Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e34392e31362e302f32302d3230203d3e2039333839.roa
File:                     3131332e34392e31362e302f32302d3230203d3e2039333839.roa (raw, json)
Hash identifier:          8mWM/JJe1yVYZ8pkiEzSGfDd/EY4c64RrfpXc2H4n+c=
Subject key identifier:   08:FD:81:84:66:B9:23:22:E8:79:2B:C0:CC:03:90:31:29:A2:D7:ED
Certificate issuer:       /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Certificate serial:       326F3BEAA557208BA6A0146D9A9F696A25A6409F
Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e34392e31362e302f32302d3230203d3e2039333839.roa
Signing time:             Thu 07 May 2026 02:06:44 +0000
ROA not before:           Thu 07 May 2026 02:01:44 +0000
ROA not after:            Thu 06 May 2027 02:06:44 +0000
asID:                     9389
IP address blocks:        113.49.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:12:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:6f:3b:ea:a5:57:20:8b:a6:a0:14:6d:9a:9f:69:6a:25:a6:40:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
        Validity
            Not Before: May  7 02:01:44 2026 GMT
            Not After : May  6 02:06:44 2027 GMT
        Subject: CN=08FD818466B92322E8792BC0CC03903129A2D7ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3a:d8:06:2f:de:c4:44:61:ff:16:b9:e7:1f:
                    d2:7b:5e:23:d1:8d:86:95:3a:07:7c:78:06:ad:cc:
                    d3:6b:77:3e:81:73:7b:f3:cf:ba:bf:56:09:92:47:
                    48:35:09:0c:99:fb:39:db:86:c6:71:9e:f6:20:d7:
                    04:d7:26:d0:d3:9e:74:8d:c6:57:fa:9c:5f:68:ad:
                    5d:3a:f1:26:fa:cf:8e:04:4c:50:83:dd:65:f4:d2:
                    90:b0:33:63:53:1e:2e:59:5a:26:cc:c6:8f:aa:22:
                    ac:be:99:ac:bb:04:7a:35:c5:2b:28:3e:49:90:9c:
                    85:0d:1a:c6:08:7d:f1:69:fb:a7:91:90:1b:c6:8b:
                    05:55:7a:da:d7:42:b3:3a:cf:02:25:82:a7:81:0b:
                    b5:06:b8:6d:20:08:29:d2:b4:3f:d7:08:12:78:a7:
                    64:5c:4d:ff:7e:00:fd:79:f8:04:68:a3:d5:57:c4:
                    87:8e:f8:cc:fe:1d:6a:22:c1:2a:bb:0b:18:9b:71:
                    87:c2:d7:b0:0f:af:44:bd:db:8c:67:59:48:9b:92:
                    87:18:a9:6a:ff:28:f3:fa:71:ef:eb:59:d1:fa:0a:
                    53:cd:7a:36:a6:4c:35:3a:cd:5c:a9:1e:b3:3e:54:
                    6b:d5:77:ee:c1:e0:fd:40:4a:7f:37:22:f1:e9:3e:
                    cc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:FD:81:84:66:B9:23:22:E8:79:2B:C0:CC:03:90:31:29:A2:D7:ED
            X509v3 Authority Key Identifier:
                keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e34392e31362e302f32302d3230203d3e2039333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.49.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2b:f4:06:df:ad:90:3f:51:39:67:d8:8b:13:ae:4b:8a:3d:2c:
         eb:43:28:da:31:d1:5b:2e:94:66:23:ef:9d:66:b7:48:92:de:
         d8:b7:fb:81:66:a9:04:1c:19:4d:ac:40:1f:e6:c0:75:51:3d:
         46:d6:a7:b1:40:97:93:3a:03:b1:a3:a2:e3:1c:cd:22:9b:2e:
         1a:b9:c4:e4:fb:f1:d9:88:ce:b0:a6:ff:9d:43:93:a0:96:d3:
         91:ff:9d:b7:91:82:a2:ae:b7:19:30:02:09:f7:9b:16:72:a2:
         ff:e3:f8:62:87:31:b8:58:db:fe:0b:6e:36:30:1d:ca:81:47:
         c1:0f:aa:fd:27:0d:31:eb:65:95:ee:69:9c:54:24:8b:42:44:
         06:a0:62:3e:bf:f1:80:78:58:da:5c:b4:17:36:5a:4d:0c:54:
         bf:c3:ba:57:4e:6b:53:2c:43:9b:e3:7b:83:7f:08:9e:bc:09:
         31:98:4b:8b:88:61:cb:89:f6:47:d4:68:2d:6f:0f:02:ad:6e:
         4c:dd:a1:88:1d:de:0b:f1:6a:d1:a6:ef:93:8e:fb:85:9a:af:
         a9:ac:ab:1b:5b:c6:f1:a3:01:eb:88:29:35:f5:06:35:3c:d7:
         c4:0a:cf:55:8b:e2:c9:ec:6c:47:95:cb:ff:2b:d7:16:aa:d7:
         c9:f1:7d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:50:48 2026 by rpki-client