Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e34392e302e302f32302d3230203d3e2034383337.roa
File:                     3131332e34392e302e302f32302d3230203d3e2034383337.roa (raw, json)
Hash identifier:          BtJuGH9eyI7J30aIlixhzcmnERaq7abngYrSLqEJF9E=
Subject key identifier:   77:F1:C5:37:A5:39:FA:8E:AC:FF:3C:C0:94:15:F5:07:9E:B9:2D:7C
Certificate issuer:       /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Certificate serial:       04FEAD7DAF2C7E208E82059A0D657EAE283ADBE2
Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e34392e302e302f32302d3230203d3e2034383337.roa
Signing time:             Thu 07 May 2026 02:06:45 +0000
ROA not before:           Thu 07 May 2026 02:01:45 +0000
ROA not after:            Thu 06 May 2027 02:06:45 +0000
asID:                     4837
IP address blocks:        113.49.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:fe:ad:7d:af:2c:7e:20:8e:82:05:9a:0d:65:7e:ae:28:3a:db:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
        Validity
            Not Before: May  7 02:01:45 2026 GMT
            Not After : May  6 02:06:45 2027 GMT
        Subject: CN=77F1C537A539FA8EACFF3CC09415F5079EB92D7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0b:33:ed:6e:f4:13:0f:ff:4b:2a:59:0b:16:
                    4d:83:d9:9e:83:71:27:a0:14:3c:6a:79:f0:ae:25:
                    69:da:15:d2:c7:f9:35:b5:a0:c8:49:35:8a:cb:9c:
                    57:c8:17:b6:70:16:fd:d4:74:6e:ea:b9:ff:86:eb:
                    6a:41:6b:3c:c0:62:96:1c:ea:25:17:51:8c:1f:53:
                    aa:aa:70:94:a7:1b:1c:bb:ef:a5:35:98:aa:b3:ed:
                    bf:85:42:1e:37:2b:6f:71:ed:60:c9:e4:da:02:07:
                    d8:00:ca:54:ff:1b:07:ad:27:0c:db:e5:76:f2:05:
                    52:d1:15:5a:9a:d5:2d:bf:b0:b1:55:7f:30:10:ab:
                    ae:3f:e2:d5:27:7b:f0:79:7d:92:f4:9b:49:69:30:
                    67:7f:f7:cb:4c:7a:61:c0:44:52:bc:11:52:fd:1f:
                    a5:a2:a1:6c:20:42:9f:38:99:fe:58:73:8a:2b:7d:
                    a1:1d:46:3b:7d:28:c0:bf:c7:45:23:2c:c9:78:49:
                    a8:3d:97:a9:3a:3b:99:df:2e:31:32:5f:1b:3c:74:
                    cf:10:86:76:18:c0:32:fc:b1:8e:db:d5:d5:7a:72:
                    36:8a:fd:5d:7a:f7:f5:b3:6e:e3:71:d6:72:4a:42:
                    68:98:7b:7a:42:c3:85:aa:fd:23:bf:fd:23:47:68:
                    a1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F1:C5:37:A5:39:FA:8E:AC:FF:3C:C0:94:15:F5:07:9E:B9:2D:7C
            X509v3 Authority Key Identifier:
                keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e34392e302e302f32302d3230203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.49.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5f:d9:4b:6d:12:c2:ab:cf:64:18:2a:a9:60:88:55:db:70:c8:
         da:cc:ad:3c:3d:e4:94:5c:8e:21:58:0d:fa:70:b2:01:02:4d:
         1c:56:38:86:ed:16:72:10:4a:03:bd:e2:d4:97:89:c4:cf:81:
         e4:f6:46:2d:c3:e2:b1:4e:a6:b1:b8:cc:5b:fc:f2:60:1a:9a:
         21:48:be:e3:d8:06:9b:f5:65:1c:f4:e9:8d:8d:27:33:9c:81:
         5a:e1:9a:8b:dc:e0:9f:1a:4f:8a:9a:7a:04:7b:42:2e:ec:14:
         8a:8f:92:e2:78:aa:a7:e0:fd:1a:14:fa:1c:65:bb:52:b3:c6:
         ee:37:35:5e:c3:5d:5e:28:0d:d5:7f:ef:ad:45:96:f1:2b:f7:
         a0:b1:95:49:51:4a:72:4b:f1:84:33:ad:23:35:1e:48:96:38:
         91:96:6d:e9:d5:58:52:32:25:33:bd:a3:76:b8:e1:38:86:4d:
         a7:1a:db:36:94:b4:9a:cd:ed:6a:c1:86:59:d9:fe:37:9c:f4:
         f7:b0:6a:55:a5:7d:ac:01:bb:28:6d:a2:e2:be:4e:da:4b:82:
         5a:d5:c4:bc:63:5c:33:08:78:40:35:76:70:20:c2:af:05:13:
         04:03:41:79:08:2e:d1:8d:28:97:f2:27:43:90:d1:5d:7f:02:
         a0:fe:fa:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:53:13 2026 by rpki-client