Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e35302e36352e302f32342d3234203d3e2039333839.roa
File:                     3131332e35302e36352e302f32342d3234203d3e2039333839.roa (raw, json)
Hash identifier:          Amvmoh0WANTVUYP6rha9e+7BvOU3uStsfdOFc1UodKo=
Subject key identifier:   B7:A2:24:52:CD:C1:5C:F1:82:BD:CE:A6:B0:36:D2:08:A9:79:EA:73
Certificate issuer:       /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Certificate serial:       5AE27FBFAD6E0DF68F8EDD9382C3BA2C18D2BC09
Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e35302e36352e302f32342d3234203d3e2039333839.roa
Signing time:             Thu 07 May 2026 02:06:45 +0000
ROA not before:           Thu 07 May 2026 02:01:45 +0000
ROA not after:            Thu 06 May 2027 02:06:45 +0000
asID:                     9389
IP address blocks:        113.50.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:12:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e2:7f:bf:ad:6e:0d:f6:8f:8e:dd:93:82:c3:ba:2c:18:d2:bc:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
        Validity
            Not Before: May  7 02:01:45 2026 GMT
            Not After : May  6 02:06:45 2027 GMT
        Subject: CN=B7A22452CDC15CF182BDCEA6B036D208A979EA73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:07:e9:82:8a:1a:cb:92:4d:a5:c0:7b:4d:00:
                    5a:f8:6c:55:cd:47:cc:75:51:05:2c:be:79:f7:d8:
                    fb:c7:f9:33:1f:f6:58:f9:35:55:50:fe:28:97:38:
                    8b:e1:fa:69:8d:97:38:2f:67:5b:a1:69:83:04:5c:
                    80:30:cc:1f:b3:93:05:f3:ad:a8:fb:61:1d:9d:af:
                    76:21:d0:b1:97:c0:7d:da:47:4f:85:a6:2f:8c:f6:
                    f0:35:28:dc:9a:bf:b3:2e:11:7d:ab:b0:da:93:c1:
                    96:d6:aa:2c:16:17:e3:bc:22:db:b9:59:43:7d:08:
                    e5:29:08:cb:59:be:b0:13:92:6c:c7:f9:01:21:9a:
                    ac:5d:4c:04:e6:9c:2f:b4:dc:6d:8a:9a:a6:ef:9f:
                    9c:94:9d:61:68:14:91:8c:67:43:54:4b:0d:54:8b:
                    4e:b0:c2:ce:99:4a:9f:5d:27:44:20:00:9e:57:54:
                    b2:14:ef:25:4c:38:83:4b:d9:01:84:f7:bd:49:04:
                    42:dd:4a:0a:7e:93:30:28:c7:e2:42:1a:f8:55:81:
                    84:95:5e:41:3c:be:53:ad:b9:0f:83:8e:af:5f:a2:
                    82:6d:51:62:5b:ff:19:e3:49:05:5d:c3:26:55:6d:
                    9e:26:c3:fe:ea:fc:4b:d0:e9:75:f9:9a:cf:7e:08:
                    da:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A2:24:52:CD:C1:5C:F1:82:BD:CE:A6:B0:36:D2:08:A9:79:EA:73
            X509v3 Authority Key Identifier:
                keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e35302e36352e302f32342d3234203d3e2039333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.50.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:26:50:c6:25:14:dd:7f:26:61:75:3d:0f:70:dd:41:e3:db:
         c1:b6:23:9e:fb:e0:1b:73:97:7a:34:5c:5f:2d:b6:05:5b:7b:
         3f:c1:98:bf:f9:b4:ba:d9:e2:9a:3d:72:71:ff:cd:ba:67:70:
         4b:6f:12:b9:4b:d4:71:94:f6:bb:b4:0e:8a:a9:a4:da:28:6e:
         15:2d:1b:ce:e1:8a:7b:d0:96:c0:84:97:c9:9f:fd:c4:bb:5e:
         14:70:e9:57:33:26:b6:f3:c8:75:b9:e2:2c:51:91:7c:c4:e8:
         fb:fc:78:dd:3c:a7:29:18:5e:bc:4d:b2:92:5b:a5:e7:01:2a:
         25:16:21:59:ff:f5:4e:12:3c:f5:8c:36:1c:f5:b0:95:44:4c:
         2b:82:1b:6a:88:97:f4:07:cc:2f:fc:a6:12:8a:b8:a8:e4:fe:
         47:99:22:22:6c:c4:88:26:d5:44:fb:a1:b5:2e:0f:8f:a8:4d:
         bf:86:79:6d:40:48:c1:25:b8:9a:b8:f5:58:d1:c2:74:e2:fd:
         2c:29:78:b3:01:e5:87:5b:ce:34:07:58:f1:8e:12:3e:df:23:
         6d:59:10:60:64:dc:ba:68:83:81:0d:8f:97:f5:ba:35:33:5a:
         83:24:74:4b:fc:4a:f4:5b:a6:94:2b:45:d5:41:c3:04:74:03:
         44:b0:00:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:55:14 2026 by rpki-client