Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3231382e39372e3139322e302f32302d3230203d3e203137393638.roa
File:                     3231382e39372e3139322e302f32302d3230203d3e203137393638.roa (raw, json)
Hash identifier:          N+0I7kjF9WqMEwlHwF/K3r70hsiNMruX8+hXJtG5Pkk=
Subject key identifier:   B3:80:E2:04:4E:27:9D:BE:77:A0:58:F3:0F:64:D6:EE:19:BD:48:2D
Certificate issuer:       /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial:       58E2CF60B3CC641097CCC09088C1556EB7BE48B8
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3231382e39372e3139322e302f32302d3230203d3e203137393638.roa
Signing time:             Mon 29 Jun 2026 02:43:42 +0000
ROA not before:           Mon 29 Jun 2026 02:38:42 +0000
ROA not after:            Mon 28 Jun 2027 02:43:42 +0000
asID:                     17968
IP address blocks:        218.97.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e2:cf:60:b3:cc:64:10:97:cc:c0:90:88:c1:55:6e:b7:be:48:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
        Validity
            Not Before: Jun 29 02:38:42 2026 GMT
            Not After : Jun 28 02:43:42 2027 GMT
        Subject: CN=B380E2044E279DBE77A058F30F64D6EE19BD482D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:14:71:e5:dc:bc:a7:c2:e0:28:c5:b7:10:62:
                    c7:29:bf:b1:80:40:fb:ad:4f:36:ba:5f:05:73:90:
                    e2:9b:4d:b7:51:45:86:a0:a0:d4:c3:b3:69:ab:f7:
                    1a:0d:76:cb:3c:9a:b4:e7:34:55:98:27:bf:50:24:
                    c6:c3:d3:c6:a1:38:22:84:73:35:9a:5e:48:27:4a:
                    a3:2b:cb:12:18:29:80:9c:10:bb:d4:ee:f2:f9:89:
                    e8:d2:a4:8f:2a:60:10:5c:59:a2:18:cd:b2:7e:fa:
                    8b:d0:6f:ca:94:4a:61:b8:90:7e:ce:89:5e:2b:b9:
                    b8:93:50:0d:90:c9:e5:1f:c8:19:cf:64:28:ce:84:
                    1d:23:de:83:3b:72:f6:53:f6:29:33:f6:87:61:b5:
                    8e:82:d3:20:5b:fc:53:a1:15:45:19:54:52:d3:2e:
                    90:d9:fe:a1:33:5d:29:3f:fb:20:22:38:cf:3d:1a:
                    9d:76:6c:8d:bf:60:8c:89:d1:6d:dd:c9:b7:3e:26:
                    91:9b:40:a2:ab:40:87:96:00:23:0a:75:61:ac:a9:
                    17:c4:91:8e:0e:2d:9c:6b:2d:cd:14:ff:84:2b:ce:
                    38:86:d4:28:6d:0f:8e:d2:f2:7f:8c:1c:99:c9:5f:
                    21:24:84:c4:b9:53:c9:bf:c1:dc:dd:15:ce:e9:bb:
                    55:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:80:E2:04:4E:27:9D:BE:77:A0:58:F3:0F:64:D6:EE:19:BD:48:2D
            X509v3 Authority Key Identifier:
                keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3231382e39372e3139322e302f32302d3230203d3e203137393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.97.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4e:28:d2:39:5f:7f:14:e5:e6:ec:fa:27:11:dc:05:b3:a0:1c:
         8f:f7:b4:b9:be:3b:76:f8:c2:c2:07:6a:a1:4d:1e:ee:6b:b7:
         00:8d:de:db:15:6f:91:0b:04:8d:cf:0d:a8:c9:ed:ac:9c:24:
         03:5c:a3:3c:6c:8a:a0:16:39:08:35:9d:8f:38:dc:00:bd:87:
         ce:be:79:5c:89:45:f0:10:8f:bb:d3:c5:f9:96:f7:ac:40:eb:
         7c:e3:7f:16:32:6d:e5:db:02:d0:e7:03:a2:2a:88:a2:8c:96:
         60:9a:8f:ce:ce:82:6d:f6:c4:21:fd:c4:b8:09:27:02:ed:6d:
         48:b4:f6:cf:0d:18:47:dc:8c:f1:99:b3:c2:af:79:47:da:fa:
         14:60:59:75:79:03:63:7a:a3:7f:09:89:6f:a4:77:37:b6:da:
         38:7d:27:ef:50:01:73:9d:22:d1:e5:2a:bc:77:1d:ed:a5:50:
         85:d0:9a:33:8d:d4:42:51:a5:d9:d2:27:31:f0:d2:42:4c:db:
         82:8f:5c:5c:a8:0d:ec:f3:99:e3:a5:7b:3a:22:2b:27:a5:56:
         dc:c0:69:53:55:ab:95:83:94:e7:c2:2c:d6:f3:0e:ee:fb:24:
         c9:4d:87:a5:65:49:b5:8e:57:69:7a:b3:ce:18:4f:c2:db:24:
         12:d7:c4:5f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:14 2026 by rpki-client