Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3133332e302f32342d3234203d3e203633363436.roa
File:                     3131372e35312e3133332e302f32342d3234203d3e203633363436.roa (raw, json)
Hash identifier:          OCw4BBGKUadV0jfQ22aOu0YPdA0n0Bg1oQXYl6d2xW8=
Subject key identifier:   0E:A0:03:21:57:81:B3:B1:13:2E:10:82:73:C4:70:E3:8D:B4:C6:E0
Certificate issuer:       /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial:       69041B6C4B109C7B27C33235080BF52F7F7EFCD7
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3133332e302f32342d3234203d3e203633363436.roa
Signing time:             Thu 07 May 2026 05:20:00 +0000
ROA not before:           Thu 07 May 2026 05:15:00 +0000
ROA not after:            Thu 06 May 2027 05:20:00 +0000
asID:                     63646
IP address blocks:        117.51.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:04:1b:6c:4b:10:9c:7b:27:c3:32:35:08:0b:f5:2f:7f:7e:fc:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
        Validity
            Not Before: May  7 05:15:00 2026 GMT
            Not After : May  6 05:20:00 2027 GMT
        Subject: CN=0EA003215781B3B1132E108273C470E38DB4C6E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:08:2e:de:3f:8c:18:09:57:82:ac:9d:1b:4d:
                    4b:65:96:d1:0e:ae:07:e8:55:4a:f4:cf:37:29:95:
                    d0:3f:dd:a3:65:a7:ad:25:8e:a0:94:0d:e5:e4:40:
                    3d:5d:34:7e:6e:64:6f:4b:45:7c:50:77:96:8a:1e:
                    90:7d:96:a4:eb:69:dc:33:53:c8:e3:ae:f0:49:34:
                    30:fb:95:50:ce:43:e4:0b:56:01:29:57:2f:a9:1d:
                    c3:3b:7e:1f:47:e6:07:76:a9:22:ef:22:e4:4d:07:
                    02:ef:76:9f:bd:c9:50:13:ed:f7:5a:ba:2e:9f:1b:
                    ab:42:30:33:46:1a:23:58:9e:3b:31:51:ae:6f:05:
                    a8:55:a2:40:d0:08:98:96:1b:2d:47:40:40:18:6b:
                    5b:f1:1b:84:1d:97:ad:2d:40:c6:86:e3:ad:8b:c1:
                    c9:ca:86:b8:1a:a3:a3:df:96:d2:15:a8:63:ad:72:
                    eb:2d:75:cf:ad:87:82:d9:d5:a5:15:9f:b8:c7:ef:
                    bc:dd:b4:28:01:45:12:2c:43:5d:e6:fe:f0:f5:5b:
                    53:45:c2:91:c5:33:2a:a1:9a:c3:6f:d7:cc:ce:cb:
                    e4:bc:2d:79:5b:24:2f:a3:aa:a6:03:ed:de:e3:be:
                    c0:9c:1c:45:ae:1a:ba:5b:42:51:98:1c:24:64:af:
                    3a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A0:03:21:57:81:B3:B1:13:2E:10:82:73:C4:70:E3:8D:B4:C6:E0
            X509v3 Authority Key Identifier:
                keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3133332e302f32342d3234203d3e203633363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.51.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:58:1c:7d:97:ba:f4:09:ab:59:9c:03:76:13:70:2a:9c:2b:
         6c:17:39:63:7a:a0:8e:da:0c:97:69:c1:7c:36:9d:5b:04:08:
         96:cd:ea:89:4f:db:3a:3c:4f:bf:59:d5:18:49:20:72:b7:0e:
         15:13:1b:e8:d3:57:fb:0b:b1:b8:66:91:c8:d6:50:fc:44:8a:
         12:88:87:22:a8:39:29:4f:ec:9d:f9:43:31:82:a6:40:81:c1:
         4a:3b:86:5a:b8:d5:74:56:64:47:b7:0b:3f:09:75:92:a0:bf:
         29:6c:99:dc:73:b7:11:2a:3e:8d:30:89:c4:64:57:b5:39:d7:
         9f:d0:c7:b6:03:44:3a:8b:aa:40:12:a1:57:4d:5b:79:56:a7:
         bb:ce:a6:ad:46:18:bc:8e:d5:e0:d6:02:ac:a2:c0:33:93:ed:
         fe:59:d2:22:48:63:c1:c4:fa:b8:66:23:ef:68:18:a7:1a:f2:
         93:b6:fd:56:50:92:6e:a9:8d:f7:62:e1:eb:05:bf:9c:a5:30:
         45:96:a4:7b:54:53:e6:c0:d9:dc:ec:89:9f:2b:d8:18:50:d3:
         8b:ae:dc:06:93:a5:44:fb:0f:e1:e0:49:24:7c:0c:f6:c4:d1:
         ea:12:b6:8f:6f:6c:eb:53:a1:d4:7d:e1:19:7b:83:0e:79:29:
         3e:32:e8:85
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 13:45:18 2026 by rpki-client