Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313030303a3a2f34302d3430203d3e203435313135.roa
File:                     323430323a356563303a313030303a3a2f34302d3430203d3e203435313135.roa (raw, json)
Hash identifier:          JYtBEvx/QM09KXT1GenPU0DAD4mn6DNAHSkDYEU6cEM=
Subject key identifier:   57:F3:38:88:4D:81:65:87:2C:A6:1C:C9:A7:BB:88:BF:70:12:B4:25
Certificate issuer:       /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial:       01904CF6A88F7AC5A1893796ECEBC82F181F79F3
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313030303a3a2f34302d3430203d3e203435313135.roa
Signing time:             Mon 29 Jun 2026 07:53:28 +0000
ROA not before:           Mon 29 Jun 2026 07:48:28 +0000
ROA not after:            Mon 28 Jun 2027 07:53:28 +0000
asID:                     45115
IP address blocks:        2402:5ec0:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 12:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:4c:f6:a8:8f:7a:c5:a1:89:37:96:ec:eb:c8:2f:18:1f:79:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
        Validity
            Not Before: Jun 29 07:48:28 2026 GMT
            Not After : Jun 28 07:53:28 2027 GMT
        Subject: CN=57F338884D8165872CA61CC9A7BB88BF7012B425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0c:51:c5:d2:94:a6:d8:16:fe:99:e1:1b:7c:
                    9a:19:cb:f2:1a:f7:a4:5c:c6:d4:a3:7c:46:e1:2b:
                    a9:fd:bf:95:04:12:62:13:90:c7:1d:bf:d4:1c:be:
                    e3:b3:df:2c:d5:5f:b6:2a:fb:f5:03:f4:c6:3a:eb:
                    77:21:93:3d:a3:df:b5:b8:1c:7f:c3:69:b0:cd:c4:
                    ee:74:e3:ef:b7:dc:a0:c5:44:21:20:fd:20:db:e1:
                    3b:bc:cb:25:70:05:8a:73:77:5a:7c:92:eb:d2:b3:
                    ab:06:ee:58:02:d9:9d:85:71:e7:a8:9c:1b:40:13:
                    0b:13:6d:64:7a:d6:7e:14:ae:31:30:6d:1d:c4:19:
                    3d:17:d5:8c:54:92:9b:8a:c8:5c:ed:d1:52:38:40:
                    fe:85:b1:d5:fd:67:5f:19:b9:8e:26:98:44:19:0b:
                    e8:39:9c:6f:0a:ac:cc:cf:8a:b6:55:67:c9:d4:c6:
                    04:a7:c4:a1:e4:2d:32:14:45:b6:f3:1d:d4:23:32:
                    ca:4a:06:74:48:08:05:f6:e1:4f:06:58:05:e8:c8:
                    29:d5:29:65:e6:b1:be:8c:1c:06:dd:65:26:91:58:
                    e4:4e:01:50:37:47:e0:1b:7c:32:26:0b:d4:0b:e5:
                    45:2e:97:58:36:8b:60:93:71:35:d8:08:49:08:90:
                    be:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F3:38:88:4D:81:65:87:2C:A6:1C:C9:A7:BB:88:BF:70:12:B4:25
            X509v3 Authority Key Identifier:
                keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313030303a3a2f34302d3430203d3e203435313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5ec0:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         c3:8b:55:2b:a9:67:36:e8:cb:79:0b:c8:89:dd:0f:b3:44:5e:
         8e:2a:e9:f9:0f:ef:cb:33:fc:97:40:5d:30:2a:8c:d3:62:d5:
         cc:85:4f:5b:30:82:58:85:99:78:85:5a:5b:ec:31:61:9a:6d:
         df:53:aa:65:28:8d:02:c1:8f:53:e6:69:89:29:0d:b4:81:bd:
         02:9c:ab:f2:1d:f1:34:e2:9a:f1:f0:0e:d3:cc:99:74:2c:e2:
         bc:29:21:00:39:17:37:8a:d1:a6:f1:48:c0:95:c5:41:80:53:
         3b:e1:95:2a:b2:39:bf:72:d0:3d:7a:80:79:d9:0b:ea:31:d3:
         fc:4f:50:f9:e4:eb:2d:c4:a3:3d:f0:ec:b6:d9:ca:79:69:31:
         52:7c:52:9a:63:90:99:f6:fb:6f:08:1e:60:b8:48:51:0e:bc:
         0e:b3:57:22:9a:64:fc:49:ad:18:2e:eb:22:32:82:0a:f8:9f:
         87:20:41:e2:7d:1d:11:df:e8:55:57:2b:20:05:e4:7c:bf:77:
         75:44:8f:e1:be:a1:8a:a7:08:c0:1b:73:cf:f8:db:34:d5:bd:
         80:61:8f:d0:ca:92:df:2b:79:0b:0e:1d:7c:92:31:81:70:cb:
         65:9a:f0:f6:bb:4e:85:9b:d0:7a:04:bd:36:ea:c0:f2:93:c7:
         52:32:70:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:11 2026 by rpki-client