Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3131342e3139362e36342e302f31382d3138203d3e203137393638.roa
File:                     3131342e3139362e36342e302f31382d3138203d3e203137393638.roa (raw, json)
Hash identifier:          HLE1ta7TI6giRQXdq+bdU0a4Rgoqi/8kN9ktqGP910o=
Subject key identifier:   08:21:F6:1B:D7:7A:35:00:33:31:3A:00:6F:E9:E8:6A:84:A7:49:FB
Certificate issuer:       /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial:       75FB9CF72AFCCE17D92EFEC0571B61A678387EDE
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3131342e3139362e36342e302f31382d3138203d3e203137393638.roa
Signing time:             Mon 29 Jun 2026 02:52:17 +0000
ROA not before:           Mon 29 Jun 2026 02:47:17 +0000
ROA not after:            Mon 28 Jun 2027 02:52:17 +0000
asID:                     17968
IP address blocks:        114.196.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:fb:9c:f7:2a:fc:ce:17:d9:2e:fe:c0:57:1b:61:a6:78:38:7e:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
        Validity
            Not Before: Jun 29 02:47:17 2026 GMT
            Not After : Jun 28 02:52:17 2027 GMT
        Subject: CN=0821F61BD77A350033313A006FE9E86A84A749FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6e:84:e8:7f:4e:ab:d1:e1:16:b4:02:be:49:
                    88:85:0f:ad:00:2e:40:21:04:5f:57:1d:01:55:c8:
                    56:c6:2f:65:ae:e9:08:3c:64:41:96:48:36:f1:1f:
                    38:87:a0:aa:bd:18:e9:82:b2:bb:6f:a8:b9:af:36:
                    f9:fb:f7:a4:81:b9:d1:a0:86:1f:34:15:2a:48:dc:
                    0b:6e:f8:37:b9:d4:22:06:bf:82:fa:90:11:89:d4:
                    79:13:b8:8f:a1:65:25:83:38:1d:d5:47:1a:2a:79:
                    c2:a7:b5:c9:50:fa:21:21:7a:1c:7c:4a:65:21:52:
                    8a:50:2a:2f:e1:29:c0:fd:83:c8:c1:56:3e:ea:76:
                    57:44:4d:5e:0b:ce:f2:09:42:05:31:8d:d3:e5:ec:
                    66:bb:cf:18:49:49:a1:81:64:ce:68:a2:76:ea:22:
                    cf:73:f1:58:6c:db:f3:3c:a2:87:f4:4a:91:53:27:
                    cb:7c:23:02:b8:8c:b8:0f:5a:6c:29:2f:da:f0:f2:
                    cb:e3:a9:0a:5f:8b:cf:ab:a6:a6:d3:72:00:42:76:
                    e0:d7:e9:24:fb:91:8c:43:f6:81:32:14:9d:69:28:
                    05:0e:9a:c9:98:7e:00:f7:44:76:81:94:e6:81:2c:
                    e8:c8:00:0d:24:50:b1:28:0f:ad:a2:6f:29:30:38:
                    2d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:21:F6:1B:D7:7A:35:00:33:31:3A:00:6F:E9:E8:6A:84:A7:49:FB
            X509v3 Authority Key Identifier:
                keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3131342e3139362e36342e302f31382d3138203d3e203137393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.196.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         03:34:bf:e4:f7:d0:16:c7:d4:0d:76:dd:eb:c1:32:6d:6c:f1:
         b9:30:ba:a1:a1:4e:a7:99:84:c0:7a:0e:92:83:8b:27:1b:3a:
         8f:c7:7c:c4:d9:4f:be:2c:d8:e0:cb:96:2e:8f:65:8a:f2:be:
         08:05:3f:87:5a:dd:f9:af:08:6d:00:42:36:1c:e4:81:dc:4b:
         27:88:75:b0:d0:ec:69:18:4a:8d:02:f1:1f:b2:9a:c1:be:3c:
         55:9b:63:80:00:33:80:66:99:07:69:1d:ed:94:c9:be:9d:65:
         0d:59:b5:15:2e:10:b9:35:53:57:30:bf:72:fc:d4:b1:6f:da:
         da:84:63:3f:62:c4:70:7f:9a:98:c4:bf:17:98:24:58:89:f0:
         21:00:3e:3f:90:9f:0a:66:6c:d7:44:78:12:39:02:39:63:a1:
         99:10:3d:71:3b:39:ae:24:99:40:f4:63:9c:d3:14:31:0b:ad:
         3a:f5:df:9f:19:85:8a:47:33:f6:c4:81:ce:f5:09:d2:28:8b:
         07:21:de:8e:72:e6:95:71:34:73:40:7a:99:78:35:62:57:2d:
         55:32:7b:82:66:56:f7:45:f0:d7:9d:9c:5b:31:4f:01:6a:c0:
         75:9c:32:75:52:91:7c:3b:cc:bd:47:c8:76:e5:3a:7f:51:01:
         af:2e:aa:ae
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:24 2026 by rpki-client