Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3131342e3139362e302e302f31382d3138203d3e203137393638.roa
File:                     3131342e3139362e302e302f31382d3138203d3e203137393638.roa (raw, json)
Hash identifier:          7oeVPtD/j8VrlMMohZqblzk4jqb1sFTnSzIaw150jmk=
Subject key identifier:   D5:88:38:65:16:5E:61:C9:15:8D:2D:76:F3:E6:D0:EE:13:73:8D:8E
Certificate issuer:       /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial:       7606A81E3277F4E20F29D57F53DED5DA0B2006B1
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3131342e3139362e302e302f31382d3138203d3e203137393638.roa
Signing time:             Mon 29 Jun 2026 02:52:18 +0000
ROA not before:           Mon 29 Jun 2026 02:47:18 +0000
ROA not after:            Mon 28 Jun 2027 02:52:18 +0000
asID:                     17968
IP address blocks:        114.196.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:06:a8:1e:32:77:f4:e2:0f:29:d5:7f:53:de:d5:da:0b:20:06:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
        Validity
            Not Before: Jun 29 02:47:18 2026 GMT
            Not After : Jun 28 02:52:18 2027 GMT
        Subject: CN=D5883865165E61C9158D2D76F3E6D0EE13738D8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1c:66:d4:1d:da:27:cc:19:7c:ab:9e:3a:c7:
                    53:e1:71:f2:00:4a:73:b5:2b:af:de:05:68:7e:40:
                    04:cd:51:05:21:f0:a4:a6:ae:38:4c:fb:61:62:35:
                    84:07:08:fa:d1:fd:55:33:f5:2a:80:ef:67:3b:0e:
                    5c:6a:31:cb:d8:5a:ef:3b:d1:d7:48:cc:2c:93:bc:
                    a7:a4:1b:f9:c7:c7:6d:6e:9f:13:63:0e:cf:05:b7:
                    b0:8a:15:83:b3:14:cc:72:4e:c7:36:67:ad:71:12:
                    3f:c2:64:6c:7f:a7:05:a2:03:e6:fe:45:4c:b0:15:
                    69:99:ac:4b:a4:c8:e7:7b:76:58:e8:44:0c:23:a0:
                    c4:3e:52:ed:4d:2d:58:f3:a7:ff:e1:ac:d9:2f:50:
                    27:ae:bb:37:d3:5f:eb:83:ee:33:50:f2:f6:66:33:
                    50:4b:fe:71:84:b8:33:cc:dd:7d:92:a8:5e:5b:12:
                    2e:1b:8e:80:0d:ff:02:5e:6b:94:3e:21:56:a6:76:
                    a7:44:2d:28:ed:74:1d:6d:de:26:07:31:3d:55:77:
                    ec:f0:86:0e:1b:7a:42:0f:d6:e0:52:03:29:4f:96:
                    53:12:5e:26:ce:92:f1:d5:fc:8e:98:be:11:a2:98:
                    cb:34:e1:fe:fe:9e:1e:cc:79:47:c7:cd:07:43:fd:
                    d8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:88:38:65:16:5E:61:C9:15:8D:2D:76:F3:E6:D0:EE:13:73:8D:8E
            X509v3 Authority Key Identifier:
                keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3131342e3139362e302e302f31382d3138203d3e203137393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.196.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         98:a0:32:0a:ce:d4:05:0d:29:79:d4:68:4c:d7:b0:c8:2d:74:
         86:d2:8b:b5:ce:eb:90:91:05:61:74:64:e2:08:24:ae:ba:54:
         a3:fd:6b:42:de:d3:d7:b7:4d:3f:da:19:f4:63:6c:4e:2a:00:
         dd:09:8c:5c:69:d9:ff:d8:1d:21:71:99:04:dc:4a:dc:23:48:
         66:b5:85:e9:8c:fb:d5:d7:ad:c3:23:cf:5f:03:9b:e7:b3:57:
         9c:57:c6:a5:5a:1b:92:bf:2a:e5:47:d0:a3:67:62:f2:da:04:
         c7:37:40:55:04:17:0a:8c:a4:e1:fa:7d:f3:67:9a:b8:c4:4a:
         e8:aa:a9:8f:81:96:bb:71:52:72:b0:61:9d:f8:ff:72:b3:71:
         51:85:88:ea:23:db:c7:76:c9:4a:46:72:66:39:b7:4a:15:3c:
         66:55:b9:79:54:98:d9:97:b0:8c:36:97:8d:0b:86:95:52:15:
         44:b9:78:b5:4d:65:23:80:34:ce:98:a1:ad:f3:59:41:80:6f:
         22:80:73:c5:bc:5c:e4:5d:2e:bf:f5:9c:57:f0:bb:8a:29:c5:
         4e:5b:0f:9b:13:f5:6d:99:ca:6a:66:f5:54:c1:a2:c7:9a:4a:
         4b:ca:15:4e:31:5d:5f:fd:b2:fa:71:62:48:f2:e2:d4:22:45:
         79:78:d8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:57:49 2026 by rpki-client