoavMCCeDZ+W9Uukp+1K6wpAkn5EGngcEYnbRBQDxWETlJIguNQVSnvke
dhIBYLNSZzhaPto8GsPRW1slcIwoAabx03j+5yXe6cgxuEPkMhN6F8lo5A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:54:13 2026 by rpki-client