Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a313030303a3a2f33362d3336203d3e203137393638.roa
File:                     323430303a666530303a313030303a3a2f33362d3336203d3e203137393638.roa (raw, json)
Hash identifier:          fkUJOEj8u6upb5xptnuARjs6V85wtfB5F35SpbZIodk=
Subject key identifier:   3B:C9:17:64:B6:EE:8D:0C:64:85:11:DF:72:1D:DB:73:2C:86:CE:70
Certificate issuer:       /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial:       742D8D9C9A905976438C4720035D975A35E2BB50
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a313030303a3a2f33362d3336203d3e203137393638.roa
Signing time:             Mon 29 Jun 2026 02:46:52 +0000
ROA not before:           Mon 29 Jun 2026 02:41:52 +0000
ROA not after:            Mon 28 Jun 2027 02:46:52 +0000
asID:                     17968
IP address blocks:        2400:fe00:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:2d:8d:9c:9a:90:59:76:43:8c:47:20:03:5d:97:5a:35:e2:bb:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
        Validity
            Not Before: Jun 29 02:41:52 2026 GMT
            Not After : Jun 28 02:46:52 2027 GMT
        Subject: CN=3BC91764B6EE8D0C648511DF721DDB732C86CE70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:62:75:53:4a:86:9b:b0:2f:c0:02:d5:c8:6e:
                    db:55:7e:d7:ca:36:0d:ed:66:9a:b4:d0:8c:a9:d6:
                    b3:3c:00:8b:17:9a:13:3f:05:b8:65:c9:25:a5:20:
                    18:1c:cd:85:e6:bc:87:4c:5a:bf:40:49:83:3f:03:
                    6a:6f:c3:9f:ea:c7:f6:84:b2:51:a4:dc:d1:cc:f6:
                    bd:bb:09:a3:de:7e:2e:77:9d:06:d0:29:be:ff:f1:
                    73:1c:4c:07:4e:bf:ba:62:e1:89:3d:83:2a:c6:30:
                    67:2d:50:6a:2f:ea:fa:bc:58:d7:55:ce:f9:a0:98:
                    31:86:d9:68:76:30:46:83:96:68:b3:31:e0:40:17:
                    33:44:b7:4b:d8:14:da:af:6e:12:67:41:29:6d:ae:
                    33:d1:86:0b:4e:81:a1:cc:72:3a:6c:0a:54:f2:05:
                    76:85:0f:87:0a:6e:b3:a5:81:31:9a:10:57:03:e1:
                    0b:f6:aa:b2:8f:6f:92:8b:e4:86:a4:6e:c5:61:04:
                    2c:0b:aa:ba:26:e6:f1:5a:99:31:f6:11:e6:7e:6b:
                    1d:a2:e1:1c:13:78:fe:e9:a3:60:bb:4c:0a:ea:4f:
                    62:fe:62:be:41:e1:79:b0:7f:ba:fa:8e:bf:e2:fa:
                    db:6b:9e:19:a1:ab:a2:db:58:40:64:db:73:13:b3:
                    be:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C9:17:64:B6:EE:8D:0C:64:85:11:DF:72:1D:DB:73:2C:86:CE:70
            X509v3 Authority Key Identifier:
                keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a313030303a3a2f33362d3336203d3e203137393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:fe00:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         60:af:0d:d6:d8:a6:bf:a3:22:8c:a6:9a:95:5d:37:1f:40:a2:
         5c:bb:75:c7:19:d3:cb:da:86:86:a0:a1:1f:b0:da:5d:f8:b6:
         23:09:cf:34:1d:3b:ac:39:e8:74:bc:9d:98:ed:6d:be:6e:b7:
         c2:6c:c8:20:4d:aa:08:13:de:00:6e:00:c0:20:c2:ed:0e:08:
         48:04:00:59:f1:55:e5:62:92:31:42:47:ea:42:21:09:b1:1c:
         ae:25:74:b3:17:31:be:0e:5f:0b:ce:de:b9:66:77:60:77:a0:
         ca:69:c3:d2:e9:d4:16:96:48:71:9d:6a:48:0a:5f:58:b9:de:
         6a:fd:c3:87:76:76:10:c0:14:13:8a:26:87:8b:04:50:5a:79:
         31:8e:1f:c9:0c:68:89:14:1d:99:bd:a4:bd:ee:6c:91:94:d1:
         24:d9:cc:9d:40:2e:0c:fa:2c:21:f1:19:92:26:25:c5:ef:69:
         b9:b6:cf:eb:87:05:07:1c:1d:c0:e4:b3:a3:1a:67:1f:a4:5d:
         7a:27:08:96:da:5a:46:85:86:4b:12:e3:30:fb:cb:d7:d1:48:
         a1:37:63:02:99:32:d0:c3:12:fd:12:c8:f0:65:f4:ba:4f:3f:
         f1:03:16:0a:15:b0:af:cd:66:3a:67:63:23:e6:61:99:99:36:
         5e:9b:9a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:12 2026 by rpki-client