Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3135372e302f32342d3234203d3e203633363436.roa
File:                     3131372e35312e3135372e302f32342d3234203d3e203633363436.roa (raw, json)
Hash identifier:          4hwKpUtruqnpr7fVYfZ7u9ONCROhuMdG6kq/VnnRQ+g=
Subject key identifier:   83:9A:80:C0:F5:56:7A:85:C3:80:43:73:08:14:F3:37:60:FC:2B:F4
Certificate issuer:       /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial:       31734B0CDB9595E8F0DB4D555384A048EDF4DA2F
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3135372e302f32342d3234203d3e203633363436.roa
Signing time:             Thu 07 May 2026 05:19:58 +0000
ROA not before:           Thu 07 May 2026 05:14:58 +0000
ROA not after:            Thu 06 May 2027 05:19:58 +0000
asID:                     63646
IP address blocks:        117.51.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:73:4b:0c:db:95:95:e8:f0:db:4d:55:53:84:a0:48:ed:f4:da:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
        Validity
            Not Before: May  7 05:14:58 2026 GMT
            Not After : May  6 05:19:58 2027 GMT
        Subject: CN=839A80C0F5567A85C38043730814F33760FC2BF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:00:e5:3b:af:64:20:2a:c7:50:16:71:6c:ff:
                    90:f9:4c:22:f9:3a:bb:7f:40:6e:0c:68:27:14:5d:
                    d1:13:80:36:26:0b:49:0e:3b:fc:04:76:02:a4:fd:
                    ec:0c:0b:bf:5c:36:f2:93:7d:1e:1a:bf:c0:79:01:
                    2b:17:a0:7b:4d:7b:32:b3:61:11:72:db:b2:91:ba:
                    3c:e0:1b:c7:c2:5e:5e:54:9f:ed:13:5a:ec:61:14:
                    9a:1f:ce:0e:47:ed:11:28:c8:b7:a5:3e:a0:e4:c0:
                    e8:6e:3b:64:03:1a:d1:67:2a:d9:44:25:b6:26:b8:
                    90:f9:dd:ad:73:bf:20:d4:e8:d5:da:75:5f:3f:3c:
                    53:54:ff:8c:ee:b2:e0:41:68:c4:ae:e8:62:c4:7c:
                    50:0c:db:92:b4:8b:e9:f7:19:45:25:b0:2f:98:29:
                    ea:99:8c:3a:c0:e1:a8:8d:05:fe:4a:7c:3b:f3:a8:
                    ec:52:23:41:9a:04:9e:32:70:4e:62:ca:b5:cf:da:
                    27:ec:05:77:4e:62:ce:73:ce:f6:3a:8c:1c:4e:67:
                    23:53:96:ce:45:a9:1e:38:bb:c7:aa:93:7e:54:16:
                    52:6a:30:f3:fa:b7:2f:2c:f7:61:ed:60:f4:52:b2:
                    61:aa:c7:20:86:af:b1:81:4a:7d:0b:c0:43:e7:fd:
                    44:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:9A:80:C0:F5:56:7A:85:C3:80:43:73:08:14:F3:37:60:FC:2B:F4
            X509v3 Authority Key Identifier:
                keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3135372e302f32342d3234203d3e203633363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.51.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:9e:a5:bc:35:4c:65:04:d6:b2:d7:0b:b3:75:3f:e5:b9:4b:
         e3:9b:41:b0:a9:34:cb:58:0b:28:0e:3c:44:7e:b8:1d:60:4a:
         8e:8e:55:21:23:55:f6:fd:44:28:60:d3:b4:ac:57:1e:8c:46:
         21:2b:68:b6:18:6c:1b:bd:76:b5:e3:7b:f3:8e:bf:89:22:7f:
         9b:69:5c:ca:7b:99:1a:55:7a:d4:8f:2d:cc:c6:e5:b7:ba:d6:
         23:61:b5:a9:ba:5a:1b:53:0d:ef:a1:56:1f:6e:46:ce:41:b9:
         d4:ae:f2:bd:58:d8:f9:2a:1d:19:c2:00:79:84:cb:27:84:79:
         d6:35:1a:4c:f2:2e:d1:2a:7e:d0:82:93:31:f0:62:3c:65:cc:
         ec:90:3d:93:c4:e9:19:83:0d:98:5e:cb:61:13:1b:2c:10:29:
         80:32:b5:00:3d:bb:99:72:ac:8e:ef:a8:7a:6c:05:1f:69:12:
         4b:fb:cc:6d:ef:3b:20:25:d7:3e:b9:cc:87:fb:6b:71:0e:18:
         f6:df:0c:a9:1f:e0:c6:96:e2:86:ac:6c:4b:5a:7b:12:21:7b:
         ca:d1:04:b2:bc:cd:0a:e7:5e:00:e5:7c:dd:f9:77:26:ce:0b:
         fd:eb:f9:a9:75:9d:fe:8e:d7:61:9f:d7:94:33:5f:71:a1:65:
         e2:35:b6:59
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 12:44:10 2026 by rpki-client