Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/36302e3235322e3139322e302f31392d3139203d3e203137393638.roa
File:                     36302e3235322e3139322e302f31392d3139203d3e203137393638.roa (raw, json)
Hash identifier:          Vy4Ihrldu+boUg/GRfXNvkTUGJ2Ft9Rz7F+xJg8gdYs=
Subject key identifier:   FA:36:89:90:8B:15:25:95:28:65:FC:E8:5C:2F:80:1B:9E:5D:F0:84
Certificate issuer:       /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Certificate serial:       421CDC1451D33D55E7D3D7AAC5E08E628A4795F1
Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/36302e3235322e3139322e302f31392d3139203d3e203137393638.roa
Signing time:             Mon 29 Jun 2026 02:50:15 +0000
ROA not before:           Mon 29 Jun 2026 02:45:15 +0000
ROA not after:            Mon 28 Jun 2027 02:50:15 +0000
asID:                     17968
IP address blocks:        60.252.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:1c:dc:14:51:d3:3d:55:e7:d3:d7:aa:c5:e0:8e:62:8a:47:95:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
        Validity
            Not Before: Jun 29 02:45:15 2026 GMT
            Not After : Jun 28 02:50:15 2027 GMT
        Subject: CN=FA3689908B1525952865FCE85C2F801B9E5DF084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:72:74:9f:fe:73:e5:ec:15:a9:ee:00:e3:80:
                    1b:7f:7c:1f:26:90:b8:f0:52:a2:16:c6:3b:f7:38:
                    11:c2:47:e7:76:3c:1b:72:62:46:d2:97:47:e4:9b:
                    ec:3c:b7:bc:81:ca:01:45:14:12:d6:9a:4d:aa:c6:
                    c1:fd:42:5b:1b:62:0a:a5:4f:3b:47:19:13:57:33:
                    70:b6:15:a8:a0:97:d3:60:20:c2:28:e4:7b:bd:25:
                    00:16:f3:d0:62:4b:a0:e2:61:fb:91:05:48:a3:23:
                    9f:13:fa:27:26:5a:c2:f7:2b:f4:fb:d9:18:9b:25:
                    ed:49:10:e3:d7:a7:c7:56:c6:c5:31:4b:d7:31:53:
                    22:75:20:a9:6b:7a:43:cb:fd:44:1f:fd:3d:b2:15:
                    99:ce:f3:bf:12:f4:4a:3c:60:4f:56:3c:88:f1:3a:
                    aa:40:cb:37:6b:2c:18:d5:4c:e6:08:b5:e5:8a:cf:
                    56:03:d0:cc:14:fc:6f:9a:ab:7b:33:d9:22:66:c7:
                    3e:fe:b1:8b:f3:4b:70:83:2e:ce:b9:22:da:56:a9:
                    58:33:45:b7:a0:d2:16:da:01:ae:1c:af:82:07:82:
                    c1:e9:51:02:5b:c8:ca:1c:d0:e3:0c:33:98:5b:0d:
                    74:7c:f8:22:9f:47:6b:e4:49:d4:f4:4a:4c:4a:bf:
                    a3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:36:89:90:8B:15:25:95:28:65:FC:E8:5C:2F:80:1B:9E:5D:F0:84
            X509v3 Authority Key Identifier:
                keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/36302e3235322e3139322e302f31392d3139203d3e203137393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.252.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2a:f9:cb:63:a6:16:52:74:02:b9:7d:a7:1d:97:95:b9:77:7d:
         2b:17:c0:91:75:19:f3:41:bf:42:69:b1:2d:d7:23:53:00:be:
         ab:06:9a:76:34:26:06:81:a4:af:ff:57:72:8f:de:50:4a:df:
         0e:96:16:b8:65:70:ce:ef:a2:d3:bc:0b:af:59:64:bf:f9:0c:
         98:34:5d:40:c1:ee:a2:0b:e2:2c:41:ed:18:7d:e2:b2:9a:8e:
         0e:a7:67:bd:bd:f3:25:10:88:a8:82:5a:3a:90:31:84:86:5d:
         24:82:73:d9:fd:ca:6b:42:b5:f0:6d:96:27:a0:01:ea:34:e7:
         48:dd:6b:9a:aa:5d:d1:7f:fd:d9:fe:7e:0c:5e:c5:96:57:fe:
         f0:f8:0a:0c:50:19:e6:15:e0:25:3a:2d:7c:93:b9:fe:4b:83:
         67:ad:e5:5a:4a:d3:7c:df:20:f4:e9:7e:2e:70:b1:ff:e3:ee:
         c3:6f:93:f9:09:08:3d:c8:aa:60:d4:dd:53:67:d7:e3:d3:64:
         90:d1:7c:db:5e:34:19:07:a4:58:f2:cb:79:d5:28:90:53:1b:
         21:51:f3:07:96:a9:d7:39:ac:92:46:c6:d9:39:33:60:e8:30:
         b8:bc:0f:2b:eb:7d:76:7a:ba:25:06:dc:c4:34:a9:e6:22:b3:
         d2:c4:20:1f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:49 2026 by rpki-client