Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3133312e302f32342d3234203d3e203633363436.roa
File:                     3131372e35312e3133312e302f32342d3234203d3e203633363436.roa (raw, json)
Hash identifier:          Ls8FSVCwc3xCWkom/zWySxu34DtGX/u+bC9QTfr03W4=
Subject key identifier:   4F:AD:76:C6:EF:B4:4A:96:05:CC:CC:75:43:A5:D4:FA:6A:EF:70:B5
Certificate issuer:       /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial:       381E626F040130B5DD923988538EE40CE239E4B5
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3133312e302f32342d3234203d3e203633363436.roa
Signing time:             Thu 07 May 2026 05:20:00 +0000
ROA not before:           Thu 07 May 2026 05:15:00 +0000
ROA not after:            Thu 06 May 2027 05:20:00 +0000
asID:                     63646
IP address blocks:        117.51.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:1e:62:6f:04:01:30:b5:dd:92:39:88:53:8e:e4:0c:e2:39:e4:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
        Validity
            Not Before: May  7 05:15:00 2026 GMT
            Not After : May  6 05:20:00 2027 GMT
        Subject: CN=4FAD76C6EFB44A9605CCCC7543A5D4FA6AEF70B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:00:f5:d3:32:cb:30:e9:3e:dc:79:99:06:b7:
                    0f:79:f4:a2:4d:7b:10:c8:3c:50:85:ba:a1:af:2a:
                    46:76:b4:80:e7:09:d5:25:7e:52:42:eb:32:4e:73:
                    05:e3:31:8e:55:77:dc:13:dd:4e:8c:33:61:6a:ee:
                    95:23:7b:3a:e0:04:49:62:d3:bc:84:8e:30:95:6c:
                    e5:32:80:aa:7e:ac:e2:49:ed:5d:93:86:27:c5:45:
                    d7:e4:44:25:3d:19:0f:01:ef:86:48:48:c2:93:de:
                    1f:0d:2d:b3:ef:ea:21:cc:51:9c:b3:b6:95:26:75:
                    bc:d8:6f:2d:5f:11:a8:44:86:18:d4:c0:a3:bb:90:
                    af:ba:42:8b:df:23:c0:43:3f:c0:f2:8c:f1:49:c2:
                    c3:c2:40:d0:29:cd:70:bc:58:3f:cf:ee:54:12:43:
                    84:ae:9d:7d:a6:9c:f4:c5:13:c9:5b:93:77:9b:de:
                    7d:4c:3e:9b:46:4e:5e:9c:06:60:3e:dc:2e:e8:bb:
                    32:e8:c6:d5:fb:1a:a5:cb:fb:2b:f8:9f:79:59:57:
                    6f:d0:5e:93:d6:de:ba:87:a1:d2:81:f4:56:09:6b:
                    74:0c:60:47:4b:cc:33:be:b8:c1:71:13:0d:71:f6:
                    c6:ae:32:33:64:e3:dd:3b:d5:bd:ca:34:a5:0f:a2:
                    ba:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AD:76:C6:EF:B4:4A:96:05:CC:CC:75:43:A5:D4:FA:6A:EF:70:B5
            X509v3 Authority Key Identifier:
                keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3133312e302f32342d3234203d3e203633363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.51.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:df:d0:32:2f:43:3f:c5:16:3d:4d:38:11:5e:cd:ae:fc:d5:
         9a:e8:a2:5b:59:ad:c1:b6:46:20:12:b9:04:4e:6a:ec:a3:14:
         61:1a:10:d9:6b:73:79:32:1e:91:02:cf:77:20:19:5d:22:66:
         a2:67:03:99:48:98:a4:6b:41:e8:39:59:07:56:3f:84:3a:fe:
         2c:20:7d:da:21:b3:e9:61:0c:ef:91:42:6b:83:e5:f5:d4:fd:
         7f:51:be:2e:14:07:c2:33:9a:cf:06:2b:62:5c:2d:7a:27:f8:
         fb:5f:4b:3e:bf:70:2f:b6:2f:66:ed:62:e2:e4:c5:26:e8:79:
         4b:6e:1b:d7:9d:08:bc:40:97:12:89:ef:46:65:eb:57:f6:67:
         29:01:f1:a6:7a:bc:d5:fd:04:a6:0d:01:2a:96:b1:f2:8f:43:
         a6:5d:52:a3:8c:5b:8a:90:0c:fc:9a:40:ca:cc:86:86:99:e3:
         60:7a:05:26:b6:c0:b6:43:07:3f:06:c6:db:a9:3a:80:03:c3:
         2c:2a:b2:45:20:79:15:15:24:6a:cd:e8:8d:8a:b5:d4:37:a1:
         26:3f:c1:14:f6:20:fb:96:cc:d7:57:f3:25:5a:5e:f2:11:15:
         65:3a:4f:47:32:b2:8f:0e:82:42:3b:32:03:d1:6c:5d:7d:25:
         b7:24:a1:aa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 11:59:47 2026 by rpki-client