Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a663030303a3a2f33362d3336203d3e203137393638.roa
File:                     323430303a666530303a663030303a3a2f33362d3336203d3e203137393638.roa (raw, json)
Hash identifier:          L45HpLnXAZno12u2ZaqQ7ctgNQ4hWk7gITOu5Nc0A8c=
Subject key identifier:   58:1F:B6:F8:B8:76:43:D5:9E:41:1D:26:92:ED:D8:42:E7:BD:72:40
Certificate issuer:       /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial:       62E4A3C542D96BC1E33A10DF1DC99606B9DB4E6E
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a663030303a3a2f33362d3336203d3e203137393638.roa
Signing time:             Mon 29 Jun 2026 02:46:50 +0000
ROA not before:           Mon 29 Jun 2026 02:41:50 +0000
ROA not after:            Mon 28 Jun 2027 02:46:50 +0000
asID:                     17968
IP address blocks:        2400:fe00:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e4:a3:c5:42:d9:6b:c1:e3:3a:10:df:1d:c9:96:06:b9:db:4e:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
        Validity
            Not Before: Jun 29 02:41:50 2026 GMT
            Not After : Jun 28 02:46:50 2027 GMT
        Subject: CN=581FB6F8B87643D59E411D2692EDD842E7BD7240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:03:16:d1:74:f7:56:b1:b3:68:a0:98:22:b3:
                    25:8c:dd:cd:d4:4c:2b:2b:ce:b3:68:20:0b:eb:39:
                    4b:bb:29:c5:b8:4c:55:cb:8f:b8:1a:00:ef:43:aa:
                    47:ee:4f:64:a6:e7:85:59:a6:fa:b6:fa:80:e1:bf:
                    94:35:38:9c:ce:49:65:9c:0d:52:12:89:89:a3:06:
                    41:8e:b6:30:a4:33:96:4d:1b:38:55:f9:2c:ac:0e:
                    fa:21:08:8b:af:05:df:bd:8c:a3:c6:b9:9b:d6:d6:
                    9d:6f:44:dc:f1:18:74:37:87:d5:80:4c:f6:ec:89:
                    24:a3:19:d0:3f:b4:a7:f7:25:5d:3d:67:7c:de:ee:
                    05:23:18:f2:c1:7d:0b:c6:23:f4:d5:7b:6b:1f:df:
                    5f:03:86:ee:50:81:95:0a:f1:6b:23:f0:2c:84:f5:
                    97:3c:b3:99:bb:20:18:6b:6a:1f:da:eb:79:5e:3f:
                    bd:71:76:1c:dc:2b:aa:7f:29:43:1e:ab:43:0b:6e:
                    e1:b9:d1:bc:c7:ae:23:f9:f6:d5:1b:59:85:cd:a7:
                    b9:ff:d0:0e:6c:38:a1:64:5f:d4:00:97:a0:45:a3:
                    ad:25:3b:ce:b5:bb:3f:7b:2b:fb:87:8f:1b:40:38:
                    34:79:50:b4:40:d3:d3:ed:48:17:4b:5d:32:8d:f8:
                    bc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1F:B6:F8:B8:76:43:D5:9E:41:1D:26:92:ED:D8:42:E7:BD:72:40
            X509v3 Authority Key Identifier:
                keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a663030303a3a2f33362d3336203d3e203137393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:fe00:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         36:ba:d0:4a:7f:ec:5a:36:c7:2c:16:a9:ae:ba:ef:dc:62:8c:
         79:da:8e:14:a4:10:71:c5:50:a3:5c:ab:37:0f:0e:c2:ad:0a:
         c1:9c:fb:5a:96:3a:0f:cd:1b:3a:6d:6f:1d:c7:89:be:76:a6:
         02:aa:91:7e:ea:13:39:97:bd:63:b1:a6:d8:64:e5:aa:1b:73:
         5e:1e:73:42:ac:9b:57:68:50:3e:10:13:cd:ba:d4:f1:8a:52:
         c4:fe:8a:0d:c0:04:36:16:ff:53:b8:fd:d8:61:4f:39:ce:e2:
         2f:3a:b9:24:d1:4e:2f:11:73:aa:17:1c:57:c4:20:b4:c6:a2:
         f4:72:ec:44:36:46:db:e7:7b:80:4e:5b:23:8d:21:fd:06:05:
         10:c1:2f:5e:de:6e:a6:bd:0b:d0:a6:80:0e:5f:a5:5a:21:9d:
         4a:49:82:aa:98:d9:1d:b6:2a:ec:63:57:20:45:45:fb:7c:7f:
         ed:f0:96:e6:70:1c:7a:d7:e0:e4:7e:f6:36:39:5d:b6:51:f9:
         28:0e:91:0d:24:bf:48:f8:8d:14:c2:d4:13:d8:f9:68:5e:45:
         95:1c:9e:ae:8f:40:5d:f0:d3:83:a6:3e:78:2c:cb:df:86:85:
         2b:bb:ff:48:ae:10:2b:c4:60:e8:bc:e5:45:ac:e6:49:3f:b6:
         29:28:38:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:11 2026 by rpki-client