Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e35302e36372e302f32342d3234203d3e2039333839.roa
File:                     3131332e35302e36372e302f32342d3234203d3e2039333839.roa (raw, json)
Hash identifier:          JHDTSIW5VE5Yjr39X7xAL/i1NVN/A9HYQw2kkbpsSlA=
Subject key identifier:   8F:D0:D4:3C:8E:75:6A:A1:12:E5:E5:56:48:09:76:4D:05:5B:13:D4
Certificate issuer:       /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Certificate serial:       0CC01DD516A5A62E3662F62B29DF740913A2B552
Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e35302e36372e302f32342d3234203d3e2039333839.roa
Signing time:             Thu 07 May 2026 02:06:45 +0000
ROA not before:           Thu 07 May 2026 02:01:45 +0000
ROA not after:            Thu 06 May 2027 02:06:45 +0000
asID:                     9389
IP address blocks:        113.50.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:12:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:c0:1d:d5:16:a5:a6:2e:36:62:f6:2b:29:df:74:09:13:a2:b5:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
        Validity
            Not Before: May  7 02:01:45 2026 GMT
            Not After : May  6 02:06:45 2027 GMT
        Subject: CN=8FD0D43C8E756AA112E5E5564809764D055B13D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1a:58:e3:a3:28:40:a0:4c:44:91:c5:b9:a3:
                    a1:0e:a1:2a:aa:3a:60:8b:9a:f6:4c:3e:b9:a0:4f:
                    3e:54:6b:e4:a6:e8:ba:6d:55:4a:a2:72:18:81:0c:
                    f1:92:57:e1:23:33:b7:01:8c:65:c6:d9:c5:25:f2:
                    2b:c7:fb:ad:29:cd:e7:53:2d:09:c7:22:b9:81:80:
                    e9:00:0c:d4:95:64:81:11:12:a4:42:11:e1:89:2d:
                    aa:9f:e8:f7:d6:27:da:58:3c:cb:b6:71:63:0b:5d:
                    92:a6:af:6f:5a:38:08:e8:a2:35:b7:e1:66:d7:c2:
                    64:ec:45:d3:e5:18:b8:d2:04:d6:0b:6f:40:8b:7f:
                    f6:dc:b9:1d:93:48:16:a6:75:bc:19:79:e9:b0:44:
                    99:0a:57:bc:17:a6:23:2a:22:8f:1c:74:36:a4:fb:
                    9b:fa:e2:53:c7:e4:df:40:98:0f:1b:74:4b:a2:00:
                    72:b1:18:dc:9d:10:64:c9:fc:66:b2:17:84:98:0f:
                    b7:d0:48:0b:ea:01:34:31:f5:78:26:87:dc:07:33:
                    e3:a6:8b:79:bf:53:48:1c:c4:12:9c:a9:96:0a:94:
                    69:a3:1b:be:41:15:02:71:81:3a:34:f4:8f:d6:db:
                    2c:c5:33:1d:56:54:be:54:c9:9e:7f:4f:99:5e:68:
                    50:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D0:D4:3C:8E:75:6A:A1:12:E5:E5:56:48:09:76:4D:05:5B:13:D4
            X509v3 Authority Key Identifier:
                keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e35302e36372e302f32342d3234203d3e2039333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.50.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:77:c2:40:99:ce:78:53:19:c2:80:46:b1:30:4e:2a:10:7b:
         07:c1:73:36:6d:9c:ac:1f:78:31:1b:da:d6:85:34:bf:a1:b3:
         ca:98:a5:ec:db:39:fe:ed:ac:6b:8d:74:48:3f:66:f4:41:ca:
         fd:47:9c:43:f1:e7:21:76:62:a2:61:91:6d:15:62:c6:a0:28:
         ca:a6:48:1e:86:a5:11:c5:57:84:fc:0c:10:11:e1:dc:74:9e:
         b0:e5:96:2f:a8:6d:49:51:aa:6d:38:b8:61:88:a0:1c:06:6e:
         49:74:43:c2:f6:7e:3c:f4:65:5e:95:a6:3d:cb:d4:24:0e:46:
         34:a4:6d:b9:d3:28:a6:b4:7c:26:5e:ed:15:ad:28:e3:d6:a2:
         57:8b:67:40:63:eb:4a:7b:92:aa:64:a0:14:c3:38:52:8f:47:
         dd:80:ec:d4:2b:9f:6c:36:37:ea:3b:e7:84:e2:c1:b7:7b:d1:
         57:4b:27:01:f6:ef:f4:44:86:68:1e:59:ab:e5:6c:94:25:06:
         11:78:53:81:97:07:b4:88:1e:8c:95:7b:dd:41:97:62:3d:cc:
         89:dc:62:54:2d:55:52:f5:61:85:99:cb:21:25:fc:a0:5f:fa:
         c3:70:23:44:30:70:4c:c1:8c:89:50:b0:c0:9f:27:8e:3b:f9:
         35:5f:1b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:56:39 2026 by rpki-client