Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a653030303a3a2f33362d3336203d3e203137393638.roa
File:                     323430303a666530303a653030303a3a2f33362d3336203d3e203137393638.roa (raw, json)
Hash identifier:          0nqh/eiUMGkx8Lll6gs7Am0excc1uMkOL5//XufGTOA=
Subject key identifier:   AA:D1:C5:BA:81:C3:1E:4D:97:4C:23:01:CB:5E:DF:5B:13:50:AA:9C
Certificate issuer:       /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial:       2C79246054D268B1065923BE002FA141BF7B52C5
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a653030303a3a2f33362d3336203d3e203137393638.roa
Signing time:             Mon 29 Jun 2026 02:46:50 +0000
ROA not before:           Mon 29 Jun 2026 02:41:50 +0000
ROA not after:            Mon 28 Jun 2027 02:46:50 +0000
asID:                     17968
IP address blocks:        2400:fe00:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:79:24:60:54:d2:68:b1:06:59:23:be:00:2f:a1:41:bf:7b:52:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
        Validity
            Not Before: Jun 29 02:41:50 2026 GMT
            Not After : Jun 28 02:46:50 2027 GMT
        Subject: CN=AAD1C5BA81C31E4D974C2301CB5EDF5B1350AA9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e8:b9:f9:5d:6d:0e:7f:5d:35:51:ab:d2:21:
                    91:a1:c6:c4:2f:0f:00:02:6c:3f:d3:6c:42:6c:7e:
                    e9:71:dd:45:8e:25:1d:f3:32:05:b1:db:3e:01:60:
                    10:9b:07:bc:37:c3:25:28:e3:21:a2:b4:b0:31:e8:
                    80:9a:79:ed:68:1b:6f:34:27:9d:b3:2e:de:72:c1:
                    9b:92:98:2e:8f:fd:da:16:ad:63:89:23:4f:c3:12:
                    69:b7:1f:a6:01:4b:16:24:f2:65:a5:df:9d:a7:e6:
                    58:b9:b3:3d:49:65:de:b9:20:aa:5c:f8:47:c2:79:
                    66:13:ec:b0:6c:d6:ce:ff:62:0b:d9:a0:df:2c:50:
                    78:57:85:c7:58:81:a2:1e:31:db:01:2b:ff:79:e4:
                    d1:11:ec:3e:04:97:9b:c3:a5:4a:b0:07:1d:f9:f4:
                    11:8d:25:06:fd:d5:6e:aa:ff:c3:8b:88:70:54:cc:
                    13:77:d8:b1:cc:62:c0:64:be:04:59:6e:17:6c:15:
                    86:9d:45:c0:65:48:41:25:92:92:03:ea:58:65:fc:
                    80:29:c1:0a:99:1a:64:16:b8:6d:30:59:d8:53:ef:
                    c0:63:5d:ea:28:b4:fa:ce:49:ae:de:b8:80:01:dc:
                    ee:c3:97:fa:55:40:6a:86:26:e3:22:97:ef:30:48:
                    c2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D1:C5:BA:81:C3:1E:4D:97:4C:23:01:CB:5E:DF:5B:13:50:AA:9C
            X509v3 Authority Key Identifier:
                keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a653030303a3a2f33362d3336203d3e203137393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:fe00:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9c:7f:a8:86:31:b3:cc:77:10:c4:eb:97:ce:d0:1c:85:7f:06:
         f8:5c:98:49:a0:ce:a6:92:af:36:8f:c9:95:73:16:26:fa:e8:
         9d:0b:d5:be:14:d2:da:08:4c:ad:d5:1e:58:79:54:7b:2c:4f:
         1d:1d:64:b8:13:cd:d9:bf:c0:3d:d9:6f:8f:ca:e7:0c:99:92:
         7c:c1:82:fa:b3:e6:cd:c7:8e:54:8e:a5:50:68:20:79:70:ff:
         34:e6:16:fc:fd:5e:06:93:80:f7:74:78:07:00:40:18:e3:1a:
         f5:2f:93:ef:48:17:65:6e:23:09:85:df:94:e5:f2:01:14:4b:
         98:b3:95:19:4f:bb:d1:49:06:0b:d2:f6:5e:ac:2b:67:61:b8:
         eb:83:66:50:7a:45:04:d7:1f:09:6f:2f:bb:60:16:b2:19:07:
         56:f0:70:e0:5e:84:0d:d8:4b:02:ed:0e:7a:4c:91:b7:67:91:
         b0:00:92:e7:5e:08:df:a4:52:cc:63:ff:11:21:3b:cb:e8:44:
         02:5f:8a:36:6e:ca:fd:96:f5:2a:38:47:34:1e:c6:95:62:be:
         f5:04:e7:75:36:c0:80:1d:d5:a8:5f:3e:3b:c2:42:dc:84:0e:
         95:cd:31:58:54:2e:80:a4:11:82:9a:1a:df:75:69:06:f2:fe:
         58:a1:c2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:16 2026 by rpki-client