Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3137322e302f32322d3232203d3e203538343636.roa
File:                     3131372e35312e3137322e302f32322d3232203d3e203538343636.roa (raw, json)
Hash identifier:          MR0SjnUbF9aNH11dywlGHeOWE0VrBbSzqx7j1NBStiU=
Subject key identifier:   31:58:E0:BC:31:0E:75:31:A6:29:B0:DF:CE:82:8A:A4:3C:45:58:DB
Certificate issuer:       /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial:       35AC17CE1E5904EF05939E0604FD5FB9D1B7AA49
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3137322e302f32322d3232203d3e203538343636.roa
Signing time:             Thu 07 May 2026 05:15:50 +0000
ROA not before:           Thu 07 May 2026 05:10:50 +0000
ROA not after:            Thu 06 May 2027 05:15:50 +0000
asID:                     58466
IP address blocks:        117.51.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ac:17:ce:1e:59:04:ef:05:93:9e:06:04:fd:5f:b9:d1:b7:aa:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
        Validity
            Not Before: May  7 05:10:50 2026 GMT
            Not After : May  6 05:15:50 2027 GMT
        Subject: CN=3158E0BC310E7531A629B0DFCE828AA43C4558DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e0:da:f4:bf:9c:19:02:b9:30:57:43:4a:c0:
                    98:d5:17:8c:53:8f:cc:6b:eb:f2:57:ae:5b:24:7c:
                    27:11:0d:9f:ea:26:5e:c2:ad:04:69:ca:62:92:60:
                    c3:30:bc:23:15:56:ec:d8:fc:17:19:0d:18:61:f5:
                    e7:19:3e:f2:ab:99:f6:cc:a3:35:de:16:d2:a4:d2:
                    f7:0a:7c:d5:dc:dd:a4:96:ef:62:00:85:16:71:3a:
                    07:23:d7:60:73:d8:79:39:c1:90:71:c1:23:72:2a:
                    66:39:7d:cb:c4:9f:a5:88:2c:99:40:5b:4c:cc:41:
                    a7:2a:2a:ef:98:5a:c0:41:9f:23:2f:bb:26:e1:52:
                    6d:f8:3e:04:0d:14:34:3e:b2:63:3e:7f:99:cf:60:
                    7a:a3:3f:d2:6e:10:0b:b0:6d:34:10:66:03:40:20:
                    fb:4b:09:e5:3a:96:77:d6:a6:78:3c:e7:71:d5:cd:
                    a7:a4:70:f4:47:ba:03:a5:82:ce:59:bf:20:c2:88:
                    ae:53:a2:02:8b:bf:cd:84:e6:ea:fb:3c:d3:4b:db:
                    36:db:6c:ae:67:ad:4e:87:9d:bf:28:27:67:af:31:
                    c1:97:df:00:e4:a2:a0:ec:bb:5b:b8:da:4c:09:5a:
                    93:2f:7c:2d:f8:42:58:12:81:9e:d0:06:d5:d6:a3:
                    6a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:58:E0:BC:31:0E:75:31:A6:29:B0:DF:CE:82:8A:A4:3C:45:58:DB
            X509v3 Authority Key Identifier:
                keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3137322e302f32322d3232203d3e203538343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.51.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:fa:b2:70:b8:6c:c7:7b:8f:b1:df:0a:f9:da:22:84:5f:93:
         ad:57:dc:f8:22:79:93:b4:14:ac:72:7f:cb:9f:94:c7:87:00:
         df:d8:75:74:cc:1d:e8:45:ef:3a:80:af:02:f0:86:38:e9:c3:
         c4:61:98:80:c8:22:5a:10:b9:57:05:ce:f4:28:66:21:60:c9:
         4f:33:c9:09:06:1c:19:8a:91:91:cc:86:09:bc:79:0f:c8:c0:
         22:82:02:ea:a3:0f:4e:29:4f:6a:f6:18:37:7f:ce:7d:64:df:
         84:77:bb:3c:43:07:f1:65:0b:46:52:6d:43:db:7a:4a:36:6d:
         f7:5a:f2:01:c0:31:a7:2d:c9:fb:bf:be:d2:68:6c:4c:92:01:
         fe:ad:46:81:67:44:17:65:47:15:57:4e:58:10:93:4b:96:0b:
         f2:1f:7e:92:cd:ac:65:bc:c8:3f:4d:44:cf:7d:ee:ff:7d:00:
         48:0d:76:1f:69:c7:d1:7f:5a:89:63:40:27:76:3a:d1:9e:d8:
         e4:91:fd:af:04:6f:b7:b7:7e:1b:1f:2c:4d:89:67:f0:27:6c:
         7c:de:5e:89:11:eb:b7:f0:45:66:f8:8b:d5:ab:8c:ef:e2:5c:
         d6:6d:42:fe:7c:6e:8c:fc:8f:f6:78:16:47:e4:15:ee:d9:92:
         ff:00:5f:57
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 11:59:10 2026 by rpki-client