Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e34302e302f32312d3231203d3e2034383038.roa
File:                     3137352e32352e34302e302f32312d3231203d3e2034383038.roa (raw, json)
Hash identifier:          x0MKY6E8JEqhKR81jD+T+X8yRp1xzS9JhXhkei/PvIo=
Subject key identifier:   45:4B:63:5C:E2:17:C3:9C:74:50:5B:DA:2F:2D:F7:E6:CE:8A:3B:1D
Certificate issuer:       /CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Certificate serial:       56B754571AFE8D9F0F7150D058D2EE735DD5C5C5
Authority key identifier: 51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e34302e302f32312d3231203d3e2034383038.roa
Signing time:             Tue 14 Apr 2026 06:46:50 +0000
ROA not before:           Tue 14 Apr 2026 06:41:50 +0000
ROA not after:            Tue 13 Apr 2027 06:46:50 +0000
asID:                     4808
IP address blocks:        175.25.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 09:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b7:54:57:1a:fe:8d:9f:0f:71:50:d0:58:d2:ee:73:5d:d5:c5:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
        Validity
            Not Before: Apr 14 06:41:50 2026 GMT
            Not After : Apr 13 06:46:50 2027 GMT
        Subject: CN=454B635CE217C39C74505BDA2F2DF7E6CE8A3B1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c4:c3:f1:27:d3:30:1a:bc:1f:39:d4:93:b1:
                    46:b2:4a:ab:5a:9a:a9:61:01:6b:97:bf:36:4c:4d:
                    5f:5c:32:05:75:96:cf:ed:04:03:fc:e0:21:3e:b2:
                    86:43:6f:06:9d:41:a4:77:87:48:f9:04:1f:10:3f:
                    00:e4:e4:88:02:8b:eb:33:9c:6f:d3:42:3b:28:16:
                    93:02:43:b6:d5:11:93:14:f3:08:8e:62:1e:eb:f9:
                    fc:34:9c:c1:b6:f0:c8:2f:53:98:11:fe:c7:b7:c6:
                    68:ae:de:70:9f:08:11:d8:dd:60:7c:f4:4f:49:1f:
                    99:84:d7:77:e2:d0:06:85:14:7f:a7:52:66:69:4e:
                    ce:24:48:8f:0b:e3:b2:3a:3d:5f:d0:17:eb:44:1b:
                    91:cd:72:8f:f3:2d:e8:af:d7:55:70:b6:bd:5a:e9:
                    2d:3c:87:f7:64:6c:67:a9:c6:86:9e:59:02:ec:32:
                    7d:47:30:6b:e4:2b:ad:43:ec:5b:1e:fc:bc:bb:cc:
                    0c:f1:d9:d4:57:a4:20:74:b3:5f:96:01:6c:91:34:
                    95:30:00:e7:e0:09:a9:4b:29:ed:06:e9:95:0b:9e:
                    a6:f5:70:bd:fc:88:f2:f3:d1:46:80:4c:f8:bd:70:
                    1d:25:63:71:26:d1:8e:89:94:b3:78:23:e1:e5:b7:
                    73:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:4B:63:5C:E2:17:C3:9C:74:50:5B:DA:2F:2D:F7:E6:CE:8A:3B:1D
            X509v3 Authority Key Identifier:
                keyid:51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e34302e302f32312d3231203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.25.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         72:ab:f5:c3:ab:a0:6a:73:a2:42:b0:3a:ba:15:e4:c0:c4:30:
         82:1e:45:bd:66:b6:f2:97:6b:36:bf:db:15:d4:16:ca:ff:7d:
         36:ed:db:d6:f2:9e:9e:29:5c:93:c5:19:16:53:39:de:f3:ec:
         ed:21:15:8e:8f:49:30:02:eb:ea:d6:ad:8f:18:76:b3:e6:7f:
         5c:2e:b0:b8:7e:cc:a8:3d:e3:c9:03:9d:41:41:6e:79:d5:97:
         04:4a:14:0b:c8:ec:fa:a1:59:dc:d4:58:a7:ef:2e:d5:a1:af:
         61:4c:c2:67:37:24:9f:a6:a8:0c:30:36:d7:ee:1e:77:e2:7f:
         77:99:6e:63:88:ac:14:c7:f0:09:1e:b4:a8:40:8b:9c:79:18:
         c5:35:5e:40:b0:c9:d8:d8:2c:b6:73:10:17:ee:34:d5:5f:3a:
         f3:30:31:01:f3:dc:dc:fd:6a:01:15:9b:aa:f2:50:31:a0:09:
         1a:78:65:4b:44:84:b5:38:1e:0b:4d:bc:3d:25:ea:29:e9:8f:
         cc:96:82:33:26:0a:b5:5d:08:8f:8c:63:b5:e1:50:ed:f8:86:
         a9:b8:1b:d4:76:6d:9a:94:52:4e:c8:cb:4a:c9:5b:94:08:cd:
         8d:18:fa:29:3e:86:3e:a7:a6:1d:2f:c0:7c:bf:8d:f8:86:9d:
         a4:bc:bd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:02:58 2026 by rpki-client