Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3133302e302f32342d3234203d3e203633363438.roa
File:                     3131372e35312e3133302e302f32342d3234203d3e203633363438.roa (raw, json)
Hash identifier:          VdLkjdJYwM/9/5arZAN5b4SvP0BQot6Zbnhbe+ZNE/o=
Subject key identifier:   49:C6:47:54:B9:4B:8E:0E:87:3B:D6:4E:E5:94:75:9A:A1:D7:74:5F
Certificate issuer:       /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial:       66F5259E6651FACF1B99E84F3E36F5FA8C2A9C75
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3133302e302f32342d3234203d3e203633363438.roa
Signing time:             Thu 07 May 2026 05:19:59 +0000
ROA not before:           Thu 07 May 2026 05:14:59 +0000
ROA not after:            Thu 06 May 2027 05:19:59 +0000
asID:                     63648
IP address blocks:        117.51.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f5:25:9e:66:51:fa:cf:1b:99:e8:4f:3e:36:f5:fa:8c:2a:9c:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
        Validity
            Not Before: May  7 05:14:59 2026 GMT
            Not After : May  6 05:19:59 2027 GMT
        Subject: CN=49C64754B94B8E0E873BD64EE594759AA1D7745F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f3:a0:a0:0b:8a:b3:d8:de:82:37:b4:84:21:
                    24:33:4f:28:b0:99:7e:d6:e0:48:09:71:f5:b5:85:
                    4b:ae:19:4b:fa:56:ea:6b:e8:98:2d:c4:03:c4:32:
                    43:4d:4a:30:2e:89:ba:57:02:71:c6:fa:2f:87:62:
                    4b:b4:30:1a:b9:81:c0:d0:78:41:79:04:08:68:4b:
                    25:b3:62:6e:b0:5e:68:0e:c7:a8:0f:5c:04:ed:a3:
                    67:7a:a4:88:f3:f9:8d:48:3f:72:b4:7b:b0:3a:6b:
                    34:e7:a3:4d:c8:36:12:70:1d:d9:2c:3c:81:82:07:
                    78:be:97:42:11:f9:47:b5:6f:9c:81:5c:5d:93:35:
                    ea:2f:d9:dc:da:7c:fb:b4:67:66:97:48:47:7a:50:
                    63:8d:44:82:45:60:a7:8c:11:62:ad:fb:de:ea:b2:
                    7c:50:a4:ed:64:61:7c:55:27:4f:ef:42:19:9f:4b:
                    92:f5:6f:a9:e4:fc:a1:49:9b:86:f6:ed:11:36:d2:
                    ae:9e:8a:a7:e8:92:63:14:c1:2b:a0:e5:45:86:d6:
                    de:13:3b:9f:08:51:2f:ee:e8:3b:64:57:e6:41:b3:
                    d1:87:2c:62:89:7c:15:bd:c9:9d:c6:fc:d4:61:26:
                    e0:63:8d:8a:b7:b8:32:28:67:1c:5d:98:ea:7a:5c:
                    5a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C6:47:54:B9:4B:8E:0E:87:3B:D6:4E:E5:94:75:9A:A1:D7:74:5F
            X509v3 Authority Key Identifier:
                keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3133302e302f32342d3234203d3e203633363438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.51.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:26:6e:6c:f5:19:a1:63:8a:25:d0:23:bc:06:72:19:00:63:
         87:68:aa:01:d4:62:ad:ba:41:8e:9a:1c:75:70:37:40:ce:e7:
         54:97:c8:5d:18:8d:44:53:82:b4:e1:2a:f6:52:9d:2a:c7:bc:
         0b:8e:c5:e7:98:92:83:34:4f:73:e2:27:89:e4:c3:df:5d:18:
         4c:00:93:11:f8:eb:88:ba:31:d4:4e:ed:0c:68:07:a1:27:9a:
         42:cf:2c:7a:77:60:89:37:b1:b3:82:15:55:d5:a5:63:a9:87:
         54:76:83:ac:4d:62:10:f6:a9:7b:35:45:8d:22:84:3a:5d:bb:
         57:91:42:ab:ac:b4:bf:d0:b2:2d:eb:bc:d4:b4:fa:dc:cb:a0:
         c9:43:cc:7e:27:59:3f:9d:c1:85:82:68:e1:00:bd:99:b1:c0:
         6c:29:99:8f:b5:58:c6:ed:8b:ed:87:71:66:0a:22:af:cf:4f:
         76:9e:e5:5d:cc:7f:78:e9:43:ec:07:cd:ea:01:b0:4d:f2:e6:
         61:a1:77:35:a8:7b:23:95:3b:3c:c9:32:55:fd:e8:aa:4e:02:
         2d:00:f5:4f:4f:48:df:4f:c4:98:6a:fd:8b:a6:bf:1f:46:d5:
         49:2d:fc:a1:7e:16:d8:01:ff:3e:d6:f1:18:13:c0:d3:2f:c6:
         06:ed:28:f3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 13:03:08 2026 by rpki-client