Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e35362e302f32332d3233203d3e203536303139.roa
File:                     3137352e32352e35362e302f32332d3233203d3e203536303139.roa (raw, json)
Hash identifier:          EiQDp4UpZ1aNrhc8/YxjVWF7NsCSPrkgD/ncM9Xijz0=
Subject key identifier:   EC:06:15:FD:83:61:99:AF:63:27:CB:64:1B:59:44:48:99:6C:BB:FD
Certificate issuer:       /CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Certificate serial:       1840138598073FE66C77921614E2840269B3879D
Authority key identifier: 51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e35362e302f32332d3233203d3e203536303139.roa
Signing time:             Tue 14 Apr 2026 06:46:50 +0000
ROA not before:           Tue 14 Apr 2026 06:41:50 +0000
ROA not after:            Tue 13 Apr 2027 06:46:50 +0000
asID:                     56019
IP address blocks:        175.25.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 09:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:40:13:85:98:07:3f:e6:6c:77:92:16:14:e2:84:02:69:b3:87:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
        Validity
            Not Before: Apr 14 06:41:50 2026 GMT
            Not After : Apr 13 06:46:50 2027 GMT
        Subject: CN=EC0615FD836199AF6327CB641B594448996CBBFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e1:a2:b2:44:10:21:e9:4c:22:c0:f8:e8:de:
                    a3:93:78:91:8c:e2:3a:ac:88:1f:7f:20:f6:d3:bd:
                    db:14:04:77:c6:f4:7e:43:06:b5:29:23:bd:b0:8a:
                    c7:ac:4c:90:05:67:ea:0b:62:55:ee:79:41:45:95:
                    d4:42:f2:d9:10:21:dc:04:23:ac:03:ac:99:89:16:
                    b9:9b:89:7c:f4:7c:47:3b:c9:00:79:89:c4:83:4b:
                    69:a2:33:f8:a1:24:b8:b2:ee:3c:b2:af:fb:9f:99:
                    ad:e3:0c:06:86:ae:11:09:50:ae:b7:86:98:24:ca:
                    5f:a3:fb:85:20:66:14:9d:f5:ea:ac:05:f3:89:80:
                    70:ca:e8:63:74:ce:34:88:4c:cf:7d:36:a0:cf:9c:
                    a3:8e:ab:56:c0:f7:c8:1f:4e:e3:e4:ee:b2:f1:d1:
                    8b:f1:02:43:59:c6:0f:27:fe:ab:34:75:bb:12:78:
                    3a:d4:42:f1:f2:22:e5:32:b3:35:d5:cf:a5:16:ae:
                    5d:c7:04:f9:81:b1:e0:23:f3:6d:91:c5:1f:e8:aa:
                    2c:cb:03:ef:f7:1e:07:35:e8:aa:35:bc:88:41:fb:
                    d9:17:2a:46:8b:ce:b4:a5:9a:3d:87:42:c9:f7:c0:
                    3f:3b:21:bd:b5:8c:f0:4e:b9:62:4f:12:11:28:61:
                    27:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:06:15:FD:83:61:99:AF:63:27:CB:64:1B:59:44:48:99:6C:BB:FD
            X509v3 Authority Key Identifier:
                keyid:51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e35362e302f32332d3233203d3e203536303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.25.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:45:7e:18:19:b8:d6:b7:9a:ca:64:de:be:5d:d3:cf:87:d8:
         43:92:58:84:ae:a1:30:76:44:7e:e2:9c:16:bf:60:c4:e3:ea:
         29:53:84:bc:7b:38:ce:5e:c9:64:9e:1c:a4:ee:73:ec:81:17:
         99:01:03:ac:ad:49:f8:b7:ae:94:3d:84:1a:83:16:48:80:64:
         ea:b9:ef:2d:58:b4:ad:71:51:29:bc:f8:2f:2e:77:3f:cf:fb:
         1b:26:f0:77:33:9e:29:28:c2:51:8e:9c:ca:9d:39:46:6e:ab:
         4d:d6:2f:a3:6a:64:02:d0:80:68:35:0e:9e:3f:61:41:e0:48:
         ce:05:d8:f4:d5:a1:ac:8a:27:85:ba:62:12:b3:28:4a:b7:8a:
         e5:eb:bf:20:6c:c2:40:e6:5d:ea:eb:b0:de:0f:04:b6:16:98:
         9d:4c:d3:d5:39:23:b7:af:39:56:e8:43:12:c9:f5:38:2d:2b:
         d2:78:24:85:91:32:82:e4:11:97:d7:0a:d8:9a:ca:37:6a:5d:
         2a:b2:37:87:e0:28:ef:37:00:3c:50:d3:fe:41:2f:ef:c2:0d:
         15:9a:8f:08:e4:05:e1:20:a6:a2:1d:9d:ab:02:b4:c6:a6:f2:
         62:0a:6e:cb:54:f0:07:3f:1c:2a:25:34:40:a0:95:cc:f0:a4:
         b2:4c:79:cc
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUGEAThZgHP+Zsd5IWFOKEAmmzh50wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTExNzlENjc1QzNDQjU2QTJENDRBQTYwRkEyQjkzMzBB
MEMwNjY4MDAeFw0yNjA0MTQwNjQxNTBaFw0yNzA0MTMwNjQ2NTBaMDMxMTAvBgNV
BAMTKEVDMDYxNUZEODM2MTk5QUY2MzI3Q0I2NDFCNTk0NDQ4OTk2Q0JCRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF4aKyRBAh6UwiwPjo3qOTeJGM
4jqsiB9/IPbTvdsUBHfG9H5DBrUpI72wisesTJAFZ+oLYlXueUFFldRC8tkQIdwE
I6wDrJmJFrmbiXz0fEc7yQB5icSDS2miM/ihJLiy7jyyr/ufma3jDAaGrhEJUK63
hpgkyl+j+4UgZhSd9eqsBfOJgHDK6GN0zjSITM99NqDPnKOOq1bA98gfTuPk7rLx
0YvxAkNZxg8n/qs0dbsSeDrUQvHyIuUyszXVz6UWrl3HBPmBseAj822RxR/oqizL
A+/3Hgc16Ko1vIhB+9kXKkaLzrSlmj2HQsn3wD87Ib21jPBOuWJPEhEoYSf7AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU7AYV/YNhma9jJ8tkG1lESJlsu/0wHwYDVR0j
BBgwFoAUURedZ1w8tWotRKpg+iuTMKDAZoAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjI3NjU5ODY5ODYwNjU5NS8wLzUxMTc5RDY3NUMzQ0I1NkEyRDQ0QUE2MEZBMkI5
MzMwQTBDMDY2ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTExNzlENjc1QzNDQjU2QTJENDRBQTYwRkEyQjkzMzBBMEMwNjY4MC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2Mjc2NTk4Njk4NjA2NTk1LzAvMzEzNzM1MmUzMjM1
MmUzNTM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzNjMwMzEzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAa8ZODANBgkqhkiG9w0BAQsFAAOCAQEAdkV+GBm41reaymTevl3Tz4fYQ5JY
hK6hMHZEfuKcFr9gxOPqKVOEvHs4zl7JZJ4cpO5z7IEXmQEDrK1J+LeulD2EGoMW
SIBk6rnvLVi0rXFRKbz4Ly53P8/7GybwdzOeKSjCUY6cyp05Rm6rTdYvo2pkAtCA
aDUOnj9hQeBIzgXY9NWhrIonhbpiErMoSreK5eu/IGzCQOZd6uuw3g8EthaYnUzT
1Tkjt685VuhDEsn1OC0r0ngkhZEyguQRl9cK2JrKN2pdKrI3h+Ao7zcAPFDT/kEv
78INFZqPCOQF4SCmoh2dqwK0xqbyYgpuy1TwBz8cKiU0QKCVzPCkskx5zA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:44:55 2026 by rpki-client