Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3230332e39302e3136302e302f32302d3230203d3e203137393638.roa
File:                     3230332e39302e3136302e302f32302d3230203d3e203137393638.roa (raw, json)
Hash identifier:          Xrdn8iXPJ/XsLAkG1tRslc6qeBRodS3FQHA+uM2Cgtw=
Subject key identifier:   E5:5D:D7:AC:34:E6:49:2B:C4:D4:24:08:15:87:1F:E1:8A:32:F2:DA
Certificate issuer:       /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial:       695C1AC1CFF7D6EAC01E2A1465F466292AAF7928
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3230332e39302e3136302e302f32302d3230203d3e203137393638.roa
Signing time:             Mon 29 Jun 2026 02:39:44 +0000
ROA not before:           Mon 29 Jun 2026 02:34:44 +0000
ROA not after:            Mon 28 Jun 2027 02:39:44 +0000
asID:                     17968
IP address blocks:        203.90.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:5c:1a:c1:cf:f7:d6:ea:c0:1e:2a:14:65:f4:66:29:2a:af:79:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
        Validity
            Not Before: Jun 29 02:34:44 2026 GMT
            Not After : Jun 28 02:39:44 2027 GMT
        Subject: CN=E55DD7AC34E6492BC4D4240815871FE18A32F2DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:58:b5:02:dd:2d:7e:ce:51:d4:16:60:9f:68:
                    2a:18:69:a3:a1:d2:ff:99:fa:df:14:b5:d5:e9:6a:
                    41:6f:1d:d2:63:0c:66:cf:b1:dd:fa:08:a0:77:20:
                    0c:d0:4a:fe:6d:a6:68:b5:3f:8e:c7:c6:31:89:0f:
                    bd:b8:cc:4b:1d:9f:66:cb:5c:2f:ad:54:99:72:82:
                    9f:46:1e:47:a3:98:0d:4a:42:9a:78:66:f3:4f:ab:
                    ce:3d:e7:ff:20:98:a1:4d:2f:21:30:bd:ae:73:e9:
                    2b:63:82:fd:c3:b0:29:cf:c3:57:31:8d:74:cb:81:
                    64:6c:ad:5b:1b:5b:6c:8c:fb:99:0a:95:82:5a:9e:
                    f7:70:f9:df:e9:3d:bb:c3:ca:9b:7f:2c:1c:6b:f8:
                    c2:d1:a5:6b:82:91:68:59:39:9e:90:11:f8:46:90:
                    bd:a2:5b:18:14:7b:5b:b4:93:a4:71:11:cb:29:9c:
                    f2:b2:83:2c:4e:03:77:98:ee:11:4d:61:b6:4b:fd:
                    a8:03:6b:dd:57:b4:c9:fd:49:0d:68:cf:6f:f5:f4:
                    f0:61:4d:ee:60:50:91:9e:87:8e:f9:c7:7d:82:11:
                    41:b3:da:9b:75:b6:9f:a7:66:ad:0f:2c:5f:28:ee:
                    02:8b:cd:5a:c6:45:6e:57:be:21:6e:9d:94:9e:23:
                    99:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:5D:D7:AC:34:E6:49:2B:C4:D4:24:08:15:87:1F:E1:8A:32:F2:DA
            X509v3 Authority Key Identifier:
                keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3230332e39302e3136302e302f32302d3230203d3e203137393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.90.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b0:20:9d:f1:0d:f7:a5:c9:c3:33:66:4b:3c:1e:46:cc:44:67:
         f4:47:d8:eb:46:a6:db:70:57:1b:1f:bf:94:d9:3a:81:3c:4f:
         9d:f5:1d:54:af:70:6d:b1:67:b9:ce:c0:54:56:d5:d7:7a:b4:
         8e:41:db:64:92:eb:40:7c:bc:4f:cc:d2:3c:0a:f9:02:9c:aa:
         88:44:fe:42:ed:70:b9:ef:15:12:d3:9c:6d:1b:56:03:63:88:
         59:94:f9:bb:da:3a:7a:e8:ed:e4:c8:83:6b:b9:ac:d9:a1:80:
         5c:ac:33:b8:c0:c0:ba:d0:a5:b7:c1:8e:dc:0b:9b:6c:81:80:
         59:e1:e3:a6:21:ee:c8:e9:8d:ca:cd:34:07:e3:f1:7a:49:f1:
         33:b0:ae:cf:83:f5:38:4c:54:66:d6:6b:59:69:d9:02:82:39:
         bd:ee:41:ad:95:6d:18:38:e9:21:b5:d1:98:dd:91:77:1f:6c:
         35:ac:bc:ed:3c:d6:3a:29:51:63:74:de:6c:d6:97:29:22:f3:
         7b:44:03:3b:40:43:93:1a:cb:c9:2b:d7:36:cb:87:01:d9:a5:
         d8:51:9c:7b:1c:0e:59:62:1f:b9:2b:f1:0c:90:13:67:18:dc:
         61:b5:db:8a:5b:9e:8a:64:ce:16:d0:1e:6f:4b:dc:98:af:0e:
         0b:c3:7d:e2
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUaVwawc/31urAHioUZfRmKSqveSgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5
OURBMzY3NTAeFw0yNjA2MjkwMjM0NDRaFw0yNzA2MjgwMjM5NDRaMDMxMTAvBgNV
BAMTKEU1NUREN0FDMzRFNjQ5MkJDNEQ0MjQwODE1ODcxRkUxOEEzMkYyREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnWLUC3S1+zlHUFmCfaCoYaaOh
0v+Z+t8UtdXpakFvHdJjDGbPsd36CKB3IAzQSv5tpmi1P47HxjGJD724zEsdn2bL
XC+tVJlygp9GHkejmA1KQpp4ZvNPq8495/8gmKFNLyEwva5z6Stjgv3DsCnPw1cx
jXTLgWRsrVsbW2yM+5kKlYJanvdw+d/pPbvDypt/LBxr+MLRpWuCkWhZOZ6QEfhG
kL2iWxgUe1u0k6RxEcspnPKygyxOA3eY7hFNYbZL/agDa91XtMn9SQ1oz2/19PBh
Te5gUJGeh475x32CEUGz2pt1tp+nZq0PLF8o7gKLzVrGRW5XviFunZSeI5lXAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU5V3XrDTmSSvE1CQIFYcf4Yoy8towHwYDVR0j
BBgwFoAU/Pww5v80bEtXk45XRfxxfZnaNnUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy
Mzc4NTQzNjE3MTMzNzc2NS8wL0ZDRkMzMEU2RkYzNDZDNEI1NzkzOEU1NzQ1RkM3
MTdEOTlEQTM2NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5OURBMzY3NS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEyMzc4NTQzNjE3MTMzNzc2NS8wLzMyMzAzMzJlMzkz
MDJlMzEzNjMwMmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzEzNzM5MzYzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBMtaoDANBgkqhkiG9w0BAQsFAAOCAQEAsCCd8Q33pcnDM2ZLPB5GzERn
9EfY60am23BXGx+/lNk6gTxPnfUdVK9wbbFnuc7AVFbV13q0jkHbZJLrQHy8T8zS
PAr5ApyqiET+Qu1wue8VEtOcbRtWA2OIWZT5u9o6eujt5MiDa7ms2aGAXKwzuMDA
utClt8GO3AubbIGAWeHjpiHuyOmNys00B+PxeknxM7Cuz4P1OExUZtZrWWnZAoI5
ve5BrZVtGDjpIbXRmN2Rdx9sNay87TzWOilRY3TebNaXKSLze0QDO0BDkxrLySvX
NsuHAdml2FGcexwOWWIfuSvxDJATZxjcYbXbilueimTOFtAeb0vcmK8OC8N94g==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:21 2026 by rpki-client