Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3134332e302f32342d3234203d3e203633363436.roa
File:                     3131372e35312e3134332e302f32342d3234203d3e203633363436.roa (raw, json)
Hash identifier:          OJzUzUaUUcr7AyP/82hkPQsTeAfO+Ziu50UGm0UcgoM=
Subject key identifier:   4C:89:9E:C9:57:B6:F6:06:72:06:0B:14:30:C9:0D:0F:5D:7F:34:9B
Certificate issuer:       /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial:       21CE45323D7025BF51C4DBE95854320ABF0ED0D5
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3134332e302f32342d3234203d3e203633363436.roa
Signing time:             Thu 07 May 2026 05:19:59 +0000
ROA not before:           Thu 07 May 2026 05:14:59 +0000
ROA not after:            Thu 06 May 2027 05:19:59 +0000
asID:                     63646
IP address blocks:        117.51.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ce:45:32:3d:70:25:bf:51:c4:db:e9:58:54:32:0a:bf:0e:d0:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
        Validity
            Not Before: May  7 05:14:59 2026 GMT
            Not After : May  6 05:19:59 2027 GMT
        Subject: CN=4C899EC957B6F60672060B1430C90D0F5D7F349B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:46:fa:f6:bf:12:6c:6d:c8:79:50:84:4d:3a:
                    bb:07:33:98:90:2c:b0:90:7a:0a:31:7e:a6:98:d2:
                    9b:1a:31:a3:a5:1c:72:e7:5c:21:f8:9d:9e:cd:f4:
                    d5:9c:be:91:60:46:46:ef:7b:a8:e5:22:70:18:2b:
                    9a:1e:c7:e5:d3:1b:bb:77:b0:51:fe:2a:4c:9e:d8:
                    fa:f2:be:8c:9d:d7:92:42:62:42:16:6c:1e:4c:11:
                    0f:cf:2d:58:ac:d1:ae:58:a1:b1:e7:4c:5a:14:2f:
                    8c:49:a5:6e:ed:69:fd:f1:c1:28:2c:30:6d:a1:e4:
                    71:86:7f:05:1c:27:77:b1:74:a2:d8:d7:8b:fb:27:
                    d5:b9:41:5b:58:d2:d2:5c:d4:9d:f7:20:00:f2:0e:
                    8c:36:79:63:2e:fc:36:c1:66:16:cb:53:be:9c:f9:
                    16:b0:71:2f:ad:93:19:6c:51:7d:23:ee:8a:1c:26:
                    eb:7e:a5:f2:7d:5f:76:99:79:27:90:d9:42:31:c5:
                    42:dc:ae:de:aa:26:14:4f:11:55:9e:97:42:6c:f5:
                    a8:ab:4a:3d:74:92:15:04:42:02:88:ec:4f:d9:9e:
                    fc:30:8e:88:1c:7a:9a:70:aa:1a:67:c8:b2:c3:f0:
                    2a:22:2d:d3:c4:50:bb:61:b1:41:f7:87:4d:e3:18:
                    e7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:89:9E:C9:57:B6:F6:06:72:06:0B:14:30:C9:0D:0F:5D:7F:34:9B
            X509v3 Authority Key Identifier:
                keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3134332e302f32342d3234203d3e203633363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.51.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dc:42:6a:14:17:71:d5:ae:07:90:a1:87:65:bd:2e:34:60:8d:
         ff:56:ab:e7:56:9a:1b:e2:b9:74:d1:42:71:3c:5a:29:58:01:
         90:58:8a:05:79:c8:b6:f1:b6:3d:b3:49:a4:f0:a3:e9:c1:e5:
         4a:16:46:ef:0b:a2:bb:fa:5d:8b:a4:02:0c:44:7b:e7:85:7e:
         36:3b:6c:59:73:fd:e5:f2:fb:14:f4:d9:e3:90:54:e7:76:d3:
         bb:c6:cf:65:c1:c9:23:c8:e1:9f:4c:f3:cb:38:de:8c:ab:97:
         d4:05:9f:3e:7b:ca:c9:d4:09:64:13:33:3d:12:fa:ba:02:34:
         af:1a:3c:92:94:75:33:5b:48:fd:94:e2:50:38:da:6d:9e:8f:
         4b:74:25:af:69:6e:6d:95:20:b6:ba:2a:8e:eb:b7:6e:64:47:
         2c:a1:27:ef:fc:f2:b3:32:d5:f5:00:c9:5a:42:2b:0c:c8:16:
         e1:1d:c4:70:6f:d0:3b:1d:1b:bf:cc:7e:4b:c1:b2:b0:6f:5c:
         01:87:96:0b:c6:6f:d2:df:3a:b7:32:e7:19:2e:fd:e1:6d:d6:
         71:07:78:04:ce:ab:f7:73:3c:2d:37:b9:0c:28:31:52:fd:3c:
         ac:16:63:d0:81:2c:1f:6c:29:ad:5e:a5:bd:06:63:88:98:8b:
         b2:b4:11:55
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 12:43:08 2026 by rpki-client