Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e34382e34382e302f32302d3230203d3e2039333839.roa
File:                     3131332e34382e34382e302f32302d3230203d3e2039333839.roa (raw, json)
Hash identifier:          9bPV0cC0IGjdSA5JVLDKF4J/5tmikZb33aL3J1Zas98=
Subject key identifier:   82:CF:2E:DD:1D:A2:69:1D:2D:53:FA:A5:95:C1:72:E0:79:CA:8B:7C
Certificate issuer:       /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Certificate serial:       7CC08C369E8C64C70D6634DF5365F79E1B36CBEE
Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e34382e34382e302f32302d3230203d3e2039333839.roa
Signing time:             Thu 07 May 2026 02:06:45 +0000
ROA not before:           Thu 07 May 2026 02:01:45 +0000
ROA not after:            Thu 06 May 2027 02:06:45 +0000
asID:                     9389
IP address blocks:        113.48.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:12:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c0:8c:36:9e:8c:64:c7:0d:66:34:df:53:65:f7:9e:1b:36:cb:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
        Validity
            Not Before: May  7 02:01:45 2026 GMT
            Not After : May  6 02:06:45 2027 GMT
        Subject: CN=82CF2EDD1DA2691D2D53FAA595C172E079CA8B7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4b:53:ed:82:a7:19:a7:1a:75:bd:5d:22:8d:
                    e6:07:3c:68:f4:e6:c5:f5:46:e2:af:57:a8:ce:66:
                    13:01:11:89:df:6b:8d:c8:be:d0:1b:f7:80:09:86:
                    fa:c7:0c:c8:52:f4:dd:62:37:d5:bb:ab:59:cf:c5:
                    db:13:73:15:ca:41:8c:c7:46:d6:85:91:96:12:89:
                    ff:28:9c:50:af:ad:11:a9:83:5e:5e:07:68:a5:fa:
                    87:52:b3:98:b0:c2:cb:e5:f3:0f:e3:29:6f:d7:cc:
                    7c:12:46:98:b4:c4:dd:b0:4e:e9:95:bf:90:ed:3e:
                    d5:80:0a:3e:e0:c3:8f:4d:ae:0e:28:1f:a9:16:81:
                    eb:00:1e:45:7a:17:59:f2:bd:f0:a3:4d:0f:f7:fe:
                    67:05:5d:9c:5a:e7:c0:5a:6a:b9:31:ab:1e:41:16:
                    eb:3d:59:66:3f:2b:45:56:16:00:57:77:c1:cc:e2:
                    69:51:d7:e4:e5:62:26:87:2b:83:b1:57:7a:84:cb:
                    ef:e0:2c:20:2c:1f:3d:db:ab:b1:d0:78:c4:c5:18:
                    47:bc:f9:41:c6:18:46:16:79:44:dc:50:1b:f6:6b:
                    16:f3:a3:8f:21:f6:46:45:2a:ab:33:1b:40:fe:81:
                    22:11:1e:a5:da:9c:e0:4e:76:9c:b8:db:9c:40:7f:
                    30:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CF:2E:DD:1D:A2:69:1D:2D:53:FA:A5:95:C1:72:E0:79:CA:8B:7C
            X509v3 Authority Key Identifier:
                keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e34382e34382e302f32302d3230203d3e2039333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.48.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a2:08:04:40:33:4f:e1:20:11:05:4a:95:1f:36:6d:68:9f:33:
         b0:97:7f:89:72:ce:0c:70:c5:9e:a2:03:df:52:01:18:4c:f5:
         5d:78:51:df:7a:ab:88:6a:19:ad:37:6b:dc:ea:64:0f:4e:ea:
         3e:e4:a1:4d:42:c3:05:80:74:1f:ef:db:7d:46:d3:bc:9f:6a:
         b3:9e:12:65:47:aa:a3:cf:68:dd:94:81:60:2f:c8:4d:32:22:
         0b:b9:bc:3a:54:7c:1a:07:ed:52:90:b1:86:25:62:ae:60:c2:
         61:48:f0:29:f1:18:9f:f8:ab:1c:f7:fc:f6:f3:ec:e8:95:b0:
         79:5c:89:d2:24:37:72:87:2b:07:71:16:3a:74:80:ba:98:5a:
         ee:e2:b6:b8:7a:80:0c:04:1c:b0:13:74:c9:e4:63:8f:98:5c:
         24:88:99:ff:8f:8e:66:ad:ec:fa:13:08:63:aa:4c:c3:13:43:
         87:38:c0:3b:b3:35:cf:b4:2f:a8:dd:f1:01:92:72:fe:c2:01:
         1a:04:3f:95:1e:63:7d:b7:87:73:88:f1:6b:fe:1d:7d:a8:71:
         2e:d7:67:e4:75:9a:7b:f2:36:d3:79:1a:ed:00:d1:38:9a:23:
         f1:1f:9a:9d:85:f0:eb:b2:b5:97:e8:c0:d5:f4:8c:37:8a:9f:
         32:2f:21:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:46:50 2026 by rpki-client