Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3133322e302f32342d3234203d3e203633363436.roa
File:                     3131372e35312e3133322e302f32342d3234203d3e203633363436.roa (raw, json)
Hash identifier:          z0un5iKQb7kkHws58aLqgZXTRSwCtnIIXMC+ieLteJI=
Subject key identifier:   24:EB:A2:96:4A:AF:30:42:45:43:26:7C:98:C9:21:27:12:49:6F:F0
Certificate issuer:       /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial:       44D6B5D508CF7DE7F7DF7D222AEFE236BBC0B11C
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3133322e302f32342d3234203d3e203633363436.roa
Signing time:             Thu 07 May 2026 05:19:59 +0000
ROA not before:           Thu 07 May 2026 05:14:59 +0000
ROA not after:            Thu 06 May 2027 05:19:59 +0000
asID:                     63646
IP address blocks:        117.51.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d6:b5:d5:08:cf:7d:e7:f7:df:7d:22:2a:ef:e2:36:bb:c0:b1:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
        Validity
            Not Before: May  7 05:14:59 2026 GMT
            Not After : May  6 05:19:59 2027 GMT
        Subject: CN=24EBA2964AAF30424543267C98C9212712496FF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:94:97:dc:02:ac:c0:f7:82:37:27:b9:22:de:
                    16:5a:84:57:0b:b7:62:76:5f:36:58:f3:e7:39:64:
                    75:e9:b4:86:90:41:e8:a8:47:00:36:7e:96:bc:c7:
                    d4:20:f6:b1:56:d4:95:bf:1a:d0:f3:18:19:ad:8f:
                    71:e9:7d:b7:c7:94:80:56:26:64:ab:f4:58:84:06:
                    8f:bb:0d:46:3a:ac:87:90:6b:6f:19:62:50:84:31:
                    00:5f:31:91:1f:f2:e5:34:73:f5:be:84:c4:17:20:
                    f9:53:cb:b4:b8:a9:49:f2:9a:24:6d:61:fa:72:56:
                    47:bc:b9:17:76:95:8b:a0:a5:cf:a5:9c:2b:66:37:
                    10:99:b8:6e:43:53:5b:19:c9:8f:a0:ee:58:58:0b:
                    02:95:03:b8:ef:2d:11:92:b9:4d:b7:ea:8d:6b:b6:
                    48:b7:5d:1c:a7:45:a7:c8:6f:62:c6:6f:f2:44:00:
                    75:9d:c4:f0:f0:2e:c9:23:73:ad:0b:50:ff:bb:43:
                    77:cb:e9:15:95:d1:9f:c3:0e:52:d5:20:fb:d5:de:
                    2e:43:b5:b4:4d:ff:30:dc:2f:50:48:a1:dc:9c:93:
                    ee:ed:d2:4d:a0:54:38:89:72:e4:0d:f6:b9:05:f2:
                    35:26:62:9f:df:4b:4b:45:0d:eb:b9:fd:60:6d:5f:
                    87:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:EB:A2:96:4A:AF:30:42:45:43:26:7C:98:C9:21:27:12:49:6F:F0
            X509v3 Authority Key Identifier:
                keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3133322e302f32342d3234203d3e203633363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.51.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:1b:56:82:36:cc:a4:af:c5:0e:82:12:bb:41:33:62:30:96:
         9c:59:c8:d4:b9:f7:59:cb:a9:a4:c9:f4:66:2d:d6:31:a7:0d:
         1f:05:d5:3d:5a:80:f6:67:03:fa:13:19:51:75:e6:af:cc:a9:
         10:31:3a:f2:11:7a:8d:67:b2:cd:19:e7:af:65:b1:1a:88:de:
         45:64:e4:9b:ec:ca:f5:3f:74:d3:8e:4f:e4:e1:80:13:aa:08:
         97:d4:75:96:07:e0:6a:d7:db:8c:d5:d2:7c:21:6c:50:76:85:
         48:4d:42:06:02:d8:d0:e0:d4:0c:0a:c6:70:3a:81:36:9f:f4:
         dc:b3:bf:96:a3:8b:29:ce:f8:04:ac:8b:90:27:b2:96:4e:41:
         e2:ef:7c:19:b0:a1:58:3c:fa:68:be:38:24:18:11:b3:c6:d5:
         45:a4:db:e7:cc:f1:e9:f7:40:6a:1b:45:a9:e2:67:80:10:6b:
         c5:34:61:8a:91:4e:87:2f:db:9b:5e:38:1f:32:5b:a4:4e:c5:
         00:98:34:c6:82:47:a8:7b:ce:50:05:c3:4c:f7:2f:d8:25:3e:
         fe:ae:88:72:fe:4d:4a:50:a0:62:9e:6e:75:62:1e:fe:84:33:
         60:86:5a:52:94:2f:84:43:4d:72:90:1f:41:ae:02:69:53:2b:
         cb:37:1c:d3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 14:02:56 2026 by rpki-client