Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313130303a3a2f34302d3430203d3e203233373234.roa
File:                     323430323a356563303a313130303a3a2f34302d3430203d3e203233373234.roa (raw, json)
Hash identifier:          u13enO2QeLd6zN7nVNr4QWzAsD9eWuGI4cq4YENLDCg=
Subject key identifier:   F1:30:61:F9:24:A6:BB:E1:4E:B7:1E:1F:0A:C8:6F:3E:2E:6B:A0:A1
Certificate issuer:       /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial:       5BFCAE99269EFCA94E95AD0C6F698AE5228DA10A
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313130303a3a2f34302d3430203d3e203233373234.roa
Signing time:             Mon 29 Jun 2026 07:53:28 +0000
ROA not before:           Mon 29 Jun 2026 07:48:28 +0000
ROA not after:            Mon 28 Jun 2027 07:53:28 +0000
asID:                     23724
IP address blocks:        2402:5ec0:1100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 12:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:fc:ae:99:26:9e:fc:a9:4e:95:ad:0c:6f:69:8a:e5:22:8d:a1:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
        Validity
            Not Before: Jun 29 07:48:28 2026 GMT
            Not After : Jun 28 07:53:28 2027 GMT
        Subject: CN=F13061F924A6BBE14EB71E1F0AC86F3E2E6BA0A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:89:aa:f9:ef:f7:2a:ce:13:0d:ab:09:0b:a5:
                    f5:e7:b6:80:5b:3f:a5:24:fc:04:e3:be:aa:50:23:
                    a6:77:2e:64:e4:fe:3e:12:9a:d2:60:18:b3:42:41:
                    a1:ac:c8:03:0d:64:bd:f4:5b:85:8f:5a:8b:c1:93:
                    58:8c:58:63:20:ac:ec:f4:b9:f6:1e:50:3f:b8:5b:
                    cb:b9:ee:d8:88:53:83:2f:43:c6:8d:e3:d1:ae:82:
                    fc:d7:17:c9:13:9e:c5:b8:96:15:d0:2f:61:b7:da:
                    49:88:e4:f9:81:c5:62:a7:67:30:43:3c:9f:ec:be:
                    5a:2b:5d:a3:a9:50:f5:59:37:77:2d:b6:fa:18:48:
                    22:5e:4d:1e:bd:9a:3f:11:75:fc:51:3d:74:c1:8c:
                    09:56:4c:4f:c5:42:fe:8a:0e:2d:ec:e0:e1:81:6a:
                    d5:8c:24:4d:e7:14:59:76:31:6e:b0:bd:86:78:59:
                    55:a9:22:49:f8:02:b5:a8:b0:6c:ac:39:49:c3:72:
                    f9:cc:20:9d:63:a3:85:a3:fa:8b:95:f5:3b:14:75:
                    2b:52:b1:d0:0e:2b:01:03:e9:77:eb:49:d5:bf:ff:
                    4a:c8:15:65:bd:c1:01:e1:10:ec:45:e5:22:1b:b8:
                    a3:3d:13:b7:7b:4a:a3:da:2e:fb:77:6a:14:36:23:
                    6a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:30:61:F9:24:A6:BB:E1:4E:B7:1E:1F:0A:C8:6F:3E:2E:6B:A0:A1
            X509v3 Authority Key Identifier:
                keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313130303a3a2f34302d3430203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5ec0:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         0b:9b:b6:f4:70:22:f9:4d:43:e2:b4:56:74:13:75:94:8d:15:
         cf:8f:13:02:63:14:69:ab:56:ec:0e:83:56:3e:3a:8b:18:ed:
         87:47:d5:03:ee:cf:14:36:11:e4:7b:f3:12:23:72:f9:5d:d6:
         e8:87:c2:f2:ac:18:59:1e:dd:0d:3e:8d:f7:86:ae:0a:37:7a:
         3e:93:79:3e:ec:97:67:41:13:ad:68:a2:55:9a:df:e5:ff:d7:
         22:7a:1c:1e:06:d3:f2:a8:10:82:75:37:d2:41:be:bb:4d:34:
         a7:bc:f8:71:c2:cc:7c:9e:09:6c:f9:c9:5f:65:02:6e:9c:07:
         d6:07:ad:ba:fe:c7:34:2d:60:86:64:dc:4e:73:35:db:67:14:
         11:ec:33:67:f5:77:8a:de:07:bd:3c:f8:97:4f:49:a8:b4:00:
         bd:25:50:3b:eb:c6:e9:e4:42:b2:c9:53:56:c2:d8:c7:8b:26:
         6a:12:5b:a2:1a:5a:d3:98:b1:15:09:90:2f:e0:f7:b1:6e:63:
         59:be:7c:e1:73:64:41:c1:9c:68:fc:6c:f4:38:81:a8:d7:56:
         02:1d:db:ff:58:dd:25:56:69:1a:b9:da:f4:65:1e:5e:4e:bb:
         b9:ac:01:28:5e:60:7e:c1:31:09:93:c1:eb:13:78:d1:0a:4c:
         37:61:59:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:57:29 2026 by rpki-client