Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a613030303a3a2f33362d3336203d3e203137393638.roa
File:                     323430303a666530303a613030303a3a2f33362d3336203d3e203137393638.roa (raw, json)
Hash identifier:          1wHeM3ur8hQTkAjlNu3pz04aYY20oHPIPMOjvb2hRMs=
Subject key identifier:   52:63:1B:3C:D7:C6:30:F6:FB:19:CF:4B:8B:C5:A4:0F:F3:E4:26:DE
Certificate issuer:       /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial:       5398BC2B6889E1F9DB5395E01F3702D9AE3A0B81
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a613030303a3a2f33362d3336203d3e203137393638.roa
Signing time:             Mon 29 Jun 2026 02:46:50 +0000
ROA not before:           Mon 29 Jun 2026 02:41:50 +0000
ROA not after:            Mon 28 Jun 2027 02:46:50 +0000
asID:                     17968
IP address blocks:        2400:fe00:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:98:bc:2b:68:89:e1:f9:db:53:95:e0:1f:37:02:d9:ae:3a:0b:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
        Validity
            Not Before: Jun 29 02:41:50 2026 GMT
            Not After : Jun 28 02:46:50 2027 GMT
        Subject: CN=52631B3CD7C630F6FB19CF4B8BC5A40FF3E426DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:31:60:21:ca:16:8e:19:8f:aa:23:1b:32:7b:
                    45:69:22:34:fa:9f:e3:51:7a:f1:7c:6e:25:1c:fb:
                    a7:07:b3:c5:fe:c9:21:d6:7e:05:ed:42:a6:c3:24:
                    c8:da:b0:3c:74:b6:56:c5:1c:f4:40:a5:e7:a3:1d:
                    1b:e5:43:ab:43:70:1b:7f:6c:79:b1:a0:63:0d:d7:
                    fd:25:18:d4:1e:f8:77:21:d5:aa:23:ee:af:03:f5:
                    7b:3d:d4:dc:2d:e1:b4:8f:b3:d0:67:fe:1f:7a:6e:
                    84:5e:25:7f:93:72:8e:38:32:28:eb:64:dd:7b:1b:
                    73:64:9a:99:5f:5f:47:6d:73:07:b4:4d:9b:55:b5:
                    bc:b6:56:7c:47:9f:c5:eb:0d:58:c7:e1:ef:28:1b:
                    09:8b:24:a4:2b:fb:9b:72:b9:7d:f5:0b:c0:72:c7:
                    fd:f3:8d:d1:e6:43:bf:4d:2e:26:fa:ce:a6:40:dd:
                    31:f4:c7:29:26:31:61:cd:da:34:11:a1:8b:fa:6b:
                    d6:eb:95:ec:6f:c4:fe:3b:4b:df:ab:de:3b:b9:d7:
                    5e:9e:5c:36:3d:93:d8:98:1f:0a:2a:a5:18:85:5a:
                    d4:4a:7d:5c:51:62:25:bf:ec:81:00:32:c6:c6:ac:
                    41:dd:e7:df:0b:ff:14:29:4d:61:c7:ac:99:d1:ec:
                    1a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:63:1B:3C:D7:C6:30:F6:FB:19:CF:4B:8B:C5:A4:0F:F3:E4:26:DE
            X509v3 Authority Key Identifier:
                keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a613030303a3a2f33362d3336203d3e203137393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:fe00:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1b:31:cd:98:18:ba:b2:20:02:ae:36:5b:38:02:a6:fe:2f:da:
         46:8a:3e:4f:3f:f8:e3:c7:4c:9a:c8:b7:16:0e:79:e2:74:28:
         73:4f:c0:98:a0:ac:38:46:17:c9:b5:0b:fc:98:95:0a:3b:46:
         d3:14:ad:9f:b1:c9:c4:1c:cd:af:83:82:f6:61:af:ab:1a:ef:
         10:9f:c9:f8:3b:51:ff:58:52:18:d0:f6:77:6a:89:33:64:9a:
         cc:98:a7:35:d4:bb:3c:61:36:3c:6b:a8:3b:da:91:8f:1a:8f:
         57:d7:22:83:e2:e2:d1:64:de:ed:46:c3:7b:1d:03:8f:10:b6:
         21:f2:59:55:c4:ff:eb:a3:ff:39:ff:f8:07:72:6b:93:76:26:
         53:4e:b7:97:f0:9b:d5:28:be:83:59:a7:d8:2e:49:51:be:37:
         59:51:df:6c:46:eb:8a:0c:8a:8c:31:79:5c:31:48:e6:e2:be:
         2f:6e:4d:7a:c2:93:9b:f8:fe:21:2a:a4:4f:84:c0:47:fd:83:
         78:0b:7d:05:ae:85:80:2d:07:f7:7b:ab:d5:ee:e6:49:db:61:
         b1:78:4e:03:2d:4e:74:74:03:da:81:c8:d6:84:a0:2d:fa:16:
         55:7f:5f:54:dc:8b:77:34:fc:e3:a7:54:b4:90:44:01:e1:6f:
         92:61:da:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:13 2026 by rpki-client