Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e34382e302f32322d3232203d3e203233373234.roa
File:                     3137352e32352e34382e302f32322d3232203d3e203233373234.roa (raw, json)
Hash identifier:          FpkQlYuEIeEvGtpVrPLehFHhGq1YEbhdTCQz1ShlZt4=
Subject key identifier:   F2:61:95:69:53:54:5B:B0:6D:46:CD:BA:3E:E6:66:E6:AE:9B:C1:3E
Certificate issuer:       /CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Certificate serial:       FA16D3164390018DFDF508C8150C41637D8D7A
Authority key identifier: 51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e34382e302f32322d3232203d3e203233373234.roa
Signing time:             Tue 14 Apr 2026 06:46:50 +0000
ROA not before:           Tue 14 Apr 2026 06:41:50 +0000
ROA not after:            Tue 13 Apr 2027 06:46:50 +0000
asID:                     23724
IP address blocks:        175.25.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 09:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            fa:16:d3:16:43:90:01:8d:fd:f5:08:c8:15:0c:41:63:7d:8d:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
        Validity
            Not Before: Apr 14 06:41:50 2026 GMT
            Not After : Apr 13 06:46:50 2027 GMT
        Subject: CN=F261956953545BB06D46CDBA3EE666E6AE9BC13E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:31:86:71:b9:de:53:05:81:34:81:67:80:ff:
                    df:61:dd:88:b4:b3:a5:aa:bc:0d:f0:97:a4:07:a0:
                    da:bc:ed:11:16:99:78:68:74:48:3d:47:dc:89:f9:
                    ff:f0:30:08:59:1e:6b:d6:b2:5f:58:3d:8c:06:ff:
                    72:6d:0b:9a:bd:5f:db:2d:ea:f3:34:73:50:0f:92:
                    34:da:34:66:87:0e:2e:a3:da:03:50:74:43:8b:ef:
                    97:96:45:f6:b2:57:0f:43:1c:bb:83:2d:b2:db:96:
                    40:32:49:cf:37:cc:31:12:1a:c6:6b:02:d8:8e:48:
                    b5:31:a0:22:50:b4:45:64:a4:e4:36:8b:85:f7:44:
                    2a:4c:38:53:47:ab:64:3b:81:ce:0e:69:7f:bc:81:
                    02:84:fc:de:76:20:05:93:e8:5b:cd:ef:c3:f8:6a:
                    46:b5:cb:d5:e5:79:ac:5b:95:b3:00:05:9d:60:44:
                    51:47:6a:3d:5b:33:f3:93:2a:b8:01:7b:22:84:1e:
                    17:9a:2d:79:6a:a1:ca:5b:34:d5:c5:43:c8:a1:51:
                    8c:99:dd:3b:d6:a2:75:c0:d4:33:1b:8c:1e:bb:29:
                    d4:a9:41:95:37:cb:03:52:b4:df:aa:d9:f9:5e:20:
                    57:2c:f0:cf:61:99:52:44:ef:e4:84:ff:c0:64:50:
                    8e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:61:95:69:53:54:5B:B0:6D:46:CD:BA:3E:E6:66:E6:AE:9B:C1:3E
            X509v3 Authority Key Identifier:
                keyid:51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e34382e302f32322d3232203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.25.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:5a:9c:a3:96:7f:de:67:d7:08:24:90:d7:76:ee:95:3f:36:
         4e:09:ba:a6:25:ea:8a:d7:6d:cc:e0:ef:98:7f:cb:77:be:15:
         2b:bc:79:fd:0f:04:90:b5:5a:6a:5b:1a:7c:b9:35:7a:43:c2:
         ef:3d:16:02:b0:08:8a:1a:d4:7d:48:19:0c:97:a8:c5:15:bc:
         33:46:5d:11:53:24:ae:2c:a0:e2:95:12:eb:bd:8b:3c:3b:c1:
         a5:de:45:d0:1b:81:13:74:45:ae:21:4f:dc:be:34:e5:11:b1:
         30:ae:a6:bb:45:65:87:29:17:d9:7d:a2:dc:d4:bc:56:13:0c:
         1d:b0:92:0e:e2:05:3f:ea:01:b0:78:95:c2:db:72:a8:07:8f:
         58:06:8d:fd:74:47:bb:5a:3e:ac:43:7f:ad:bd:79:ea:1c:b4:
         0f:38:9e:1d:12:8d:36:dd:d3:be:a8:df:c5:26:f8:ea:b6:00:
         b4:e0:ad:60:11:62:98:5e:a9:c6:81:20:84:93:59:dd:d2:fb:
         64:48:1e:80:91:3a:cb:e4:64:59:bf:67:b2:09:7d:9e:45:f4:
         7a:75:86:b1:5c:ce:a2:3f:2d:c0:29:09:c2:e4:e3:d7:fb:f6:
         4f:b5:ae:b3:eb:2b:15:0e:72:0f:53:7a:17:71:4a:48:ce:93:
         f3:31:67:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:22:10 2026 by rpki-client