Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3231312e3136352e302e302f31362d3136203d3e2039333839.roa
File:                     3231312e3136352e302e302f31362d3136203d3e2039333839.roa (raw, json)
Hash identifier:          WAlM1OT8l+VLzbrVnfL7myJ4AlE/qvzTchM9n/w5mS4=
Subject key identifier:   72:B5:2C:94:3C:D8:64:0B:EE:B3:12:CF:6E:1B:56:0E:93:49:86:DF
Certificate issuer:       /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Certificate serial:       496CE59F91478D67B39DC855273D1148A4FA6D59
Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3231312e3136352e302e302f31362d3136203d3e2039333839.roa
Signing time:             Thu 07 May 2026 02:11:36 +0000
ROA not before:           Thu 07 May 2026 02:06:36 +0000
ROA not after:            Thu 06 May 2027 02:11:36 +0000
asID:                     9389
IP address blocks:        211.165.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:12:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:6c:e5:9f:91:47:8d:67:b3:9d:c8:55:27:3d:11:48:a4:fa:6d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
        Validity
            Not Before: May  7 02:06:36 2026 GMT
            Not After : May  6 02:11:36 2027 GMT
        Subject: CN=72B52C943CD8640BEEB312CF6E1B560E934986DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f7:62:48:fb:3b:cf:05:3a:6b:7c:7c:1b:0f:
                    cd:92:89:ff:e1:28:d7:48:14:0c:24:dd:6e:b6:d1:
                    dd:ec:db:8b:a7:5a:76:c2:54:d4:fe:74:c7:9b:ba:
                    da:61:c2:88:a2:0c:c7:ac:cf:e3:4b:65:5a:09:39:
                    59:02:93:30:0d:30:9d:82:ae:99:0a:d7:96:3e:33:
                    8d:1f:a8:9f:49:b8:f9:dc:14:d7:32:70:1f:96:46:
                    e3:6b:42:48:3c:7b:c3:3b:48:ec:fc:cd:42:81:0e:
                    a3:17:f4:33:d6:02:d5:5f:db:20:65:1d:e8:85:e8:
                    7d:12:0d:06:b1:b7:c8:f6:49:b0:66:ac:d1:f9:13:
                    81:05:65:22:52:5f:de:ca:99:d7:a7:a2:41:09:b6:
                    7d:ea:66:fc:50:09:68:b1:46:6e:e3:78:35:8d:4a:
                    61:0e:c1:06:e2:8e:8f:c1:26:cd:1e:77:89:f9:02:
                    e5:40:5f:83:78:7f:3b:a9:a0:e7:d1:15:65:f3:15:
                    44:3f:b8:c8:ee:83:39:3c:d6:9f:5d:7d:c1:2b:42:
                    65:a7:ce:60:36:61:e7:f9:68:89:ee:ba:65:52:31:
                    8a:32:ed:6f:b1:15:f0:45:40:7c:96:ce:1a:ed:49:
                    08:9d:5e:31:e4:82:1c:1b:8f:70:89:48:45:3e:8a:
                    41:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B5:2C:94:3C:D8:64:0B:EE:B3:12:CF:6E:1B:56:0E:93:49:86:DF
            X509v3 Authority Key Identifier:
                keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3231312e3136352e302e302f31362d3136203d3e2039333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.165.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         73:95:3c:02:36:23:96:37:2f:b5:7b:03:4c:0a:26:48:7a:f0:
         fb:0d:ad:63:f6:e0:9d:51:76:da:33:bc:c6:a8:1d:d6:84:d9:
         31:4f:17:2f:f4:f9:52:ff:57:13:57:a6:ef:2f:fc:da:d5:38:
         1c:0d:20:ca:79:1b:ba:59:15:59:11:91:67:5c:bc:c9:9a:26:
         fb:b4:41:67:a9:db:1e:71:fc:5c:31:51:89:28:5e:53:42:81:
         9f:c2:a7:e1:2d:f0:60:62:9b:b5:77:d9:2b:91:44:ca:8c:47:
         56:0c:f7:45:f4:b3:0f:46:ba:ef:67:f6:4b:62:cc:b7:be:c6:
         d4:71:3a:9d:6b:42:5d:6f:8b:44:a7:c7:ae:23:db:12:70:67:
         f7:bd:3e:40:c2:9f:9e:e8:95:50:69:b4:af:99:a0:a3:42:fa:
         99:bd:7c:cf:dc:25:2d:84:de:15:cd:26:3e:31:be:53:66:89:
         a7:8a:36:83:38:5a:e6:f4:c4:ed:b9:d3:cf:89:e9:d8:37:99:
         77:97:9e:38:ba:3a:3b:42:00:f5:e4:bf:76:67:e2:d5:7d:d0:
         f7:28:c1:eb:a6:dc:21:a4:eb:31:a9:f3:3a:89:55:cf:7b:6a:
         85:3b:e6:35:af:2a:5c:54:70:10:de:fc:ed:5f:de:0b:67:ad:
         bc:3f:89:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:29:01 2026 by rpki-client