Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3133372e302f32342d3234203d3e203633363436.roa
File:                     3131372e35312e3133372e302f32342d3234203d3e203633363436.roa (raw, json)
Hash identifier:          EMEpCwdLK3j9cNpF1IuPN3ufWOINWrjuANdL3qwI4yE=
Subject key identifier:   6F:C3:6B:0B:39:D9:EA:69:DB:07:8D:EE:CC:80:33:A1:E6:5D:60:3E
Certificate issuer:       /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial:       0ECC410761BBDAA71B34C8E608C3AC6D596449E9
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3133372e302f32342d3234203d3e203633363436.roa
Signing time:             Thu 07 May 2026 05:19:59 +0000
ROA not before:           Thu 07 May 2026 05:14:59 +0000
ROA not after:            Thu 06 May 2027 05:19:59 +0000
asID:                     63646
IP address blocks:        117.51.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cc:41:07:61:bb:da:a7:1b:34:c8:e6:08:c3:ac:6d:59:64:49:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
        Validity
            Not Before: May  7 05:14:59 2026 GMT
            Not After : May  6 05:19:59 2027 GMT
        Subject: CN=6FC36B0B39D9EA69DB078DEECC8033A1E65D603E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b6:7d:52:e0:43:25:6a:42:b0:73:74:22:9f:
                    c9:7a:83:fe:d2:87:be:3c:c2:09:a8:76:1b:84:32:
                    0e:ab:08:d9:32:59:2b:cd:e7:f0:07:56:a7:2a:f1:
                    73:c1:e0:9d:87:c0:d1:fd:27:67:93:fa:10:47:1b:
                    5b:fe:bd:6d:9e:83:d1:07:ec:44:66:47:bb:19:0a:
                    0c:9a:bf:9e:1c:f9:fd:d7:01:d8:ed:c5:7f:ed:91:
                    fd:26:22:3e:42:30:3d:8f:cd:53:e5:0b:d6:89:b2:
                    0e:2e:82:84:17:be:c1:a0:62:3e:64:91:21:b1:bf:
                    93:18:51:72:e5:25:a4:ca:8a:34:02:c0:be:b9:22:
                    d3:10:4e:98:8e:dd:74:d9:fe:3d:ed:53:88:01:4c:
                    d4:f8:f5:9c:29:a2:a0:48:09:3c:61:3b:7c:d9:3b:
                    2d:d2:0f:fa:01:e9:05:35:6e:23:cd:4e:bd:d9:04:
                    a1:40:7c:ca:d4:ae:2c:17:d1:3e:b9:e1:dd:1a:d9:
                    e2:b6:e9:e9:0d:8f:40:42:6a:31:7a:ed:d4:9c:ef:
                    d2:24:08:43:44:38:f4:7d:84:8b:63:d2:aa:02:67:
                    a3:85:9b:8d:cb:0a:1a:a7:d8:93:45:1f:f4:e8:7b:
                    e4:26:44:36:ae:4a:e0:65:66:c9:b5:ba:c8:8b:da:
                    0e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C3:6B:0B:39:D9:EA:69:DB:07:8D:EE:CC:80:33:A1:E6:5D:60:3E
            X509v3 Authority Key Identifier:
                keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3133372e302f32342d3234203d3e203633363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.51.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ea:d4:69:18:3e:74:c6:d7:a0:43:19:63:94:4d:61:3a:06:fc:
         1a:fd:0f:14:4f:93:70:d8:05:83:ca:b1:cf:c4:22:cb:a2:32:
         b9:ea:9c:18:13:5b:30:de:23:bc:66:7a:62:89:de:93:a4:9e:
         65:33:e6:79:57:ba:70:d5:d7:43:8c:e8:c1:4a:9b:55:f4:69:
         38:9c:88:46:f2:20:ea:fd:fd:e3:d4:33:46:88:76:b3:ab:7e:
         68:43:74:fd:2d:7e:41:13:34:b8:8d:fe:c0:35:b4:1f:dc:f5:
         a4:84:c3:16:85:81:73:b5:0f:d5:0a:95:ab:f7:3f:10:41:31:
         d5:7b:41:73:3a:cb:f5:c2:8b:bc:b2:c5:a2:38:53:5b:c7:08:
         f6:f3:04:ba:f6:5d:15:09:56:ba:d1:b0:9a:4a:6e:44:4c:dc:
         c4:d0:13:6d:09:6c:4b:db:20:c0:a8:fe:f1:fe:83:4f:ae:c3:
         9b:84:49:c9:dd:a3:73:8d:29:a0:e3:c5:f7:6b:20:ed:18:7b:
         32:22:3a:6c:ae:db:d2:bb:80:77:d0:a5:a9:23:f3:1a:70:31:
         db:56:3a:29:8d:73:07:a6:7a:94:dd:f1:91:46:43:15:86:23:
         9e:be:66:37:0a:2f:ef:25:a5:9a:0b:c6:09:51:d0:e3:56:55:
         70:25:43:e2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 13:30:37 2026 by rpki-client