Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a623030303a3a2f33362d3336203d3e203137393638.roa
File:                     323430303a666530303a623030303a3a2f33362d3336203d3e203137393638.roa (raw, json)
Hash identifier:          9B3gEAjZa36Bv/FPoFqddN18ev1WIAHfcUJHSmNdag4=
Subject key identifier:   5E:55:99:DB:C8:A3:1F:8A:BE:1A:5D:7D:6B:9A:9F:D1:61:58:E2:8B
Certificate issuer:       /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial:       18B8A5AE838D1D008641757CDBBDBC294F1718C5
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a623030303a3a2f33362d3336203d3e203137393638.roa
Signing time:             Mon 29 Jun 2026 02:46:51 +0000
ROA not before:           Mon 29 Jun 2026 02:41:51 +0000
ROA not after:            Mon 28 Jun 2027 02:46:51 +0000
asID:                     17968
IP address blocks:        2400:fe00:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b8:a5:ae:83:8d:1d:00:86:41:75:7c:db:bd:bc:29:4f:17:18:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
        Validity
            Not Before: Jun 29 02:41:51 2026 GMT
            Not After : Jun 28 02:46:51 2027 GMT
        Subject: CN=5E5599DBC8A31F8ABE1A5D7D6B9A9FD16158E28B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:72:a2:1b:91:b6:57:dc:c2:68:4a:e6:a2:3b:
                    16:d9:a2:96:b7:5e:92:d8:dc:97:71:be:c0:45:1d:
                    8c:cc:d0:d7:d3:5c:6a:5e:51:26:73:35:f1:1c:7b:
                    fc:fe:b6:7c:6c:00:70:82:a0:ab:1d:9a:5c:48:a0:
                    80:3d:bd:8d:a8:17:3b:32:31:5f:51:1a:18:8f:2b:
                    8f:87:d2:31:bd:99:e6:7c:1d:be:26:ee:e9:a0:00:
                    3c:46:f2:4c:67:3d:88:54:ec:2f:e6:29:8b:fc:74:
                    2f:b1:e0:3c:93:5e:42:42:57:4c:66:84:87:d3:b9:
                    e9:a6:dc:bb:f7:da:6b:90:1d:5b:45:96:87:13:0f:
                    15:fd:8b:7a:60:32:d0:cc:5c:c4:6a:1f:fd:e2:70:
                    5d:cd:e1:76:5e:c5:a0:9d:ff:35:d2:5c:87:86:07:
                    17:e7:26:33:5d:d2:64:d8:3e:49:6a:99:a1:65:fd:
                    8c:8c:29:db:37:03:03:da:be:7b:5d:5b:94:02:2a:
                    a9:0a:7f:eb:55:f6:49:27:36:29:ee:bf:03:e6:46:
                    ce:47:a3:b7:73:cc:c7:dd:83:33:e3:49:3c:44:4c:
                    8e:45:3f:bd:36:b6:5d:64:35:3c:98:98:3b:b9:2d:
                    9c:a7:4a:bf:d8:d0:d8:ff:28:34:75:56:b0:3a:89:
                    17:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:55:99:DB:C8:A3:1F:8A:BE:1A:5D:7D:6B:9A:9F:D1:61:58:E2:8B
            X509v3 Authority Key Identifier:
                keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a623030303a3a2f33362d3336203d3e203137393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:fe00:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         bf:4b:99:85:23:5a:6e:95:3a:a0:7d:d5:2e:c1:61:93:71:fb:
         b0:3b:e7:04:c5:87:32:56:20:92:6b:59:4c:62:7e:39:85:5d:
         00:ec:a3:10:55:7a:7c:28:9c:4b:73:07:21:9d:69:1c:64:7c:
         1a:2a:de:0a:01:0c:02:83:51:86:e2:47:b4:48:ea:76:89:aa:
         c7:4b:aa:11:32:9a:dd:cb:ba:64:2a:66:61:f4:a4:bc:21:21:
         26:3e:5b:f7:e0:da:f5:d5:69:1e:0b:43:4f:aa:6b:41:34:c0:
         bf:1c:8f:82:e4:14:cf:10:6a:a6:b9:75:6e:d8:14:b9:5a:43:
         94:ad:7c:5d:1d:74:f2:40:64:76:9c:b4:70:4c:3c:b9:7f:0b:
         08:bf:37:12:03:fc:57:9b:ab:33:6e:a2:41:67:43:2a:6e:ea:
         29:84:6c:83:da:c8:07:d6:25:4d:ad:83:72:87:9c:70:5b:82:
         24:34:ec:14:fb:54:28:e7:3e:ce:74:28:63:02:a0:31:34:91:
         43:f6:96:85:16:14:1b:21:cb:2f:fd:ec:81:17:85:d1:db:c6:
         f0:c3:e8:ab:45:4d:19:74:9a:62:44:12:9b:96:9c:45:53:57:
         d4:d0:f0:ec:71:7f:9d:65:a4:8f:ea:af:66:97:24:55:24:fa:
         73:c7:16:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUGLilroONHQCGQXV82728KU8XGMUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5
OURBMzY3NTAeFw0yNjA2MjkwMjQxNTFaFw0yNzA2MjgwMjQ2NTFaMDMxMTAvBgNV
BAMTKDVFNTU5OURCQzhBMzFGOEFCRTFBNUQ3RDZCOUE5RkQxNjE1OEUyOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtcqIbkbZX3MJoSuaiOxbZopa3
XpLY3JdxvsBFHYzM0NfTXGpeUSZzNfEce/z+tnxsAHCCoKsdmlxIoIA9vY2oFzsy
MV9RGhiPK4+H0jG9meZ8Hb4m7umgADxG8kxnPYhU7C/mKYv8dC+x4DyTXkJCV0xm
hIfTuemm3Lv32muQHVtFlocTDxX9i3pgMtDMXMRqH/3icF3N4XZexaCd/zXSXIeG
BxfnJjNd0mTYPklqmaFl/YyMKds3AwPavntdW5QCKqkKf+tV9kknNinuvwPmRs5H
o7dzzMfdgzPjSTxETI5FP702tl1kNTyYmDu5LZynSr/Y0Nj/KDR1VrA6iRcrAgMB
AAGjggIgMIICHDAdBgNVHQ4EFgQUXlWZ28ijH4q+Gl19a5qf0WFY4oswHwYDVR0j
BBgwFoAU/Pww5v80bEtXk45XRfxxfZnaNnUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy
Mzc4NTQzNjE3MTMzNzc2NS8wL0ZDRkMzMEU2RkYzNDZDNEI1NzkzOEU1NzQ1RkM3
MTdEOTlEQTM2NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5OURBMzY3NS5jZXIw
gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMTIzNzg1NDM2MTcxMzM3NzY1LzAvMzIzNDMwMzAz
YTY2NjUzMDMwM2E2MjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDMxMzcz
OTM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB
Af8EEjAQMA4EAgACMAgDBgQkAP4AsDANBgkqhkiG9w0BAQsFAAOCAQEAv0uZhSNa
bpU6oH3VLsFhk3H7sDvnBMWHMlYgkmtZTGJ+OYVdAOyjEFV6fCicS3MHIZ1pHGR8
GireCgEMAoNRhuJHtEjqdomqx0uqETKa3cu6ZCpmYfSkvCEhJj5b9+Da9dVpHgtD
T6prQTTAvxyPguQUzxBqprl1btgUuVpDlK18XR108kBkdpy0cEw8uX8LCL83EgP8
V5urM26iQWdDKm7qKYRsg9rIB9YlTa2DcoeccFuCJDTsFPtUKOc+znQoYwKgMTSR
Q/aWhRYUGyHLL/3sgReF0dvG8MPoq0VNGXSaYkQSm5acRVNX1NDw7HF/nWWkj+qv
ZpckVST6c8cWDA==
-----END CERTIFICATE-----
Generated at Tue Jul 14 21:57:33 2026 by rpki-client