Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3137322e302f32322d3232203d3e203536303430.roa
File:                     3131372e35312e3137322e302f32322d3232203d3e203536303430.roa (raw, json)
Hash identifier:          fLpeL5Ir/FJ8q9KhxX6EcmIYjYQBcr5BRMjRM+gEIOs=
Subject key identifier:   63:40:AB:D4:C1:91:FE:28:2A:4B:A4:45:7C:75:81:60:12:49:62:3F
Certificate issuer:       /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial:       3147F41B012FCB3F36CF171C4F4A503FA2DFB604
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3137322e302f32322d3232203d3e203536303430.roa
Signing time:             Thu 07 May 2026 05:15:50 +0000
ROA not before:           Thu 07 May 2026 05:10:50 +0000
ROA not after:            Thu 06 May 2027 05:15:50 +0000
asID:                     56040
IP address blocks:        117.51.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:47:f4:1b:01:2f:cb:3f:36:cf:17:1c:4f:4a:50:3f:a2:df:b6:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
        Validity
            Not Before: May  7 05:10:50 2026 GMT
            Not After : May  6 05:15:50 2027 GMT
        Subject: CN=6340ABD4C191FE282A4BA4457C7581601249623F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cd:58:3f:fd:d4:2c:cf:2a:a3:66:26:1c:6d:
                    57:c2:88:41:83:20:9e:4b:f3:c1:fa:6b:c1:67:7f:
                    75:12:05:34:45:5c:0b:2e:fe:fb:cf:f2:0a:47:57:
                    cd:3e:74:ea:3d:07:89:e2:cf:40:54:10:cd:5c:af:
                    4a:88:04:69:b0:4e:3a:45:c2:42:d1:59:ae:0d:31:
                    9d:67:d2:df:c9:f4:06:f3:f5:c2:72:b6:d8:8b:3b:
                    be:5e:e1:87:a5:02:f9:54:fc:58:8e:d8:53:de:8c:
                    98:ae:ab:b5:49:c1:7e:03:21:7f:8c:51:e2:71:d8:
                    2d:5c:1c:9f:41:c1:d1:f5:d8:6d:34:10:bc:5e:c6:
                    ac:51:b2:f2:3e:6c:11:57:86:d6:1b:19:ab:65:fa:
                    70:b4:45:4f:ab:5d:1d:f7:ba:43:2b:db:b5:08:35:
                    6e:b1:22:f2:95:5e:ad:37:58:93:83:e3:39:d0:66:
                    0c:b9:37:c6:a0:ef:99:b9:43:a6:05:d2:0a:61:b1:
                    10:7a:65:8c:0e:43:5f:74:7e:47:42:cf:0e:0c:a7:
                    ef:61:44:b3:9b:da:48:a8:6e:ff:d9:69:35:71:0d:
                    d0:e1:3b:f5:88:aa:67:1f:53:27:ff:61:97:7a:a4:
                    f0:b7:02:af:9f:75:2f:47:bb:ca:f5:dc:91:8d:37:
                    0a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:40:AB:D4:C1:91:FE:28:2A:4B:A4:45:7C:75:81:60:12:49:62:3F
            X509v3 Authority Key Identifier:
                keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3137322e302f32322d3232203d3e203536303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.51.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:df:1f:8a:ab:91:a0:82:24:ce:36:64:95:c9:76:e0:3d:44:
         7f:56:8d:55:47:5b:19:c0:1e:c2:ec:ce:ab:7f:42:d0:a4:e8:
         a1:f9:dd:cd:b2:6a:16:9f:2c:24:65:15:c9:9d:1a:58:23:28:
         31:84:0b:3b:f7:9f:26:92:cf:ee:09:22:31:8b:0f:8f:41:3d:
         d1:12:d2:96:44:24:3c:c0:36:cd:30:c3:26:87:27:10:d3:1f:
         b5:a4:9c:d9:d4:ff:d5:fc:90:12:c1:e6:c2:38:18:6e:c8:f7:
         69:a8:fd:91:87:16:72:11:07:57:e7:bf:0d:cd:7d:5e:25:33:
         22:62:5d:6d:2c:26:43:93:67:1e:c4:bd:7e:69:7d:96:12:f5:
         8f:52:1a:fb:0c:c0:8d:38:5d:de:5f:7e:06:44:a0:29:a8:de:
         2d:b6:6c:95:b5:09:b1:cf:1e:60:a2:6d:a9:3f:36:d4:d4:07:
         2e:ac:16:3b:6d:21:58:a2:55:b1:22:dc:d6:68:62:f7:8d:73:
         6d:2a:35:fe:b3:2b:06:f1:7b:5b:22:02:d7:12:c7:6b:76:69:
         b5:ba:c3:22:23:16:fc:26:d2:ea:09:28:22:19:d9:39:61:df:
         65:13:b9:70:d1:97:47:37:4f:a8:74:5c:26:0a:35:a7:e2:dd:
         1c:e9:85:34
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 12:06:32 2026 by rpki-client