Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e35302e36342e302f32342d3234203d3e2039333839.roa
File:                     3131332e35302e36342e302f32342d3234203d3e2039333839.roa (raw, json)
Hash identifier:          AWtMyEtsde3QbGJqhMDHVVxhabML8rWueBODfmoKDxI=
Subject key identifier:   9A:90:3D:DB:45:D0:F4:9E:2D:88:1D:EB:98:DE:84:05:F9:FB:C2:34
Certificate issuer:       /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Certificate serial:       6306FB3D8678C91AA113F4768D9AF0E5968896AA
Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e35302e36342e302f32342d3234203d3e2039333839.roa
Signing time:             Thu 07 May 2026 02:06:44 +0000
ROA not before:           Thu 07 May 2026 02:01:44 +0000
ROA not after:            Thu 06 May 2027 02:06:44 +0000
asID:                     9389
IP address blocks:        113.50.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:12:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:06:fb:3d:86:78:c9:1a:a1:13:f4:76:8d:9a:f0:e5:96:88:96:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
        Validity
            Not Before: May  7 02:01:44 2026 GMT
            Not After : May  6 02:06:44 2027 GMT
        Subject: CN=9A903DDB45D0F49E2D881DEB98DE8405F9FBC234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a4:68:67:b9:c4:34:f9:c3:e6:a4:21:e2:04:
                    01:27:4a:14:70:98:c1:cb:ed:47:3c:9c:3e:63:10:
                    d1:ca:3c:69:40:f4:4a:4c:cf:44:f4:44:75:4f:9f:
                    a6:91:77:14:60:3e:77:6d:ef:d4:b9:7f:b1:25:3c:
                    b1:02:d9:76:11:1f:b6:87:82:65:46:08:d5:67:28:
                    31:f7:a3:06:8d:27:e9:65:f1:13:e6:3e:98:f1:23:
                    69:0f:03:65:64:44:23:da:c8:90:69:14:90:99:11:
                    6a:98:f5:df:97:c5:6a:2b:6b:52:5b:1e:ab:78:7f:
                    63:bd:c8:3a:5f:5e:77:dc:3e:2b:60:dd:ef:f4:37:
                    b6:df:8f:69:05:cf:6a:10:dc:4f:21:e1:d5:23:a9:
                    ae:59:4b:6d:3f:20:b3:d4:b9:58:9a:a6:f4:66:32:
                    7c:88:52:41:81:f8:65:9f:f0:c0:ee:5b:7c:e9:8f:
                    2f:80:8e:61:c3:9f:6a:16:3d:f8:94:d4:89:9a:35:
                    ea:ff:6a:f1:bd:d0:9e:3c:68:9b:0e:0c:33:7c:f0:
                    56:b4:00:e4:23:d7:7c:d7:66:95:04:c3:4d:7e:f3:
                    53:8e:60:94:70:5f:08:30:06:af:00:23:de:02:d6:
                    00:b5:29:0c:fc:f2:c3:9c:a3:db:c2:ee:fa:98:0c:
                    e8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:90:3D:DB:45:D0:F4:9E:2D:88:1D:EB:98:DE:84:05:F9:FB:C2:34
            X509v3 Authority Key Identifier:
                keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e35302e36342e302f32342d3234203d3e2039333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.50.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:16:fb:fd:e0:bb:10:ba:d6:86:a1:8f:ec:3c:7c:77:2d:f7:
         f0:85:4e:39:99:35:b9:4a:97:31:ea:a6:23:16:c8:bb:fa:5b:
         36:89:30:00:1e:92:6b:7e:bf:07:e7:76:81:1a:cd:04:f7:fe:
         ec:c5:62:b7:81:10:b4:ed:3d:4a:d9:0e:6a:ea:79:92:d4:df:
         9b:b6:d6:bc:93:ac:7a:6f:92:4d:f2:a7:39:fb:2b:88:dd:df:
         26:6c:07:be:cb:79:93:f1:e5:ff:f6:88:59:2c:1e:04:f3:9e:
         f6:bb:8f:bd:c4:1b:a8:65:c9:4e:5f:5e:9d:ab:0d:21:4d:aa:
         8b:0f:c0:6a:ce:1d:55:9f:ad:e4:0c:92:d3:ef:1a:16:80:b8:
         af:01:4c:1c:b0:37:66:dd:33:6d:e4:8f:8f:d8:00:fd:52:ae:
         44:2c:b3:e2:a5:9b:3a:4d:ba:3a:77:51:74:eb:e6:18:49:e0:
         7f:18:60:ba:7b:3f:59:90:8c:f1:18:b6:ea:e4:bc:0a:ba:e3:
         3f:d2:a9:6c:8e:dd:34:5c:c5:2e:9e:1c:b3:62:57:ec:7f:28:
         73:ab:fe:a5:f4:ba:0d:96:a2:59:94:53:65:2a:4c:92:fb:db:
         a9:98:b1:e9:b4:3b:e6:e3:e2:0a:26:64:71:f4:e8:03:52:ba:
         ce:8a:f3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:01:09 2026 by rpki-client