Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3134302e302f32342d3234203d3e203633363436.roa
File:                     3131372e35312e3134302e302f32342d3234203d3e203633363436.roa (raw, json)
Hash identifier:          q2SqWyS8wtYabtazhh/FCgp2b6LT9pjqZ9b7GYAYFwE=
Subject key identifier:   1C:BB:EF:35:F4:4F:D4:CB:E6:EE:DF:15:97:AA:06:76:18:B8:3B:B0
Certificate issuer:       /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial:       44C527A5738EADBA6C6B7972F4E0178C656DDB9C
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3134302e302f32342d3234203d3e203633363436.roa
Signing time:             Thu 07 May 2026 05:20:00 +0000
ROA not before:           Thu 07 May 2026 05:15:00 +0000
ROA not after:            Thu 06 May 2027 05:20:00 +0000
asID:                     63646
IP address blocks:        117.51.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c5:27:a5:73:8e:ad:ba:6c:6b:79:72:f4:e0:17:8c:65:6d:db:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
        Validity
            Not Before: May  7 05:15:00 2026 GMT
            Not After : May  6 05:20:00 2027 GMT
        Subject: CN=1CBBEF35F44FD4CBE6EEDF1597AA067618B83BB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:96:ed:8c:fd:a5:8f:85:8f:ae:28:cd:1e:f3:
                    fc:4d:ca:89:dc:76:06:a3:50:4a:11:4d:b2:ab:a0:
                    87:df:d2:a7:77:46:8f:01:e0:05:20:77:01:54:78:
                    4c:25:0c:29:03:0a:a7:de:30:4d:52:51:5e:aa:30:
                    7d:47:58:77:6e:c0:93:a0:38:3b:1b:da:1d:7b:7f:
                    e4:6f:1b:43:55:43:43:b4:1e:73:7f:7b:f2:75:41:
                    cc:3c:65:c2:6c:68:c8:fe:2c:f0:3c:1d:8f:73:8b:
                    dd:6d:5d:61:be:f2:a9:18:f7:0a:41:11:35:fc:07:
                    b3:b2:1d:f5:bf:34:36:06:a3:e7:af:8a:3f:b3:76:
                    25:2b:96:66:bf:43:d0:a9:b8:46:61:aa:42:cd:3b:
                    a5:bd:50:10:32:8a:c7:c0:ec:38:b8:5a:87:3e:f2:
                    de:5e:58:74:44:0c:24:79:f7:03:e5:a5:76:fc:d2:
                    93:cf:ad:57:00:54:0d:79:7b:c0:cc:08:10:93:2b:
                    64:37:43:70:0e:6e:2f:2c:85:b6:40:e1:49:9d:b4:
                    42:40:36:69:fb:71:1f:4a:32:9e:8d:23:3f:1c:39:
                    b0:d1:56:5c:91:5d:14:a1:be:a8:31:a6:6a:e8:cc:
                    0c:e7:1e:fd:2a:d3:bd:40:f3:2f:03:f7:96:c3:aa:
                    65:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:BB:EF:35:F4:4F:D4:CB:E6:EE:DF:15:97:AA:06:76:18:B8:3B:B0
            X509v3 Authority Key Identifier:
                keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3134302e302f32342d3234203d3e203633363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.51.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:0c:95:03:31:59:07:4f:2c:03:59:2e:22:67:1a:d7:7b:2b:
         02:19:23:6d:0e:ea:31:8b:6f:60:3f:12:74:09:22:fb:d2:07:
         3c:f0:14:50:60:ae:68:87:e9:47:50:a5:29:88:32:24:6a:d1:
         31:2c:5d:89:8a:db:89:6c:d7:2f:c0:61:0e:71:da:3c:a8:84:
         e0:45:fe:23:d7:6d:8d:82:33:05:62:88:a8:e6:0f:eb:d9:df:
         29:b3:5c:15:e7:59:1c:04:89:ab:79:1a:c1:6d:16:c4:4c:8a:
         d4:33:ac:58:bc:42:e3:e7:26:74:11:ef:3a:99:1f:ab:6d:cc:
         54:92:22:5e:ec:00:6d:55:75:c4:0f:db:95:63:93:80:0c:05:
         a3:a2:b4:8d:89:36:cb:e5:96:63:d5:7f:cf:cc:92:86:00:f3:
         50:91:0b:cf:7c:b6:34:ef:a2:38:36:3c:3b:33:7e:d1:a5:3a:
         1a:61:8a:c2:c2:4c:4f:cf:e2:9e:22:f2:77:66:91:b2:01:d0:
         70:84:b6:29:d1:9a:d7:72:94:3c:33:74:42:40:69:1d:51:6b:
         24:0e:d6:63:84:39:76:f0:05:ff:bb:a7:2a:c5:3f:5e:9e:90:
         f3:06:90:0b:8b:95:6f:ff:38:bb:ee:1f:8a:6d:67:49:8c:61:
         61:7e:34:7a
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIURMUnpXOOrbpsa3ly9OAXjGVt25wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdB
N0QxNEI0MDAeFw0yNjA1MDcwNTE1MDBaFw0yNzA1MDYwNTIwMDBaMDMxMTAvBgNV
BAMTKDFDQkJFRjM1RjQ0RkQ0Q0JFNkVFREYxNTk3QUEwNjc2MThCODNCQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCflu2M/aWPhY+uKM0e8/xNyonc
dgajUEoRTbKroIff0qd3Ro8B4AUgdwFUeEwlDCkDCqfeME1SUV6qMH1HWHduwJOg
ODsb2h17f+RvG0NVQ0O0HnN/e/J1Qcw8ZcJsaMj+LPA8HY9zi91tXWG+8qkY9wpB
ETX8B7OyHfW/NDYGo+evij+zdiUrlma/Q9CpuEZhqkLNO6W9UBAyisfA7Di4Woc+
8t5eWHREDCR59wPlpXb80pPPrVcAVA15e8DMCBCTK2Q3Q3AObi8shbZA4UmdtEJA
Nmn7cR9KMp6NIz8cObDRVlyRXRShvqgxpmrozAznHv0q071A8y8D95bDqmXhAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUHLvvNfRP1Mvm7t8Vl6oGdhi4O7AwHwYDVR0j
BBgwFoAUFldnVvCwO/dezWvESaO+96fRS0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
OTYwMjYzNjM2NzIwMDI1OS8wLzE2NTc2NzU2RjBCMDNCRjc1RUNENkJDNDQ5QTNC
RUY3QTdEMTRCNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdBN0QxNEI0MC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5OTYwMjYzNjM2NzIwMDI1OS8wLzMxMzEzNzJlMzUz
MTJlMzEzNDMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzQzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAHUzjDANBgkqhkiG9w0BAQsFAAOCAQEAJAyVAzFZB08sA1kuImca13sr
AhkjbQ7qMYtvYD8SdAki+9IHPPAUUGCuaIfpR1ClKYgyJGrRMSxdiYrbiWzXL8Bh
DnHaPKiE4EX+I9dtjYIzBWKIqOYP69nfKbNcFedZHASJq3kawW0WxEyK1DOsWLxC
4+cmdBHvOpkfq23MVJIiXuwAbVV1xA/blWOTgAwFo6K0jYk2y+WWY9V/z8yShgDz
UJELz3y2NO+iODY8OzN+0aU6GmGKwsJMT8/iniLyd2aRsgHQcIS2KdGa13KUPDN0
QkBpHVFrJA7WY4Q5dvAF/7unKsU/Xp6Q8waQC4uVb/84u+4fim1nSYxhYX40eg==
-----END CERTIFICATE-----
Generated at Wed May 13 14:13:20 2026 by rpki-client