Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e35302e37322e302f32312d3231203d3e2039333839.roa
File:                     3131332e35302e37322e302f32312d3231203d3e2039333839.roa (raw, json)
Hash identifier:          GSGSJyJ2FPG22cmJTK8MdUNyanuAQ10Zh+kHzTkQipE=
Subject key identifier:   01:FB:3A:48:59:76:7F:DE:26:5F:10:5B:F1:E4:A3:43:E8:84:AC:60
Certificate issuer:       /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Certificate serial:       559620C39D01CB41EEDB0B9DAB8560A365C4959D
Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e35302e37322e302f32312d3231203d3e2039333839.roa
Signing time:             Thu 07 May 2026 02:06:44 +0000
ROA not before:           Thu 07 May 2026 02:01:44 +0000
ROA not after:            Thu 06 May 2027 02:06:44 +0000
asID:                     9389
IP address blocks:        113.50.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:12:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:96:20:c3:9d:01:cb:41:ee:db:0b:9d:ab:85:60:a3:65:c4:95:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
        Validity
            Not Before: May  7 02:01:44 2026 GMT
            Not After : May  6 02:06:44 2027 GMT
        Subject: CN=01FB3A4859767FDE265F105BF1E4A343E884AC60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2b:90:18:3d:c8:55:f7:41:f9:b5:b2:23:ce:
                    07:cd:5a:a3:99:a4:99:61:85:92:da:fe:b3:ee:85:
                    01:91:d3:36:7c:fd:7b:b0:fe:da:d5:f7:0d:e8:b2:
                    5c:e5:e7:11:00:2c:3a:1b:1d:26:2c:79:c8:ab:14:
                    e6:12:fb:f7:31:f1:2f:6a:23:b6:8e:a2:b4:09:20:
                    da:a6:b2:50:28:ac:3e:8c:ce:2b:83:ed:2b:17:be:
                    d8:8b:1b:7a:dd:1b:87:b5:64:5f:fb:4d:97:01:e7:
                    5d:ea:6b:bb:10:ef:58:e6:10:2a:09:39:53:f1:91:
                    35:14:0e:fc:57:20:cc:fb:38:67:65:f0:f6:36:ee:
                    85:e7:29:87:70:85:26:b3:87:07:c6:2c:45:7e:03:
                    02:46:2e:7a:ae:a2:44:9a:45:94:24:76:d5:2f:0b:
                    a2:c0:38:b7:5f:f6:9e:4f:92:16:71:ac:d7:5e:de:
                    3e:13:d2:be:6e:67:98:4e:89:da:69:f6:ab:f5:8d:
                    00:df:a7:ab:5b:1a:be:41:64:b5:7e:96:e1:c1:cd:
                    5b:2c:c6:59:af:24:d9:4e:35:3d:a8:7d:bb:ff:10:
                    96:e4:b3:97:e8:6e:29:5b:89:87:0e:40:fa:4d:81:
                    c5:0a:65:b7:c9:1c:c6:5b:56:1d:63:e1:97:d5:2c:
                    31:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FB:3A:48:59:76:7F:DE:26:5F:10:5B:F1:E4:A3:43:E8:84:AC:60
            X509v3 Authority Key Identifier:
                keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131332e35302e37322e302f32312d3231203d3e2039333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.50.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:46:43:40:27:dd:9d:c4:ac:29:67:36:4f:1c:21:21:d4:e0:
         57:10:ff:ab:cf:c8:84:4b:cf:25:ec:d6:6e:b4:2d:d3:8a:f8:
         c5:b5:5c:9e:39:f4:56:44:37:d7:54:e1:4b:9b:d5:0d:92:6a:
         66:c2:7d:40:c3:ec:01:ec:08:c6:dc:18:f1:03:ec:1e:85:a6:
         a6:8c:9c:58:3f:21:64:94:9a:30:10:e3:6b:12:a6:8a:8e:89:
         d3:c4:0c:66:f3:65:85:41:42:3f:b4:d0:51:b9:a6:21:62:9d:
         8e:78:e9:bb:2a:31:c2:a5:27:37:e1:70:fa:a0:47:25:be:59:
         10:b3:77:56:f7:92:ec:14:04:35:f9:7b:39:f0:d1:50:7a:ed:
         b1:d5:15:14:ce:50:c5:c1:9f:4f:f8:b4:58:5c:34:76:67:3a:
         50:a6:55:77:a4:b2:a2:d7:7b:30:06:8c:cc:0a:46:0c:7b:18:
         be:7b:66:32:25:f9:9a:1e:68:31:ea:15:c9:df:ce:22:ba:b0:
         1a:e0:fe:cf:17:9c:7c:88:a3:06:7d:84:72:12:9b:96:6f:1c:
         8e:f4:b0:a1:63:88:d1:bf:42:90:76:6f:12:a1:51:0d:76:55:
         a4:01:05:38:4b:b9:41:74:9b:19:34:82:39:2b:0c:fe:97:af:
         67:74:a1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:27:49 2026 by rpki-client