Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3231312e3136362e302e302f31362d3136203d3e2039333839.roa
File:                     3231312e3136362e302e302f31362d3136203d3e2039333839.roa (raw, json)
Hash identifier:          M0OtK1D+ULaR+RVSiW2nwxtlmwYAkrczAi9g0+5RDr4=
Subject key identifier:   E9:DC:AE:DE:02:6E:18:3F:B7:1A:B8:99:69:E8:32:27:B3:15:13:CE
Certificate issuer:       /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Certificate serial:       01743E29A8596A4A298573D903E9469347455CF5
Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3231312e3136362e302e302f31362d3136203d3e2039333839.roa
Signing time:             Thu 07 May 2026 02:11:37 +0000
ROA not before:           Thu 07 May 2026 02:06:37 +0000
ROA not after:            Thu 06 May 2027 02:11:37 +0000
asID:                     9389
IP address blocks:        211.166.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:12:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:74:3e:29:a8:59:6a:4a:29:85:73:d9:03:e9:46:93:47:45:5c:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
        Validity
            Not Before: May  7 02:06:37 2026 GMT
            Not After : May  6 02:11:37 2027 GMT
        Subject: CN=E9DCAEDE026E183FB71AB89969E83227B31513CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8f:56:55:7e:8c:34:c6:9b:1d:40:74:0e:c3:
                    15:18:64:16:10:92:91:2d:60:c1:c7:c8:62:03:b5:
                    75:4c:21:4d:04:1e:35:e0:95:ea:37:1e:cf:52:e9:
                    90:9d:21:c5:5a:aa:d3:7b:d2:05:5f:e2:ea:11:4f:
                    61:aa:ee:83:f6:5e:23:a7:4f:2d:78:58:10:b1:12:
                    9d:a5:20:df:9f:22:4c:61:1c:d0:d3:7f:0a:f5:cd:
                    ff:86:ec:8e:ea:b0:35:ae:f1:9a:1c:2e:e4:6c:48:
                    5a:37:65:b9:81:1e:93:39:c1:b6:88:16:00:aa:60:
                    07:37:29:ef:85:d1:2a:c8:4f:e0:a4:1e:f2:09:30:
                    cf:e1:9b:a7:98:4e:6a:da:f6:2e:c0:e2:fd:ca:55:
                    82:24:60:5f:4a:34:d3:ae:25:5a:5c:08:fc:91:d0:
                    8d:d5:b2:9d:49:37:12:64:c5:97:e3:1c:a3:3f:41:
                    c6:3f:ff:fc:d9:ce:94:51:06:12:bc:9b:78:70:c3:
                    1e:fe:2d:d8:28:2c:08:f5:ac:5c:d9:09:29:bb:70:
                    94:5d:48:ca:5f:6f:cc:70:c5:67:da:69:84:ea:8c:
                    1f:21:13:11:62:aa:2e:53:4e:f3:b7:fc:25:4e:63:
                    fa:68:2a:d9:f7:ca:1e:bb:ea:cf:cc:21:e2:9a:fe:
                    dd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DC:AE:DE:02:6E:18:3F:B7:1A:B8:99:69:E8:32:27:B3:15:13:CE
            X509v3 Authority Key Identifier:
                keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3231312e3136362e302e302f31362d3136203d3e2039333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.166.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a3:71:1e:9b:ad:9c:63:f6:d2:48:6e:80:da:bb:0a:db:48:5f:
         bf:c7:49:3c:b5:b8:c1:7f:66:e4:dc:b4:7c:08:f1:08:da:7d:
         59:50:4d:1a:44:80:22:52:86:ef:ae:8a:38:da:e0:35:25:71:
         a0:f7:a5:3c:73:19:1e:ec:31:16:5f:77:69:b8:15:c9:0f:43:
         28:47:9f:74:32:c8:aa:0f:34:b3:f5:16:f9:6b:85:17:35:84:
         10:77:2a:de:9d:74:be:74:70:c7:49:99:e4:13:a3:04:f4:67:
         01:3f:d5:cc:3c:e0:76:89:c1:fb:9d:8c:e2:78:ed:89:b6:1c:
         78:80:82:d9:db:e3:c1:3e:27:7b:a2:6f:13:e9:4c:c7:91:3b:
         5c:2a:f1:70:3e:0b:ea:97:41:ee:87:47:ca:19:b0:f7:f5:5b:
         d6:4e:79:c8:51:88:4d:01:fa:ec:5c:46:df:d2:3c:46:20:7f:
         d4:b6:e6:e3:61:e0:66:9f:42:95:e3:11:50:2e:89:cc:42:4f:
         fe:a7:c6:17:dc:5d:e6:f3:e3:be:83:44:e7:28:f2:35:ef:be:
         d4:67:49:2f:1a:4e:ed:f5:e7:4c:8d:73:68:98:28:f6:90:53:
         8c:74:48:26:fb:32:a2:7a:65:e5:c0:e9:c5:2c:46:a5:c5:f9:
         59:3e:9e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:39:20 2026 by rpki-client