Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313230303a3a2f34302d3430203d3e203233373234.roa
File:                     323430323a356563303a313230303a3a2f34302d3430203d3e203233373234.roa (raw, json)
Hash identifier:          9lGBqle9AAxhlYL7Q0s0B2zW71OgG4OoRC0qZb/3goM=
Subject key identifier:   8D:77:3E:3A:C7:38:53:98:E8:83:3E:72:B8:D0:AB:58:80:F7:DA:26
Certificate issuer:       /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial:       2A843D034B27C0F681E172BC93EEA692784257FB
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313230303a3a2f34302d3430203d3e203233373234.roa
Signing time:             Mon 29 Jun 2026 07:58:05 +0000
ROA not before:           Mon 29 Jun 2026 07:53:05 +0000
ROA not after:            Mon 28 Jun 2027 07:58:05 +0000
asID:                     23724
IP address blocks:        2402:5ec0:1200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 12:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:84:3d:03:4b:27:c0:f6:81:e1:72:bc:93:ee:a6:92:78:42:57:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
        Validity
            Not Before: Jun 29 07:53:05 2026 GMT
            Not After : Jun 28 07:58:05 2027 GMT
        Subject: CN=8D773E3AC7385398E8833E72B8D0AB5880F7DA26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6e:d1:8a:c9:51:5e:76:03:f2:bd:d2:38:20:
                    c1:c6:91:c6:d3:5b:11:ef:52:b5:7b:40:e7:e6:a5:
                    02:84:3e:ca:b3:69:0e:fc:23:e2:24:fa:e9:de:27:
                    e3:2d:ac:7d:81:68:0a:2f:d8:37:d3:22:6e:9f:a2:
                    cd:cf:21:94:cf:ea:ae:81:a0:a1:2d:7d:55:97:15:
                    0b:2d:d3:77:ea:6c:7a:7f:aa:fc:b7:3a:32:b9:97:
                    3f:7f:77:a5:64:a5:b4:21:69:69:15:36:2f:5c:0f:
                    33:f5:c1:f2:52:32:c0:7e:96:3a:15:10:9b:61:00:
                    80:6b:4a:91:25:42:1e:8a:e9:f8:9f:ce:1a:75:cd:
                    3b:79:e6:e6:6d:77:2b:7b:d7:72:40:09:94:94:6f:
                    25:6b:9a:6c:25:ec:29:29:fe:c4:a2:f6:d7:a7:ac:
                    08:9f:7e:e9:43:1a:31:02:23:b5:4f:7c:0c:8d:b1:
                    f9:f9:a0:26:1a:17:4c:4d:bd:55:27:48:68:15:85:
                    f9:13:22:16:9d:a8:5b:0c:a3:36:98:82:9a:3d:c4:
                    4f:2a:4c:78:44:08:25:b2:06:28:55:cf:38:07:c0:
                    87:5a:b3:18:da:cd:0a:16:e4:71:43:f0:dd:c3:46:
                    5f:bd:0b:fe:7e:22:39:fd:a6:d9:a9:3a:65:af:1e:
                    55:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:77:3E:3A:C7:38:53:98:E8:83:3E:72:B8:D0:AB:58:80:F7:DA:26
            X509v3 Authority Key Identifier:
                keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313230303a3a2f34302d3430203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5ec0:1200::/40

    Signature Algorithm: sha256WithRSAEncryption
         c2:d5:9e:68:4f:de:79:b6:1a:30:e0:a7:a4:4a:55:23:1a:a7:
         1d:18:58:43:8c:35:51:1f:e0:6c:e4:07:c2:99:1d:5d:41:63:
         26:df:6d:11:7d:9d:64:c8:09:73:66:e9:87:e0:76:8a:72:a7:
         2f:2c:fa:6e:2a:fc:dd:7a:01:86:03:5c:48:2d:b3:27:76:70:
         d0:51:b8:bd:47:2b:fc:11:0b:51:0b:4c:96:06:6c:6a:19:58:
         0c:14:68:cb:e0:d5:b9:22:04:7f:5b:af:97:3f:0f:6e:20:08:
         a7:d7:14:36:04:ca:84:3c:62:39:61:d2:31:cc:c2:39:3a:ac:
         7b:61:b9:a6:09:7a:5c:7b:9c:a1:5a:ff:cb:39:83:5b:c6:c3:
         1c:75:3f:6d:dd:f6:44:b2:f3:8e:fb:d1:f9:7f:a6:72:f9:42:
         54:fc:3c:2c:70:a8:02:0d:4f:5a:b4:2d:01:7f:5b:0e:e5:e4:
         e8:ca:e1:13:57:e7:7d:20:34:90:cb:43:f5:96:b5:83:f8:49:
         5b:a5:b7:c5:0d:e1:c3:2c:b6:3e:e2:da:5b:01:46:16:c0:f5:
         75:85:c0:8e:4a:32:95:60:5b:dd:cb:4f:d8:ee:24:cb:43:6c:
         f0:1e:c3:4c:d7:bc:7d:ca:ec:d6:4a:61:79:f2:76:ba:26:dc:
         44:f1:fe:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:57:33 2026 by rpki-client