Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114846589689528347/0/3231382e3234302e3137362e302f32342d3234203d3e203435303538.roa
File:                     3231382e3234302e3137362e302f32342d3234203d3e203435303538.roa (raw, json)
Hash identifier:          FXhv9P90uZTHbPWO0WwQi96WGpHYA4LPw6mGXuxuRKE=
Subject key identifier:   B3:AA:24:18:E4:EA:57:7F:FF:6A:81:0A:DC:7E:75:83:48:3F:7D:36
Certificate issuer:       /CN=FCDC522C2977A42C0E1A992040F5840C8C83FF6A
Certificate serial:       55E135A3F655D53A7A04507FE94E193B72A30934
Authority key identifier: FC:DC:52:2C:29:77:A4:2C:0E:1A:99:20:40:F5:84:0C:8C:83:FF:6A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/3231382e3234302e3137362e302f32342d3234203d3e203435303538.roa
Signing time:             Thu 04 Jun 2026 09:38:24 +0000
ROA not before:           Thu 04 Jun 2026 09:33:24 +0000
ROA not after:            Thu 03 Jun 2027 09:38:24 +0000
asID:                     45058
IP address blocks:        218.240.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 03:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e1:35:a3:f6:55:d5:3a:7a:04:50:7f:e9:4e:19:3b:72:a3:09:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCDC522C2977A42C0E1A992040F5840C8C83FF6A
        Validity
            Not Before: Jun  4 09:33:24 2026 GMT
            Not After : Jun  3 09:38:24 2027 GMT
        Subject: CN=B3AA2418E4EA577FFF6A810ADC7E7583483F7D36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:49:7b:96:b3:f3:ce:e9:db:81:59:4c:16:7a:
                    8c:fb:6e:0e:a1:f8:60:cf:11:c3:52:63:a2:e0:b1:
                    d8:99:3a:74:81:39:eb:e3:a5:d5:6b:89:53:bc:96:
                    ce:52:30:ef:27:e6:e2:dc:82:0b:d9:32:f9:a1:43:
                    47:ba:72:0e:3b:46:98:8b:73:3e:81:50:39:5c:ea:
                    b6:aa:ce:33:41:54:1a:3b:9c:ea:8d:5f:47:94:a7:
                    c6:78:ef:d8:98:29:4b:2e:89:8d:2a:97:80:2d:93:
                    5f:4a:c4:06:b8:f6:80:62:c3:f4:75:52:79:94:81:
                    5a:8e:3d:1c:45:6e:a1:ef:28:6d:6e:04:4a:0f:4a:
                    b3:02:7a:64:5d:6d:84:63:d8:ec:d9:23:0e:7b:dc:
                    8b:41:56:0f:af:b8:32:2f:bc:4e:71:7e:41:01:67:
                    78:d5:32:37:25:02:08:ba:f1:2d:14:b4:1b:be:50:
                    ef:23:eb:af:aa:94:8c:e4:1c:c7:ba:7e:62:41:aa:
                    33:41:05:66:3a:1f:72:17:14:b3:a2:16:2b:12:7a:
                    25:a5:9f:06:2c:e6:0f:27:8c:a5:ff:29:81:81:92:
                    02:d5:e9:3e:c5:42:d9:52:d3:09:bc:f5:59:9c:61:
                    d2:06:38:fb:56:aa:41:9e:eb:2a:d8:87:7e:05:0f:
                    a4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AA:24:18:E4:EA:57:7F:FF:6A:81:0A:DC:7E:75:83:48:3F:7D:36
            X509v3 Authority Key Identifier:
                keyid:FC:DC:52:2C:29:77:A4:2C:0E:1A:99:20:40:F5:84:0C:8C:83:FF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/3231382e3234302e3137362e302f32342d3234203d3e203435303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.240.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:96:7e:2d:f3:1e:7f:95:cb:a7:d3:31:f3:91:4c:0c:76:cd:
         0d:c1:a7:45:94:03:32:b0:41:dc:d9:ec:16:aa:9b:55:55:84:
         8f:b4:39:3d:51:d6:50:80:39:45:f7:b0:e3:4b:ae:62:79:8c:
         18:f3:01:7d:12:73:89:a5:5d:89:1e:22:fc:e1:ae:f0:07:75:
         95:33:2e:01:96:ad:ff:15:d5:07:24:a3:ca:e4:3f:1a:9a:5d:
         ee:8c:d4:14:a2:bd:e4:e1:5e:54:85:c8:0b:74:da:3a:1c:dc:
         70:39:c1:ea:aa:57:de:7c:b0:49:97:57:0a:40:99:90:17:78:
         cd:94:50:82:58:e5:ae:21:b9:92:bb:aa:d0:90:d8:28:23:d7:
         dd:f6:13:77:07:08:a5:52:1a:a5:52:49:d3:3b:06:4a:b6:9c:
         d0:12:55:6d:85:4a:fc:96:82:c2:4a:18:53:6a:1c:44:37:58:
         b7:ed:f6:52:ec:f5:86:92:7a:66:5d:49:d3:d2:9f:7c:35:59:
         9a:6d:58:cd:b3:3b:2a:0f:e4:a2:ce:1e:79:55:73:a2:c3:96:
         3d:c1:2e:da:65:53:d1:14:80:20:8f:34:87:1e:f7:74:a1:94:
         4b:c1:2f:c6:58:cf:9f:c9:53:7c:4d:99:d8:a7:dc:be:54:f7:
         66:34:38:e9
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUVeE1o/ZV1Tp6BFB/6U4ZO3KjCTQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkNEQzUyMkMyOTc3QTQyQzBFMUE5OTIwNDBGNTg0MEM4
QzgzRkY2QTAeFw0yNjA2MDQwOTMzMjRaFw0yNzA2MDMwOTM4MjRaMDMxMTAvBgNV
BAMTKEIzQUEyNDE4RTRFQTU3N0ZGRjZBODEwQURDN0U3NTgzNDgzRjdEMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiSXuWs/PO6duBWUwWeoz7bg6h
+GDPEcNSY6LgsdiZOnSBOevjpdVriVO8ls5SMO8n5uLcggvZMvmhQ0e6cg47RpiL
cz6BUDlc6raqzjNBVBo7nOqNX0eUp8Z479iYKUsuiY0ql4Atk19KxAa49oBiw/R1
UnmUgVqOPRxFbqHvKG1uBEoPSrMCemRdbYRj2OzZIw573ItBVg+vuDIvvE5xfkEB
Z3jVMjclAgi68S0UtBu+UO8j66+qlIzkHMe6fmJBqjNBBWY6H3IXFLOiFisSeiWl
nwYs5g8njKX/KYGBkgLV6T7FQtlS0wm89VmcYdIGOPtWqkGe6yrYh34FD6T/AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUs6okGOTqV3//aoEK3H51g0g/fTYwHwYDVR0j
BBgwFoAU/NxSLCl3pCwOGpkgQPWEDIyD/2owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
NDg0NjU4OTY4OTUyODM0Ny8wL0ZDREM1MjJDMjk3N0E0MkMwRTFBOTkyMDQwRjU4
NDBDOEM4M0ZGNkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkNEQzUyMkMyOTc3QTQyQzBFMUE5OTIwNDBGNTg0MEM4QzgzRkY2QS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMTQ4NDY1ODk2ODk1MjgzNDcvMC8zMjMxMzgyZTMy
MzQzMDJlMzEzNzM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNTMwMzUzOC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEANrwsDANBgkqhkiG9w0BAQsFAAOCAQEAzJZ+LfMef5XLp9Mx85FM
DHbNDcGnRZQDMrBB3NnsFqqbVVWEj7Q5PVHWUIA5Rfew40uuYnmMGPMBfRJziaVd
iR4i/OGu8Ad1lTMuAZat/xXVBySjyuQ/Gppd7ozUFKK95OFeVIXIC3TaOhzccDnB
6qpX3nywSZdXCkCZkBd4zZRQgljlriG5kruq0JDYKCPX3fYTdwcIpVIapVJJ0zsG
Srac0BJVbYVK/JaCwkoYU2ocRDdYt+32Uuz1hpJ6Zl1J09KffDVZmm1YzbM7Kg/k
os4eeVVzosOWPcEu2mVT0RSAII80hx73dKGUS8EvxljPn8lTfE2Z2KfcvlT3ZjQ4
6Q==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:58 2026 by rpki-client