Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/AS13335.roa
File:                     AS13335.roa (raw, json)
Hash identifier:          9Hng9d3Qz7Lydzkg5+hOCdUoBzRae66YdJRsgOh6mY0=
Subject key identifier:   00:B8:F0:87:C9:58:5A:69:C0:7D:84:8F:DE:0D:D9:AA:D8:14:8B:6B
Certificate issuer:       /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial:       712ECAF07DB492DD37B737B40EF9C2E0C1E7CBA5
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/AS13335.roa
Signing time:             Wed 20 May 2026 07:14:10 +0000
ROA not before:           Wed 20 May 2026 07:09:10 +0000
ROA not after:            Wed 19 May 2027 07:14:10 +0000
asID:                     13335
IP address blocks:        117.51.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 May 2026 14:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:2e:ca:f0:7d:b4:92:dd:37:b7:37:b4:0e:f9:c2:e0:c1:e7:cb:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
        Validity
            Not Before: May 20 07:09:10 2026 GMT
            Not After : May 19 07:14:10 2027 GMT
        Subject: CN=00B8F087C9585A69C07D848FDE0DD9AAD8148B6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:96:58:3a:3e:f6:bd:80:a3:45:1d:83:fd:0f:
                    74:f4:ae:80:5e:12:72:1c:6c:fb:18:10:ae:14:ab:
                    c4:8d:38:cc:36:79:d7:32:cb:17:a2:78:dc:41:d6:
                    c5:14:d5:c5:e9:5c:f9:b1:c8:3b:21:fc:72:fa:dd:
                    df:a5:53:d7:db:a0:5b:5c:a9:8f:7b:f7:cb:a5:56:
                    ef:1f:ea:a5:37:08:45:53:63:d2:a4:9c:d3:d3:8d:
                    25:43:4c:d6:60:55:0e:10:c7:31:bc:31:7d:3d:d5:
                    86:a1:c8:09:e7:34:b7:43:5d:17:c3:68:8d:5f:e0:
                    35:31:96:8a:90:1c:8e:25:0e:ef:fa:11:e1:22:20:
                    08:86:b2:e6:91:b8:69:8a:a6:a4:ed:7a:b6:fd:57:
                    44:4d:b5:bd:13:c0:d9:ce:f0:41:c9:55:f0:60:9e:
                    d1:94:6f:41:75:70:27:a1:26:f1:b6:35:48:20:32:
                    e7:bd:b9:38:1a:22:88:06:10:ad:7e:fc:4d:ec:96:
                    25:88:23:8e:54:6e:83:c9:c0:80:80:c6:1c:4c:fe:
                    df:5c:36:7d:bb:02:60:1a:34:70:8c:a5:ce:30:11:
                    65:73:11:15:aa:0e:f1:9d:e5:a3:24:0e:e8:e1:ee:
                    24:b2:8f:84:62:4d:d5:88:c7:dc:8a:58:c7:20:e0:
                    cf:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B8:F0:87:C9:58:5A:69:C0:7D:84:8F:DE:0D:D9:AA:D8:14:8B:6B
            X509v3 Authority Key Identifier:
                keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/AS13335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.51.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:63:c0:42:16:42:9d:01:14:ed:b0:88:70:76:20:5d:b0:36:
         92:32:77:e4:5f:c3:e4:06:b1:69:29:9c:5a:d3:64:c8:53:21:
         d8:60:13:6e:83:a5:53:40:11:8f:b6:b2:5f:88:88:d9:01:0e:
         56:15:b5:92:74:7f:85:3c:e8:de:28:b8:06:51:17:3a:6c:ae:
         94:92:71:e5:b7:06:d7:d1:41:2f:20:35:de:52:47:68:5d:b0:
         ad:63:92:9b:39:45:be:29:43:ea:44:bc:61:86:49:ff:b1:78:
         5d:5d:98:12:33:a5:20:0c:0b:f8:1e:35:31:89:48:3a:3c:78:
         df:c7:57:1a:11:3a:f5:d0:71:dc:b7:3e:8f:c2:e8:ff:0c:6d:
         5d:a9:04:de:51:ba:45:7a:d7:7f:31:46:0d:4a:3c:74:60:78:
         4f:25:21:0b:3b:5f:a9:c4:a0:3d:7a:74:13:19:07:13:08:1d:
         d9:c0:a9:b5:8f:d7:e1:5c:c0:0e:28:83:12:a2:79:75:17:13:
         9c:c0:3c:a6:fa:84:9f:ac:53:fc:2d:21:57:a2:65:d4:8f:81:
         85:5b:8a:58:f9:6a:94:98:4a:db:cd:fd:ee:af:f0:b1:a5:02:
         c3:81:50:00:a8:28:5f:41:e7:38:63:05:20:9c:73:64:71:16:
         cc:34:e9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:07:16 2026 by rpki-client