Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e35302e302f32332d3233203d3e203536303139.roa
File:                     3137352e32352e35302e302f32332d3233203d3e203536303139.roa (raw, json)
Hash identifier:          efff2fF2gG2hg4WrvTfla4A+w+jwe15CqFJUwei3Oqk=
Subject key identifier:   CF:CC:CB:35:28:42:AA:61:B2:C7:F3:18:03:09:06:D5:AB:A8:C5:6F
Certificate issuer:       /CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Certificate serial:       3C1FC54E6A6A08DCC9CCA44C01E047DCF7F5B2DA
Authority key identifier: 51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e35302e302f32332d3233203d3e203536303139.roa
Signing time:             Tue 14 Apr 2026 06:41:54 +0000
ROA not before:           Tue 14 Apr 2026 06:36:54 +0000
ROA not after:            Tue 13 Apr 2027 06:41:54 +0000
asID:                     56019
IP address blocks:        175.25.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 09:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:1f:c5:4e:6a:6a:08:dc:c9:cc:a4:4c:01:e0:47:dc:f7:f5:b2:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
        Validity
            Not Before: Apr 14 06:36:54 2026 GMT
            Not After : Apr 13 06:41:54 2027 GMT
        Subject: CN=CFCCCB352842AA61B2C7F318030906D5ABA8C56F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:20:c3:6d:34:59:ba:83:48:ad:08:42:1e:2a:
                    f0:c7:33:ba:bf:16:4b:4c:a3:04:bb:d4:bc:fc:fa:
                    1f:31:03:aa:7d:10:9b:ec:f0:4e:f8:ce:5c:b6:79:
                    75:bb:c6:01:a8:33:06:a7:f0:8d:71:72:72:e8:6a:
                    70:fa:97:31:61:bc:3b:a4:11:59:59:75:73:12:c8:
                    81:e0:40:28:17:c2:24:11:a0:92:ac:50:c0:9e:16:
                    d0:e8:a1:34:a6:44:75:75:c3:ca:15:1d:99:35:a0:
                    10:22:8c:fb:c5:36:18:33:1c:8e:1d:12:19:70:cc:
                    8e:ae:8d:25:2f:00:9b:f4:00:36:3e:84:1f:fb:7f:
                    32:86:ee:1d:33:00:89:61:67:31:24:d0:5f:d8:70:
                    4a:dc:ab:6b:d2:51:dc:33:b8:59:9a:a1:75:f4:3b:
                    21:7b:7a:13:bc:cb:d9:d8:62:79:c0:9e:4d:8a:e5:
                    91:dd:70:71:19:07:e1:de:d9:61:22:88:26:16:e2:
                    87:53:1d:cc:51:dd:0b:96:f4:d1:35:43:8f:e6:14:
                    9e:8e:36:1d:d6:bd:36:09:b2:5a:9e:55:a9:d7:10:
                    d0:70:31:fb:82:c9:65:6d:77:d9:1a:ad:35:2e:06:
                    2a:62:c0:d2:63:b5:01:3b:41:5d:1c:e7:32:49:44:
                    f5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CC:CB:35:28:42:AA:61:B2:C7:F3:18:03:09:06:D5:AB:A8:C5:6F
            X509v3 Authority Key Identifier:
                keyid:51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e35302e302f32332d3233203d3e203536303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.25.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:dd:c7:e5:57:07:56:dd:c7:85:8b:c7:49:09:c5:0e:2e:d8:
         d1:5a:10:3d:ca:0d:fc:f8:78:9c:39:42:e2:6d:bb:50:28:1b:
         04:61:55:ba:88:bf:65:33:14:52:b0:bb:99:e4:46:b3:65:21:
         90:f3:51:ea:14:61:77:bb:2f:15:3e:9c:48:e3:24:a6:5b:77:
         fb:3f:6b:3e:a3:64:87:70:de:7b:99:3d:dc:f4:f0:48:18:d6:
         5c:13:72:d4:dc:57:4b:4a:92:f3:8b:c4:a2:b1:8a:1a:76:5a:
         44:74:52:61:b4:b5:53:bd:b0:a1:c0:9a:ce:98:01:a9:34:0c:
         70:45:5e:82:64:a1:aa:89:e8:f2:6c:b3:47:63:d8:50:aa:20:
         3d:21:ca:a7:58:e3:bc:3b:89:d8:1b:e7:93:3f:f0:76:39:bf:
         f5:e1:8c:90:ca:b0:d9:3a:d9:dd:c6:87:0b:16:0f:e4:a8:c1:
         38:ff:42:92:2c:c7:00:d8:56:55:26:01:f3:7a:f9:7f:11:84:
         c0:9b:24:33:94:83:13:2f:f2:73:1b:c5:0c:03:0e:39:30:c6:
         6f:fa:11:ba:32:6e:3e:df:ce:2f:07:9d:5d:2c:02:8d:cd:2f:
         12:4c:1d:33:2d:be:ff:96:ee:00:ea:5f:ce:eb:45:cf:e2:4c:
         0a:36:da:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:44:58 2026 by rpki-client