Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e34382e302e302f31342d3134203d3e2030.roa
File:                     3131332e34382e302e302f31342d3134203d3e2030.roa (raw, json)
Hash identifier:          BXwXelvdfXad+LlIk99UkFAx/zud0desn5xZH50Kl74=
Subject key identifier:   40:D2:C7:0F:AC:3F:0B:4F:DC:87:12:7E:84:06:69:AF:4F:4D:A3:5B
Certificate issuer:       /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Certificate serial:       499FF44336EE580B4EE17A9C5EA02CA1BF21FAE7
Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e34382e302e302f31342d3134203d3e2030.roa
Signing time:             Thu 07 May 2026 02:21:21 +0000
ROA not before:           Thu 07 May 2026 02:16:21 +0000
ROA not after:            Thu 06 May 2027 02:21:21 +0000
asID:                     0
IP address blocks:        113.48.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:9f:f4:43:36:ee:58:0b:4e:e1:7a:9c:5e:a0:2c:a1:bf:21:fa:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
        Validity
            Not Before: May  7 02:16:21 2026 GMT
            Not After : May  6 02:21:21 2027 GMT
        Subject: CN=40D2C70FAC3F0B4FDC87127E840669AF4F4DA35B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:94:ac:1c:b4:f3:6a:d1:4c:fe:4e:c7:4c:29:
                    cd:0e:e8:d4:d9:74:b5:50:ad:81:5b:5f:75:81:74:
                    9b:67:f9:b4:a5:cf:3b:07:ac:93:f8:5d:95:fa:6a:
                    43:92:a6:54:76:38:b3:84:42:93:2a:a0:99:13:04:
                    24:85:b4:e2:1e:ed:42:74:5c:30:f7:1d:40:01:80:
                    0b:f0:7d:31:73:c6:37:17:cc:b3:fc:d1:d9:1f:cb:
                    80:5a:d3:50:19:7d:07:43:01:bc:3e:6e:9d:f8:fa:
                    06:80:f1:b8:4c:d9:55:f3:d4:da:99:2d:69:0f:2f:
                    d5:6e:6d:a5:69:70:cb:92:5c:e4:1f:fd:7f:a9:ff:
                    1c:81:5a:99:a2:7a:09:45:57:26:66:0b:42:28:ac:
                    7f:07:7a:cc:3f:fd:49:4c:13:fc:05:f4:51:5c:23:
                    4e:d3:ad:b8:aa:1b:b1:57:81:b3:29:e9:7e:5c:74:
                    de:c6:fe:94:94:71:da:ce:27:19:96:71:c8:86:bd:
                    f2:6a:48:cb:30:3f:a4:ce:78:67:7a:59:39:f0:21:
                    7f:af:88:bc:49:20:c2:dc:71:0f:f0:63:5d:c3:79:
                    09:eb:36:c6:74:18:9d:94:51:83:ce:41:3a:f8:08:
                    6c:83:cb:ea:ee:54:af:bb:5e:0c:ad:9e:c9:d2:08:
                    43:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D2:C7:0F:AC:3F:0B:4F:DC:87:12:7E:84:06:69:AF:4F:4D:A3:5B
            X509v3 Authority Key Identifier:
                keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e34382e302e302f31342d3134203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.48.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         3a:7f:cf:2e:1d:a8:21:d4:25:d1:92:3b:1b:d2:10:55:95:ce:
         8f:7e:cf:6b:9f:b5:5a:3d:11:73:ca:7f:01:2b:ad:6b:09:4d:
         ee:70:84:21:54:e6:9d:c4:2b:43:fa:ea:91:60:77:3b:3f:12:
         b4:a5:8e:c8:5d:46:a7:db:34:41:4f:8a:76:b3:0a:c9:b4:5d:
         8a:34:50:44:09:b2:9b:9a:6b:31:89:9d:6e:4c:2d:4c:ab:a7:
         23:1c:3c:6f:cf:b8:15:60:58:5f:1f:db:da:39:b0:bb:b1:9a:
         a7:8e:d8:8f:26:9b:e1:21:28:66:f0:82:f6:16:5c:1d:45:b9:
         a4:93:2f:b2:2f:59:28:81:31:75:34:a7:f7:96:6d:d5:11:ef:
         06:de:ab:68:86:61:e5:72:a8:7e:8c:a2:b8:bb:8f:31:c3:6d:
         07:b0:e9:b6:36:73:53:ce:3f:57:5f:7c:70:93:3c:b5:e4:76:
         43:41:5e:e7:19:a8:73:e5:dd:54:72:a3:63:d2:96:d9:16:0d:
         20:21:e4:23:74:6b:9e:21:99:91:56:30:18:34:e5:64:18:fe:
         07:b4:40:28:02:22:e3:99:f0:c3:00:4b:c7:7b:9e:e9:04:7c:
         42:19:22:6d:2a:b9:1f:75:a4:a1:24:52:8d:54:75:e8:ab:83:
         f4:dd:b6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:48 2026 by rpki-client