Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3231312e3136362e3234362e302f32342d3234203d3e2039333839.roa
File:                     3231312e3136362e3234362e302f32342d3234203d3e2039333839.roa (raw, json)
Hash identifier:          ZwXNVlIDjrWjvbpbrbfodbJrlobu3GKhpj+6ua3Rysk=
Subject key identifier:   24:96:CA:6E:B2:9E:0C:1D:BE:7B:2B:34:81:DB:F1:DD:C8:F6:7E:F3
Certificate issuer:       /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Certificate serial:       3C6CD54500FAAE24E1CD63E455639C45299D3902
Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3231312e3136362e3234362e302f32342d3234203d3e2039333839.roa
Signing time:             Thu 07 May 2026 02:11:36 +0000
ROA not before:           Thu 07 May 2026 02:06:36 +0000
ROA not after:            Thu 06 May 2027 02:11:36 +0000
asID:                     9389
IP address blocks:        211.166.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:6c:d5:45:00:fa:ae:24:e1:cd:63:e4:55:63:9c:45:29:9d:39:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
        Validity
            Not Before: May  7 02:06:36 2026 GMT
            Not After : May  6 02:11:36 2027 GMT
        Subject: CN=2496CA6EB29E0C1DBE7B2B3481DBF1DDC8F67EF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ee:15:df:ad:13:3c:d2:ca:92:63:ba:0b:8f:
                    74:d3:c2:87:9e:11:96:05:03:8a:dd:85:fe:63:3a:
                    9b:30:57:ed:63:66:4e:38:33:76:cf:78:0c:bd:1c:
                    94:21:9b:1f:18:09:96:11:85:7e:8e:7b:dc:50:fd:
                    d8:88:2f:1a:fd:71:c9:65:9f:01:2e:f5:36:7f:8f:
                    31:b6:9d:c0:09:38:8a:11:d1:91:41:fb:64:f4:22:
                    43:cf:d3:f8:8c:61:8c:22:a2:b4:81:9e:b8:b6:73:
                    80:0d:dd:54:a3:f7:14:b1:17:ec:98:5a:ab:1a:d1:
                    52:f4:0a:8e:9b:e2:fd:78:71:b9:f7:7d:69:5a:12:
                    8b:17:a3:63:3a:c0:d5:0a:d5:30:50:87:6b:77:71:
                    0d:9d:c8:0a:4b:ab:85:5c:47:50:c3:8c:bd:a3:68:
                    96:60:72:75:bf:67:14:52:2a:f5:e0:9d:aa:e8:54:
                    ce:ee:91:80:40:c8:d6:40:77:92:59:9f:97:39:06:
                    2e:f8:10:20:68:50:40:49:28:72:49:d7:20:ce:7d:
                    b1:68:e5:fe:e0:fe:59:ec:d8:6e:66:7c:eb:f8:ad:
                    79:22:58:1e:74:46:d6:a0:55:7f:b9:25:ec:55:8b:
                    af:46:cf:af:55:14:d2:fb:3a:b6:32:a3:d8:5e:b6:
                    20:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:96:CA:6E:B2:9E:0C:1D:BE:7B:2B:34:81:DB:F1:DD:C8:F6:7E:F3
            X509v3 Authority Key Identifier:
                keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3231312e3136362e3234362e302f32342d3234203d3e2039333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.166.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:09:df:41:9f:e0:65:10:a7:f9:65:cf:49:37:ba:ef:fa:bd:
         60:cd:c9:6d:ea:a2:b2:2c:88:77:b4:44:7d:ea:db:fe:c4:a0:
         22:51:b1:a2:29:36:65:83:2f:f1:f1:67:df:0d:94:c6:aa:c7:
         23:a7:9b:93:74:5e:8e:f0:f6:55:49:a1:16:f2:39:7e:7f:18:
         70:bd:7d:6e:1c:87:fb:b9:2d:b3:48:e4:ed:8c:05:6a:cf:27:
         da:c9:1a:87:f4:36:4d:f8:2f:3d:6d:a6:f9:14:71:09:b4:ef:
         d7:aa:3b:6e:39:56:9d:e5:f4:54:a2:2b:c4:0c:f9:d8:29:1d:
         97:e1:21:cb:2b:3a:89:54:20:4c:6a:51:b7:09:8c:a7:91:90:
         81:18:eb:f5:b5:c2:cf:b4:01:bc:31:b7:08:ab:27:f4:f9:1e:
         4e:c4:7c:de:fd:ea:83:19:ae:ad:21:36:8d:9d:46:fd:b9:2f:
         df:fc:9f:77:de:90:66:17:67:58:cd:e7:1d:d9:b3:f7:9f:01:
         e3:c7:cf:3b:45:0e:93:92:d2:c9:f5:ae:44:22:c7:9b:72:cd:
         b6:7d:75:dc:ab:93:5a:2e:cf:91:28:ac:60:c8:a8:33:ed:7e:
         a4:a3:08:fc:f2:73:8d:bc:f7:53:f3:0a:26:55:3d:fe:2e:ef:
         68:78:01:0e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 13:25:14 2026 by rpki-client