Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3131342e3139372e3139322e302f31382d3138203d3e203137393638.roa
File:                     3131342e3139372e3139322e302f31382d3138203d3e203137393638.roa (raw, json)
Hash identifier:          dSpvCpoI92h2YFFNjhylf2gwffWJ6CSD2MtGApDrMx0=
Subject key identifier:   B8:69:C5:BE:CD:58:EC:C6:8C:7A:0C:B9:CB:E1:5B:B9:AF:61:40:5B
Certificate issuer:       /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial:       38345FF53C6866B2F6831326A11647DE85046BAE
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3131342e3139372e3139322e302f31382d3138203d3e203137393638.roa
Signing time:             Mon 29 Jun 2026 02:52:17 +0000
ROA not before:           Mon 29 Jun 2026 02:47:17 +0000
ROA not after:            Mon 28 Jun 2027 02:52:17 +0000
asID:                     17968
IP address blocks:        114.197.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:34:5f:f5:3c:68:66:b2:f6:83:13:26:a1:16:47:de:85:04:6b:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
        Validity
            Not Before: Jun 29 02:47:17 2026 GMT
            Not After : Jun 28 02:52:17 2027 GMT
        Subject: CN=B869C5BECD58ECC68C7A0CB9CBE15BB9AF61405B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:99:81:51:ba:bf:24:83:00:94:a0:bd:9d:64:
                    a4:72:37:cb:93:73:f0:66:1d:9b:70:be:66:01:7c:
                    3d:f7:2e:54:90:2a:39:a3:48:1a:49:7e:f9:a2:e6:
                    f7:82:79:ea:be:dd:10:d4:a0:8f:d1:62:46:5e:a1:
                    f1:08:50:40:53:7a:dc:f4:6b:7b:1d:29:7b:9d:1b:
                    da:da:14:06:97:ef:aa:24:b6:43:94:1a:b5:63:54:
                    58:cb:00:a2:0e:a8:90:58:4e:66:c2:e2:e6:7b:aa:
                    fb:69:fc:dc:4b:f1:8c:5b:25:19:a4:ad:e1:36:76:
                    2e:d1:31:9b:a0:49:a5:dc:55:7e:31:b6:8a:80:8c:
                    ca:eb:53:68:e9:89:12:73:ed:a6:02:00:ab:88:f5:
                    97:2f:80:a3:88:8d:d5:30:1e:2c:7d:88:c0:c2:4a:
                    dc:cc:d9:64:83:fa:dc:2d:19:f8:50:f3:ff:84:7e:
                    99:f6:e9:4b:e0:9e:fd:81:0a:17:ed:3e:d7:4b:ff:
                    30:50:62:f2:cd:47:e0:1f:3e:53:bf:d6:c1:8e:17:
                    de:76:4b:1d:0c:77:d8:87:3f:96:96:a4:65:3c:88:
                    5f:4b:4c:52:7a:1c:82:30:2d:bc:af:06:c5:50:94:
                    2f:71:a5:fa:2c:b5:08:b8:9b:2c:9a:0f:a2:44:2e:
                    aa:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:69:C5:BE:CD:58:EC:C6:8C:7A:0C:B9:CB:E1:5B:B9:AF:61:40:5B
            X509v3 Authority Key Identifier:
                keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3131342e3139372e3139322e302f31382d3138203d3e203137393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.197.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a0:99:16:96:de:7e:eb:7c:e3:72:51:43:b8:35:f6:8a:cf:58:
         a0:82:d3:3f:9f:f1:e6:13:12:35:12:a7:a0:ba:f2:e1:b9:52:
         23:26:6c:8c:bd:24:48:cc:96:d3:e0:88:33:03:25:dd:11:69:
         e2:f1:09:70:63:a0:83:d3:9e:69:59:29:83:bb:b2:4b:f6:10:
         ed:6a:91:6d:20:11:3f:9a:b4:1a:c6:da:64:78:98:49:57:a4:
         bf:2b:3f:87:86:0d:cb:79:18:95:fa:28:c6:84:42:08:d5:97:
         18:ff:7d:6b:30:32:b2:14:f2:ed:f6:61:ce:20:29:20:43:89:
         ce:4c:4d:00:5b:38:ec:7b:15:66:35:81:90:ed:3f:e0:9b:5b:
         62:70:12:67:94:30:81:29:f8:0a:e4:31:82:9d:70:72:47:a2:
         0b:b2:bc:0c:41:70:f8:cb:f9:a8:53:ab:39:78:19:e2:2f:f6:
         56:0b:a3:cc:aa:64:9f:1f:e1:a7:d7:07:ae:a5:56:e5:ac:4a:
         00:36:8c:e5:53:c7:05:ce:c3:d4:b8:5e:ba:1a:72:26:3f:9d:
         f9:be:11:08:63:91:82:ce:e5:32:54:f0:21:65:6c:52:2b:0d:
         33:49:a3:59:e1:08:86:14:6b:ca:bb:22:03:54:b5:6a:7d:16:
         43:b6:f5:f0
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUODRf9TxoZrL2gxMmoRZH3oUEa64wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5
OURBMzY3NTAeFw0yNjA2MjkwMjQ3MTdaFw0yNzA2MjgwMjUyMTdaMDMxMTAvBgNV
BAMTKEI4NjlDNUJFQ0Q1OEVDQzY4QzdBMENCOUNCRTE1QkI5QUY2MTQwNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlmYFRur8kgwCUoL2dZKRyN8uT
c/BmHZtwvmYBfD33LlSQKjmjSBpJfvmi5veCeeq+3RDUoI/RYkZeofEIUEBTetz0
a3sdKXudG9raFAaX76oktkOUGrVjVFjLAKIOqJBYTmbC4uZ7qvtp/NxL8YxbJRmk
reE2di7RMZugSaXcVX4xtoqAjMrrU2jpiRJz7aYCAKuI9ZcvgKOIjdUwHix9iMDC
StzM2WSD+twtGfhQ8/+Efpn26Uvgnv2BChftPtdL/zBQYvLNR+AfPlO/1sGOF952
Sx0Md9iHP5aWpGU8iF9LTFJ6HIIwLbyvBsVQlC9xpfostQi4myyaD6JELqo3AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUuGnFvs1Y7MaMegy5y+Fbua9hQFswHwYDVR0j
BBgwFoAU/Pww5v80bEtXk45XRfxxfZnaNnUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy
Mzc4NTQzNjE3MTMzNzc2NS8wL0ZDRkMzMEU2RkYzNDZDNEI1NzkzOEU1NzQ1RkM3
MTdEOTlEQTM2NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5OURBMzY3NS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMjM3ODU0MzYxNzEzMzc3NjUvMC8zMTMxMzQyZTMx
MzkzNzJlMzEzOTMyMmUzMDJmMzEzODJkMzEzODIwM2QzZTIwMzEzNzM5MzYzOC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEBnLFwDANBgkqhkiG9w0BAQsFAAOCAQEAoJkWlt5+63zjclFDuDX2
is9YoILTP5/x5hMSNRKnoLry4blSIyZsjL0kSMyW0+CIMwMl3RFp4vEJcGOgg9Oe
aVkpg7uyS/YQ7WqRbSARP5q0GsbaZHiYSVekvys/h4YNy3kYlfooxoRCCNWXGP99
azAyshTy7fZhziApIEOJzkxNAFs47HsVZjWBkO0/4JtbYnASZ5QwgSn4CuQxgp1w
ckeiC7K8DEFw+Mv5qFOrOXgZ4i/2VgujzKpknx/hp9cHrqVW5axKADaM5VPHBc7D
1LheuhpyJj+d+b4RCGORgs7lMlTwIWVsUisNM0mjWeEIhhRryrsiA1S1an0WQ7b1
8A==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:17 2026 by rpki-client