Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131382e36342e3235322e302f32322d3232203d3e2039333839.roa
File:                     3131382e36342e3235322e302f32322d3232203d3e2039333839.roa (raw, json)
Hash identifier:          0cOx0Uq18L00o8ojK9ZxQoZY5iM5Zy8Q1L3do7Q+Myo=
Subject key identifier:   61:95:54:51:29:B4:A5:DC:BA:5C:9F:28:19:BD:A6:27:F5:C8:83:B6
Certificate issuer:       /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Certificate serial:       5132464C76C8BB0FC7FEC502047D30E2E1B4C311
Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131382e36342e3235322e302f32322d3232203d3e2039333839.roa
Signing time:             Thu 07 May 2026 02:06:44 +0000
ROA not before:           Thu 07 May 2026 02:01:44 +0000
ROA not after:            Thu 06 May 2027 02:06:44 +0000
asID:                     9389
IP address blocks:        118.64.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:32:46:4c:76:c8:bb:0f:c7:fe:c5:02:04:7d:30:e2:e1:b4:c3:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
        Validity
            Not Before: May  7 02:01:44 2026 GMT
            Not After : May  6 02:06:44 2027 GMT
        Subject: CN=6195545129B4A5DCBA5C9F2819BDA627F5C883B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0e:09:65:49:eb:b4:1b:26:12:d9:01:6c:45:
                    0f:a9:5f:a0:2c:ed:ae:3e:a8:01:ad:8c:b9:d1:e3:
                    b9:f1:2c:39:22:e5:19:8e:15:63:ac:62:ea:d3:13:
                    b3:15:f4:db:ba:dd:27:80:26:8f:05:8f:fc:5e:01:
                    c0:9e:43:46:ba:dc:c6:26:bb:79:8b:7e:53:f3:53:
                    e6:38:c5:eb:32:2e:e6:89:56:4d:79:ec:32:9c:61:
                    1a:73:35:d6:7e:68:84:5b:4d:8a:ab:3d:dd:d6:cd:
                    3f:cd:3e:8f:64:a5:1e:27:ea:47:2a:87:a1:71:e5:
                    4d:f7:a2:5e:c5:87:62:28:53:f2:14:89:0f:c0:a9:
                    4f:3a:19:b4:d5:c0:7f:74:8b:b1:d2:85:09:e4:c8:
                    09:0b:49:f1:75:13:4b:b2:67:6c:08:97:1d:be:20:
                    33:d2:c3:86:5d:19:61:b9:2e:e2:c8:a3:7b:36:46:
                    21:34:2a:32:41:8b:0f:54:47:8b:b3:a2:b3:a5:99:
                    ca:ae:7d:6c:be:eb:2b:76:f8:2e:11:6f:2a:32:28:
                    f9:58:22:92:dd:04:74:d9:29:1b:3d:95:a9:0b:1c:
                    8b:04:71:f0:98:3c:d5:fb:a7:73:d1:e6:fb:c3:e4:
                    29:3c:77:ca:44:5d:0e:19:3a:53:15:32:98:10:9d:
                    c0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:95:54:51:29:B4:A5:DC:BA:5C:9F:28:19:BD:A6:27:F5:C8:83:B6
            X509v3 Authority Key Identifier:
                keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131382e36342e3235322e302f32322d3232203d3e2039333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.64.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:42:6d:43:ac:70:1f:0b:8d:d2:94:05:c3:34:b4:96:fe:9d:
         bb:80:d6:9e:93:24:49:ac:64:10:0a:64:4c:0f:9a:89:8b:f5:
         0b:24:65:44:e1:04:60:76:f0:d2:42:81:e7:23:f9:24:bc:c8:
         6f:ae:fd:9c:ae:d0:1e:c0:a0:23:07:b9:3d:f6:95:93:cd:a2:
         8e:58:35:a5:6e:81:34:b6:80:95:09:80:8d:51:31:a3:20:d0:
         3c:a1:0c:12:06:03:da:c1:be:79:0b:83:90:62:64:2e:fa:33:
         0e:0c:8b:0b:b4:51:cf:3e:a4:2b:ec:ce:d8:12:7c:71:fb:ee:
         25:2a:f7:26:80:d1:47:ba:2a:df:d8:3f:06:0d:b6:e1:49:9a:
         3a:82:a1:b4:58:7c:7f:20:c4:f3:c3:81:7f:08:87:73:44:7a:
         9c:c5:23:a4:d8:82:a3:69:37:4f:49:cb:db:29:75:8a:3f:d4:
         fc:a4:4f:6d:89:e5:0c:b6:df:46:b8:5c:3f:81:a0:95:66:d8:
         2c:b2:7c:0b:0c:df:27:1f:a1:0e:67:a6:67:c3:cf:36:1c:0c:
         46:1c:b5:7c:76:dc:47:1e:a6:0b:cc:a5:cf:48:94:37:ac:8f:
         cf:b7:27:92:37:a2:2c:9f:85:81:b4:07:c3:b3:3d:75:d5:7a:
         a8:83:9e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:20:32 2026 by rpki-client