Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313130303a3a2f34302d3430203d3e203535393632.roa
File:                     323430323a356563303a313130303a3a2f34302d3430203d3e203535393632.roa (raw, json)
Hash identifier:          9s4BscrUyIFHON7lfDsAVtdv/Ky8Jc63DyZkJX8i1Io=
Subject key identifier:   7F:13:1F:71:A0:F5:42:AB:2C:39:F2:E5:F6:86:B8:97:31:F1:62:B6
Certificate issuer:       /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial:       25881728000BDC7D7A43B0E029A49D3C02366E21
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313130303a3a2f34302d3430203d3e203535393632.roa
Signing time:             Mon 29 Jun 2026 07:53:29 +0000
ROA not before:           Mon 29 Jun 2026 07:48:29 +0000
ROA not after:            Mon 28 Jun 2027 07:53:29 +0000
asID:                     55962
IP address blocks:        2402:5ec0:1100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 12:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:88:17:28:00:0b:dc:7d:7a:43:b0:e0:29:a4:9d:3c:02:36:6e:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
        Validity
            Not Before: Jun 29 07:48:29 2026 GMT
            Not After : Jun 28 07:53:29 2027 GMT
        Subject: CN=7F131F71A0F542AB2C39F2E5F686B89731F162B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ba:6d:a7:e0:ac:76:2a:5a:38:90:bc:5e:72:
                    b5:98:cd:27:f1:eb:04:b7:45:9e:84:68:15:68:03:
                    21:0f:60:c7:3b:c1:ab:66:28:84:6d:64:47:52:f5:
                    0c:61:9d:65:b0:43:e8:6f:dc:b8:0e:a0:63:e9:a7:
                    88:8b:7f:3d:d9:d5:b7:34:55:64:d4:b5:40:1a:42:
                    9c:47:98:53:f1:a2:ef:61:8b:cb:10:ea:98:c2:ca:
                    6a:3e:f3:f5:a9:5d:2f:19:83:87:21:e9:7e:51:3b:
                    af:e9:3d:17:a1:21:96:60:9d:0a:af:27:3b:f4:13:
                    b6:3f:7b:5d:ef:a6:5a:ab:28:f5:55:a0:5b:9a:10:
                    34:1b:1b:c5:d0:04:bd:d2:91:aa:66:76:51:68:e4:
                    dd:61:73:cf:67:bc:9f:75:8f:ca:3c:29:0b:79:72:
                    da:ad:8f:15:75:60:3b:19:ec:1d:83:20:55:99:df:
                    7f:cc:00:6a:bb:0c:d3:d6:4b:5b:f8:d3:f2:b4:25:
                    56:9a:38:ca:f8:04:6c:05:b8:18:2c:c6:e0:e0:8a:
                    96:55:b0:4c:45:9d:02:cf:5b:0d:b1:54:12:10:10:
                    34:e0:bc:8d:f0:aa:3b:00:f9:ad:92:a8:27:15:9d:
                    fa:b9:2b:ff:73:a6:a9:5c:c8:8d:69:fe:94:dc:1a:
                    19:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:13:1F:71:A0:F5:42:AB:2C:39:F2:E5:F6:86:B8:97:31:F1:62:B6
            X509v3 Authority Key Identifier:
                keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313130303a3a2f34302d3430203d3e203535393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5ec0:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         5e:1b:c8:70:85:a6:4f:13:c8:d3:17:46:02:d4:62:be:b2:0d:
         34:2b:2a:64:5a:da:bf:7a:dd:4d:08:e1:c3:2c:50:d1:a1:3b:
         63:6b:27:b4:39:6c:59:7b:f9:c1:3c:ec:54:27:e7:9d:b6:75:
         c3:4c:f0:f6:37:21:9a:c1:31:9d:48:ac:44:14:82:fb:b7:75:
         b5:24:ba:dc:df:d7:e5:7d:b1:e0:ea:70:e6:22:6a:e3:6e:4c:
         f9:8d:5e:ad:ab:d3:9b:8a:64:2a:7d:14:1e:b4:75:3f:94:a2:
         5c:9a:6d:a6:13:94:be:c7:82:6b:ba:3b:9d:f0:a4:22:1e:99:
         f8:ef:9f:51:d1:25:08:f7:fa:67:17:35:25:54:34:b6:b3:cb:
         f7:f9:03:34:03:12:aa:6b:90:61:ab:bd:ed:c9:25:f8:90:48:
         1e:dc:d2:3f:6e:07:2f:35:4b:e3:5b:fc:f3:48:39:42:90:31:
         02:3b:ad:98:82:f5:e5:6e:fd:1c:60:1b:d9:9f:6e:11:a9:a1:
         3a:d0:8f:9f:de:1b:ab:1f:8f:bc:69:15:fc:70:67:19:20:bf:
         1c:0b:f5:e6:4b:c2:ac:09:7f:8d:a7:21:03:23:23:02:08:16:
         11:51:9c:f0:d0:48:50:e8:97:5d:3f:af:f6:82:97:e2:84:b3:
         96:2a:ff:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:17 2026 by rpki-client