Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3137352e34362e3139322e302f31382d3138203d3e203137393638.roa
File:                     3137352e34362e3139322e302f31382d3138203d3e203137393638.roa (raw, json)
Hash identifier:          5uFsmWJBhSfzM9ZiT7l8IShZGa9kEqjJVX6Xfl+pK8M=
Subject key identifier:   6D:98:27:71:DF:D5:EA:FE:1C:D3:5D:A0:40:B1:8D:1C:84:8E:C4:A7
Certificate issuer:       /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial:       0E17972F3278F07113669A774BFF3AFFC01B8C1E
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3137352e34362e3139322e302f31382d3138203d3e203137393638.roa
Signing time:             Mon 29 Jun 2026 02:54:52 +0000
ROA not before:           Mon 29 Jun 2026 02:49:52 +0000
ROA not after:            Mon 28 Jun 2027 02:54:52 +0000
asID:                     17968
IP address blocks:        175.46.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:17:97:2f:32:78:f0:71:13:66:9a:77:4b:ff:3a:ff:c0:1b:8c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
        Validity
            Not Before: Jun 29 02:49:52 2026 GMT
            Not After : Jun 28 02:54:52 2027 GMT
        Subject: CN=6D982771DFD5EAFE1CD35DA040B18D1C848EC4A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:18:d2:9f:03:ef:e2:f5:f5:cb:16:5e:1d:dd:
                    e2:3b:ac:26:9a:3a:a8:12:d9:d9:2c:f7:06:a7:ec:
                    13:88:44:f6:7c:a4:38:b6:ca:f2:77:36:ad:fc:2d:
                    ba:7d:b8:40:0d:95:5b:cf:e8:5c:6a:92:ca:f0:c8:
                    c7:f0:b6:4f:15:c3:92:f9:75:37:54:55:4e:4e:4d:
                    07:94:f8:16:c5:ce:ad:06:20:6a:f8:20:12:d3:0a:
                    59:d6:f8:47:01:19:52:4d:a7:05:8e:21:05:e4:63:
                    3c:a6:73:f9:fd:9d:18:4e:87:04:32:4c:38:04:b9:
                    55:9d:b0:73:1f:3b:45:7f:60:6f:b6:c4:06:91:8e:
                    79:c7:98:ac:ad:c6:16:cd:48:fa:b7:7c:97:42:be:
                    d5:a0:a0:93:b4:f1:ae:ee:d0:c0:1d:2d:74:dc:e3:
                    06:69:c8:97:df:c7:d4:52:e9:b0:20:5f:2c:77:2a:
                    ad:ab:a7:86:f6:f4:7b:89:2e:3b:0c:2b:2a:6a:6b:
                    26:0a:22:ea:54:cc:50:9a:8b:d9:78:62:50:02:5b:
                    e2:44:62:8e:1f:23:c0:fe:21:e1:3f:76:ec:f8:9e:
                    f7:05:1b:26:90:65:de:6f:a2:6b:f5:6f:e5:c3:46:
                    0f:4e:8b:e4:07:11:3c:ba:63:24:19:e0:c9:46:b7:
                    0f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:98:27:71:DF:D5:EA:FE:1C:D3:5D:A0:40:B1:8D:1C:84:8E:C4:A7
            X509v3 Authority Key Identifier:
                keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3137352e34362e3139322e302f31382d3138203d3e203137393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.46.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         52:ce:53:dd:9f:b6:b8:3e:e9:1f:fd:4b:a2:9f:de:8c:65:f3:
         99:b0:5e:03:6d:0b:b3:ae:b8:10:25:ea:ec:3c:81:5a:a4:4c:
         fd:fe:b2:3d:f7:fe:05:cf:9c:68:92:7e:4f:3c:6d:cf:fc:a4:
         48:d1:80:47:2f:28:db:fb:48:77:9e:22:e8:97:0d:e4:c7:c3:
         00:db:ce:1d:f5:17:a7:4e:a4:56:df:60:40:66:c8:30:12:de:
         18:0e:29:ee:f1:2f:af:03:87:7f:df:69:0b:1a:a3:57:46:da:
         08:db:c1:d4:b5:54:4c:e6:5b:a2:d5:f5:ef:43:93:d7:7a:1c:
         4c:c0:49:6a:73:53:bc:89:c3:a3:4a:ef:55:4d:e2:7d:75:4c:
         fe:80:63:a4:ed:c6:ed:e5:bb:8c:24:03:96:ad:fc:5e:16:0e:
         42:dd:c3:10:b5:6f:0c:f1:5b:3a:34:98:b4:c7:7b:12:0e:30:
         29:99:10:04:1b:30:b4:ad:fe:64:ac:00:53:30:68:f1:c6:3f:
         58:a4:35:63:3d:5e:6c:0d:ce:4b:f2:f3:dd:e5:be:2f:f2:1d:
         e2:77:9e:91:cf:95:20:81:f4:3f:bd:e0:aa:76:6f:42:97:b2:
         97:eb:a4:71:b1:44:a2:4a:0b:82:5f:31:ad:6e:f2:e8:d0:65:
         3c:a3:ab:8b
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUDheXLzJ48HETZpp3S/86/8AbjB4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5
OURBMzY3NTAeFw0yNjA2MjkwMjQ5NTJaFw0yNzA2MjgwMjU0NTJaMDMxMTAvBgNV
BAMTKDZEOTgyNzcxREZENUVBRkUxQ0QzNURBMDQwQjE4RDFDODQ4RUM0QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUGNKfA+/i9fXLFl4d3eI7rCaa
OqgS2dks9wan7BOIRPZ8pDi2yvJ3Nq38Lbp9uEANlVvP6FxqksrwyMfwtk8Vw5L5
dTdUVU5OTQeU+BbFzq0GIGr4IBLTClnW+EcBGVJNpwWOIQXkYzymc/n9nRhOhwQy
TDgEuVWdsHMfO0V/YG+2xAaRjnnHmKytxhbNSPq3fJdCvtWgoJO08a7u0MAdLXTc
4wZpyJffx9RS6bAgXyx3Kq2rp4b29HuJLjsMKypqayYKIupUzFCai9l4YlACW+JE
Yo4fI8D+IeE/duz4nvcFGyaQZd5vomv1b+XDRg9Oi+QHETy6YyQZ4MlGtw+1AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUbZgncd/V6v4c012gQLGNHISOxKcwHwYDVR0j
BBgwFoAU/Pww5v80bEtXk45XRfxxfZnaNnUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy
Mzc4NTQzNjE3MTMzNzc2NS8wL0ZDRkMzMEU2RkYzNDZDNEI1NzkzOEU1NzQ1RkM3
MTdEOTlEQTM2NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5OURBMzY3NS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEyMzc4NTQzNjE3MTMzNzc2NS8wLzMxMzczNTJlMzQz
NjJlMzEzOTMyMmUzMDJmMzEzODJkMzEzODIwM2QzZTIwMzEzNzM5MzYzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBq8uwDANBgkqhkiG9w0BAQsFAAOCAQEAUs5T3Z+2uD7pH/1Lop/ejGXz
mbBeA20Ls664ECXq7DyBWqRM/f6yPff+Bc+caJJ+Tzxtz/ykSNGARy8o2/tId54i
6JcN5MfDANvOHfUXp06kVt9gQGbIMBLeGA4p7vEvrwOHf99pCxqjV0baCNvB1LVU
TOZbotX170OT13ocTMBJanNTvInDo0rvVU3ifXVM/oBjpO3G7eW7jCQDlq38XhYO
Qt3DELVvDPFbOjSYtMd7Eg4wKZkQBBswtK3+ZKwAUzBo8cY/WKQ1Yz1ebA3OS/Lz
3eW+L/Id4neekc+VIIH0P73gqnZvQpeyl+ukcbFEokoLgl8xrW7y6NBlPKOriw==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:48 2026 by rpki-client