Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e35302e302e302f32302d3230203d3e2039333839.roa
File:                     3131332e35302e302e302f32302d3230203d3e2039333839.roa (raw, json)
Hash identifier:          JCAxhxpXFwGgFMaOCG0dan/zaIBABYEA+/m+uHfLjz8=
Subject key identifier:   B1:F2:56:FC:24:84:D4:B1:83:74:40:80:D4:CB:73:CE:C7:00:07:D8
Certificate issuer:       /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Certificate serial:       1F9B6875CB637F50733624E563247A133AB95BCB
Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e35302e302e302f32302d3230203d3e2039333839.roa
Signing time:             Thu 07 May 2026 02:06:45 +0000
ROA not before:           Thu 07 May 2026 02:01:45 +0000
ROA not after:            Thu 06 May 2027 02:06:45 +0000
asID:                     9389
IP address blocks:        113.50.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:9b:68:75:cb:63:7f:50:73:36:24:e5:63:24:7a:13:3a:b9:5b:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
        Validity
            Not Before: May  7 02:01:45 2026 GMT
            Not After : May  6 02:06:45 2027 GMT
        Subject: CN=B1F256FC2484D4B183744080D4CB73CEC70007D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:22:b3:92:4d:bf:cd:c4:7c:30:bd:36:8f:18:
                    b2:d6:1f:0e:12:b7:4e:de:ac:4c:7c:bf:a9:b1:2a:
                    a7:de:b6:fb:33:b3:85:8e:25:4c:08:87:a6:1d:43:
                    fe:a1:2c:d7:31:45:15:e4:8d:22:83:9b:e6:92:ba:
                    2b:e6:5d:94:3e:b8:48:e0:4a:ba:32:d7:1a:bb:4a:
                    a8:b6:82:5b:5c:eb:ef:20:33:37:dd:8a:87:ab:73:
                    49:7c:c7:a3:8f:7e:5b:e2:cb:32:16:dc:2f:bb:59:
                    72:f4:c0:00:f8:47:48:dc:49:eb:9f:88:b9:e6:af:
                    78:ea:52:37:82:2c:25:d1:a5:b0:c0:75:01:03:a3:
                    c6:60:7c:e9:ff:32:5a:69:18:1d:7c:dc:53:20:60:
                    23:7a:ca:45:2f:05:a2:fa:6a:e4:df:63:e5:99:1e:
                    25:38:dc:9a:94:3f:4f:da:68:da:be:65:b3:db:65:
                    57:55:22:69:42:c5:51:c9:18:56:43:7b:e5:83:76:
                    87:4f:85:54:71:13:2f:df:53:27:d1:7a:09:e3:a8:
                    2a:69:03:d7:45:80:12:19:93:ac:e6:8d:d9:ad:25:
                    f1:02:e0:be:67:10:6a:07:08:f6:cf:cf:67:f2:8a:
                    ea:54:fa:e7:87:16:0b:39:26:24:37:fd:da:c8:0b:
                    80:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F2:56:FC:24:84:D4:B1:83:74:40:80:D4:CB:73:CE:C7:00:07:D8
            X509v3 Authority Key Identifier:
                keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e35302e302e302f32302d3230203d3e2039333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.50.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         61:9d:aa:26:3f:08:6a:6b:40:b1:5c:ec:44:8e:76:b3:39:88:
         92:c9:b8:43:4e:97:e9:e7:ba:56:cc:23:bd:70:d0:05:8f:05:
         cd:f9:95:16:0a:ce:4f:71:2c:b9:0d:90:11:f1:c0:7c:e0:99:
         af:08:cf:13:4c:f3:9c:61:57:00:47:03:be:9c:8a:f9:a9:a2:
         ef:99:b9:1b:10:0a:43:b6:04:e9:98:47:90:05:0e:66:d6:16:
         5b:a2:62:a2:8b:c3:aa:87:b7:f4:75:8e:cb:46:78:33:99:0a:
         71:de:f2:78:8e:95:11:53:35:0b:2a:ab:6d:c6:a6:f2:31:ce:
         34:05:1a:2f:92:a6:94:7f:05:17:7c:cf:72:76:0b:82:1a:ec:
         09:e7:07:53:b4:bb:22:17:6e:3c:5c:09:47:ab:3d:5f:d7:b3:
         1b:15:eb:8d:60:6f:38:a1:85:9a:a6:66:f1:c6:17:df:fd:85:
         2d:d9:25:c0:3d:29:39:45:06:39:18:da:d1:9c:b2:ac:c5:a4:
         8a:aa:f9:7e:e1:bf:bf:e0:b5:4b:76:0b:86:e3:46:1e:f5:1a:
         7e:c8:33:0e:95:be:5b:e3:f4:2f:79:d0:c3:e2:68:da:99:b5:
         a2:a5:2d:4b:66:29:86:a8:24:05:e6:76:59:fb:7a:f5:0f:c0:
         1d:3a:38:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:53:12 2026 by rpki-client