Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096620927086493698/0/3131302e35312e3132382e302f31382d3234203d3e203435313133.roa
File:                     3131302e35312e3132382e302f31382d3234203d3e203435313133.roa (raw, json)
Hash identifier:          SL+zxWGHwke5jODGtFlXdQa/92f8UFMhStx17fOitEI=
Subject key identifier:   4F:11:D8:FD:CB:6C:DF:2D:29:D9:C9:7D:47:3D:D8:44:3E:D1:DE:FD
Certificate issuer:       /CN=50F25C99228B3E6C740B1FC9C587A9AC0ED32F12
Certificate serial:       494FDF41F49D3681D42F6BDD3DB00094CF5B65F1
Authority key identifier: 50:F2:5C:99:22:8B:3E:6C:74:0B:1F:C9:C5:87:A9:AC:0E:D3:2F:12
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50F25C99228B3E6C740B1FC9C587A9AC0ED32F12.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096620927086493698/0/3131302e35312e3132382e302f31382d3234203d3e203435313133.roa
Signing time:             Wed 15 Apr 2026 02:33:14 +0000
ROA not before:           Wed 15 Apr 2026 02:28:14 +0000
ROA not after:            Wed 14 Apr 2027 02:33:14 +0000
asID:                     45113
IP address blocks:        110.51.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096620927086493698/0/50F25C99228B3E6C740B1FC9C587A9AC0ED32F12.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096620927086493698/0/50F25C99228B3E6C740B1FC9C587A9AC0ED32F12.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50F25C99228B3E6C740B1FC9C587A9AC0ED32F12.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:36:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:4f:df:41:f4:9d:36:81:d4:2f:6b:dd:3d:b0:00:94:cf:5b:65:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50F25C99228B3E6C740B1FC9C587A9AC0ED32F12
        Validity
            Not Before: Apr 15 02:28:14 2026 GMT
            Not After : Apr 14 02:33:14 2027 GMT
        Subject: CN=4F11D8FDCB6CDF2D29D9C97D473DD8443ED1DEFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5b:b8:4a:d2:fe:60:11:f4:68:de:df:d9:31:
                    71:63:ec:d6:a0:87:52:7b:d2:bd:71:c9:11:62:fa:
                    29:82:6a:18:4c:c9:3a:a0:f3:a1:37:bd:56:da:d1:
                    17:90:df:de:2a:61:cd:26:15:2e:4a:31:67:55:5d:
                    92:ac:52:f2:02:b8:10:bc:43:7d:fc:f5:6e:fe:93:
                    80:7d:b1:08:dc:cd:9f:91:32:db:fc:a8:5a:a3:f1:
                    a0:6f:e5:8b:48:0e:3f:41:32:58:0b:65:2d:87:ca:
                    ba:3e:99:c3:be:6b:76:df:9d:9d:e5:b6:44:be:93:
                    63:b5:9e:b2:e6:bb:1d:3f:77:b9:c1:b6:0f:75:43:
                    08:39:d8:9d:c3:96:f9:a8:f8:b3:0b:a3:4d:0d:0b:
                    07:4b:bb:1c:6e:95:22:f2:be:fb:ec:c5:20:96:38:
                    b2:78:2b:e9:c8:a3:2f:c8:58:fd:35:95:a3:a3:ee:
                    1c:c2:1c:07:92:95:1f:c6:9f:e0:f9:73:53:72:1b:
                    2b:c6:27:a1:18:db:0e:40:ec:6f:0c:15:2e:33:ec:
                    9f:28:39:85:a8:a3:2b:11:30:3d:c0:17:c7:1f:e2:
                    a5:5a:ec:fa:21:40:73:69:13:f8:e3:0e:59:5c:1a:
                    b5:27:05:82:a2:11:21:60:c2:c9:fc:d7:d6:e9:b5:
                    22:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:11:D8:FD:CB:6C:DF:2D:29:D9:C9:7D:47:3D:D8:44:3E:D1:DE:FD
            X509v3 Authority Key Identifier:
                keyid:50:F2:5C:99:22:8B:3E:6C:74:0B:1F:C9:C5:87:A9:AC:0E:D3:2F:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096620927086493698/0/50F25C99228B3E6C740B1FC9C587A9AC0ED32F12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50F25C99228B3E6C740B1FC9C587A9AC0ED32F12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096620927086493698/0/3131302e35312e3132382e302f31382d3234203d3e203435313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.51.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6b:b9:1e:fe:eb:31:15:03:41:76:3e:37:82:e2:9f:a7:ab:f3:
         10:92:18:03:9e:34:52:83:ee:0b:67:69:a9:51:eb:d6:d0:2e:
         2b:fc:d7:f4:e7:84:ba:0c:ba:2a:d2:62:de:6c:38:ce:ef:3e:
         b8:68:a8:c2:a5:c4:67:18:69:27:b4:10:c0:95:97:b6:70:a8:
         fe:63:a7:9a:3a:68:a6:e6:62:f4:67:2d:4e:4f:55:7a:61:e8:
         5f:80:3f:6b:fb:76:4c:72:29:90:da:36:b9:3d:b9:65:3e:53:
         36:75:91:0a:75:9f:d0:77:93:3a:a2:bb:a5:6c:87:ab:7a:0e:
         9e:5c:ec:9c:ef:16:88:5d:76:97:80:ea:cc:0c:12:83:10:b7:
         15:99:79:39:cf:28:75:57:92:d0:a2:79:fe:38:5c:ea:80:6a:
         8a:15:d7:02:b4:6b:81:89:b9:d4:4e:48:f4:3b:48:07:c9:6e:
         95:7a:06:af:04:6f:5f:42:04:46:52:66:7b:9f:f5:23:79:14:
         a0:1d:fb:78:31:1c:27:b9:be:bd:34:08:d3:b6:aa:2e:d2:ae:
         7a:d8:0b:f0:33:0a:e2:40:03:8d:df:e4:24:65:84:cd:a6:86:
         fc:e8:42:3c:f0:da:fd:e9:ac:99:9d:72:83:80:e3:2f:6b:c7:
         dd:6a:09:13
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:27:21 2026 by rpki-client