Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3133382e302f32342d3234203d3e203633363436.roa
File:                     3131372e35312e3133382e302f32342d3234203d3e203633363436.roa (raw, json)
Hash identifier:          6w09gUH4FWRvbvSCw8yQPVGQkUQW24948jmjKtRhi5k=
Subject key identifier:   5F:D6:C1:DE:06:EC:C7:2D:70:92:F6:E5:8A:21:11:05:02:75:7F:47
Certificate issuer:       /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial:       1CF3A78BA92B28E0E91D7D62F0531CB274C2DE6E
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3133382e302f32342d3234203d3e203633363436.roa
Signing time:             Thu 07 May 2026 05:19:59 +0000
ROA not before:           Thu 07 May 2026 05:14:59 +0000
ROA not after:            Thu 06 May 2027 05:19:59 +0000
asID:                     63646
IP address blocks:        117.51.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:f3:a7:8b:a9:2b:28:e0:e9:1d:7d:62:f0:53:1c:b2:74:c2:de:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
        Validity
            Not Before: May  7 05:14:59 2026 GMT
            Not After : May  6 05:19:59 2027 GMT
        Subject: CN=5FD6C1DE06ECC72D7092F6E58A21110502757F47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e9:f4:90:44:73:81:73:99:42:cc:b1:9c:5f:
                    45:2a:d0:4e:b5:31:c8:c9:9b:c2:de:82:72:67:09:
                    cb:e6:a7:45:b9:60:2c:45:88:7c:cd:f5:3a:48:0b:
                    59:ab:b9:15:f6:28:26:d8:62:84:5b:fe:0f:8b:46:
                    c8:7b:d3:1a:1f:6f:1b:ab:2e:06:ac:4c:24:33:71:
                    f9:52:b3:0f:ab:e1:f6:1c:3e:d4:a2:09:a6:b4:8e:
                    8d:cf:c8:e1:36:c5:6d:0d:94:31:17:4b:eb:f1:b6:
                    23:16:74:60:2f:61:37:bf:aa:f9:02:c6:c8:a8:ad:
                    b9:9f:74:99:59:92:1a:71:e7:67:29:93:f1:37:44:
                    fe:fe:69:e1:d0:11:0e:67:34:2d:e7:8f:83:51:48:
                    99:65:86:a5:a5:35:ba:af:09:cb:65:cd:cb:cf:90:
                    3b:64:62:8a:aa:18:40:98:56:9b:12:6c:cd:a6:5c:
                    14:2e:d1:fd:65:34:2c:ea:f2:7d:55:74:c9:ff:82:
                    d1:0c:0d:0e:d9:2c:af:f5:26:2e:c7:a0:62:ab:6d:
                    7d:d7:e8:06:0f:48:8c:f1:74:d9:a1:c1:98:ce:26:
                    07:04:f2:a1:42:f1:cf:ba:d6:8a:af:78:45:ef:0a:
                    57:43:82:79:47:4a:ae:05:c6:28:19:7c:c2:9a:3b:
                    f3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D6:C1:DE:06:EC:C7:2D:70:92:F6:E5:8A:21:11:05:02:75:7F:47
            X509v3 Authority Key Identifier:
                keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3133382e302f32342d3234203d3e203633363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.51.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:54:c3:aa:06:47:68:d3:0c:03:86:17:66:34:a0:be:2d:8a:
         d3:5b:c1:f0:f7:21:ac:e0:1b:3f:db:63:21:b1:77:9a:82:2e:
         72:ef:6e:6a:e6:de:e4:1e:28:65:c2:ef:46:51:bb:cf:3f:e4:
         ad:4a:7b:39:36:f6:e9:06:14:1a:34:54:39:58:47:20:ae:72:
         79:a5:db:ef:3c:a2:ae:6e:9c:90:30:1d:40:9e:56:89:1d:7f:
         29:08:7c:32:10:99:d6:15:67:24:92:d2:2c:9f:b4:50:c6:11:
         6e:d3:bb:01:b3:f6:6e:96:70:a4:42:66:db:33:56:8a:a8:af:
         d8:c0:32:05:d6:f8:7b:6f:7d:3e:4b:1c:a8:d0:7e:6f:fd:ca:
         32:02:29:4f:aa:5b:f7:1b:19:0b:48:a0:6b:e1:11:b8:1a:f9:
         2e:99:31:b9:fc:3b:e2:48:5e:ee:65:b4:e4:05:3b:30:af:7b:
         ad:12:bf:d4:d2:3a:03:b8:a9:0a:f6:e1:36:af:f0:c4:06:ae:
         6c:6d:b4:49:fe:31:c5:6f:81:c0:d7:99:32:42:ec:18:f5:e2:
         1b:3b:25:b6:a4:fd:53:58:9a:4a:18:5b:72:23:e1:0c:30:51:
         a8:57:b4:7b:cc:9e:8c:be:22:69:5f:9a:fd:70:fa:a8:0e:53:
         c0:c1:3d:da
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 12:18:47 2026 by rpki-client