Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3137352e34372e3139322e302f31382d3138203d3e203137393638.roa
File:                     3137352e34372e3139322e302f31382d3138203d3e203137393638.roa (raw, json)
Hash identifier:          09nAi+zCYqgC4nVtY18tAu1k398TCNvCPppjJvNS+IY=
Subject key identifier:   3D:1F:68:FB:D9:3B:23:A7:D1:E1:79:3E:2D:5F:4E:FB:85:7C:90:4D
Certificate issuer:       /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial:       2E83CC98643198C1BB06E273FF49050588490D38
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3137352e34372e3139322e302f31382d3138203d3e203137393638.roa
Signing time:             Mon 29 Jun 2026 02:54:52 +0000
ROA not before:           Mon 29 Jun 2026 02:49:52 +0000
ROA not after:            Mon 28 Jun 2027 02:54:52 +0000
asID:                     17968
IP address blocks:        175.47.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:83:cc:98:64:31:98:c1:bb:06:e2:73:ff:49:05:05:88:49:0d:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
        Validity
            Not Before: Jun 29 02:49:52 2026 GMT
            Not After : Jun 28 02:54:52 2027 GMT
        Subject: CN=3D1F68FBD93B23A7D1E1793E2D5F4EFB857C904D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3f:43:bb:b3:7d:34:b4:26:3b:b3:19:d8:8a:
                    25:3d:e6:99:85:ce:c6:75:9a:12:00:e8:ce:c5:64:
                    73:79:38:c5:61:1a:01:1e:f3:dd:68:3b:d2:31:97:
                    f8:a7:08:dd:0b:01:0e:01:2b:7b:18:79:c7:bc:b5:
                    34:87:6e:c7:23:fb:61:88:ef:ab:df:7c:ff:ef:13:
                    44:74:10:51:1f:c6:28:be:50:17:e2:65:fd:c2:d7:
                    b4:cd:52:c3:34:b1:f6:23:c4:ac:bc:cd:26:5e:1d:
                    f3:98:8a:fb:fa:8f:ca:c1:60:f0:95:20:1e:91:1b:
                    76:34:a1:89:c2:95:f4:55:41:eb:4a:f0:5d:f4:d9:
                    72:f0:7a:d5:c1:77:ab:2b:d6:a4:55:c5:6a:df:7b:
                    e0:8e:54:17:7d:b0:a1:60:b6:78:66:e1:ea:ba:0a:
                    b6:1b:fd:32:c6:0a:22:0c:0f:89:06:d3:81:0e:c8:
                    7b:a9:47:ce:f4:83:e5:e1:d0:06:17:19:d8:c8:0f:
                    c1:91:52:6c:93:3d:0a:c9:5d:25:5b:16:cd:8c:08:
                    57:a1:08:04:6e:15:71:ca:1e:c5:19:a9:5a:ee:4e:
                    50:87:24:7f:60:12:99:36:8b:10:9b:b0:10:f4:1f:
                    43:89:51:58:b6:05:05:d1:d5:16:f9:7d:86:44:25:
                    fc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1F:68:FB:D9:3B:23:A7:D1:E1:79:3E:2D:5F:4E:FB:85:7C:90:4D
            X509v3 Authority Key Identifier:
                keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3137352e34372e3139322e302f31382d3138203d3e203137393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.47.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         71:f4:b4:4d:da:f3:f9:c2:ad:3e:f9:4d:ba:19:c7:27:33:93:
         39:cf:54:d3:b5:a1:8c:76:6e:6f:a5:6d:37:65:8f:36:c8:3e:
         f6:e7:37:ca:f9:f0:3b:15:17:99:c9:9c:80:9e:61:5e:9d:fb:
         8e:f0:8a:8c:b5:8b:76:2d:b0:f3:93:d0:93:8c:25:96:84:b2:
         1a:55:f5:78:ef:09:bc:34:34:1c:2b:73:d8:fc:cf:26:29:29:
         48:ab:49:a2:6b:eb:7e:d9:7f:09:49:03:a5:3f:2f:fb:df:ea:
         73:44:52:24:5e:48:1c:7b:7c:b9:d1:7b:19:a0:7c:55:ad:f7:
         99:02:02:bc:8e:ee:b6:96:89:25:47:8b:79:20:61:68:d8:3c:
         f6:8b:11:b6:a4:c2:32:94:52:99:3a:4c:2b:15:0e:a2:e9:bf:
         d8:80:13:19:6d:e0:2b:24:76:e9:7a:49:99:8a:56:f8:d2:48:
         90:17:a9:f7:c0:e7:64:64:91:2f:62:e6:62:41:2d:fc:88:30:
         39:c6:98:47:30:8b:e2:52:75:06:8f:9b:25:bc:80:bd:80:9e:
         35:5d:a5:56:0c:b7:2c:23:30:9d:92:3d:8c:70:c9:ed:27:54:
         d7:05:d1:62:ac:51:cc:f0:fd:a0:4f:62:7e:f6:2c:08:50:6b:
         90:0f:6e:14
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 21:55:51 2026 by rpki-client