Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313230303a3a2f34302d3430203d3e203435313135.roa
File:                     323430323a356563303a313230303a3a2f34302d3430203d3e203435313135.roa (raw, json)
Hash identifier:          kqNYJkG1+gjNzwpqD851ErZl/PVDmeBeGrzg4JnaKys=
Subject key identifier:   24:9B:52:25:4C:6E:C5:DC:46:CF:1F:7D:B9:2C:A7:51:6C:F3:1F:4D
Certificate issuer:       /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial:       6A153FA26C8AA05B5A75F7DF59695DB23E9C858F
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313230303a3a2f34302d3430203d3e203435313135.roa
Signing time:             Mon 29 Jun 2026 07:58:05 +0000
ROA not before:           Mon 29 Jun 2026 07:53:05 +0000
ROA not after:            Mon 28 Jun 2027 07:58:05 +0000
asID:                     45115
IP address blocks:        2402:5ec0:1200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 12:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:15:3f:a2:6c:8a:a0:5b:5a:75:f7:df:59:69:5d:b2:3e:9c:85:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
        Validity
            Not Before: Jun 29 07:53:05 2026 GMT
            Not After : Jun 28 07:58:05 2027 GMT
        Subject: CN=249B52254C6EC5DC46CF1F7DB92CA7516CF31F4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:13:af:51:2a:df:44:c2:8c:34:4a:0b:52:b3:
                    0e:1e:1c:b7:d5:81:3b:c6:0b:b6:cf:15:46:a9:98:
                    47:4a:28:57:7d:8f:74:95:b1:c6:62:ff:f5:a0:82:
                    d0:27:1c:30:78:bb:a3:b9:cc:95:35:4f:85:69:88:
                    41:b9:e9:3c:6a:88:64:72:cf:f1:62:87:46:fc:43:
                    f8:dd:01:58:7e:b2:b8:61:28:df:8f:3c:58:8a:8d:
                    82:38:9d:ea:70:77:86:6f:ce:cf:49:86:53:8d:92:
                    df:3f:e9:69:2e:53:b3:4b:d0:48:ea:07:89:2b:77:
                    b7:f0:cd:d0:b1:89:56:01:d2:9e:82:96:8c:15:da:
                    24:ca:db:42:db:59:0e:89:f9:96:f7:40:a6:63:c1:
                    7f:3a:6d:9f:22:36:6e:db:ca:c0:d6:2c:dc:93:96:
                    0c:7c:e7:34:96:62:4c:ca:94:43:64:a7:d8:b7:1a:
                    51:23:2c:96:7e:28:3f:95:c9:8a:af:74:a1:77:4c:
                    e3:45:ae:24:7e:9c:05:8c:8f:51:59:52:07:2a:18:
                    ac:12:91:b6:58:da:06:2b:ba:8e:9a:e8:d3:a4:99:
                    b4:06:c8:ce:be:a0:c7:99:e8:cc:01:66:17:95:84:
                    65:50:9d:19:cb:49:59:96:e6:ee:8b:67:0c:ac:88:
                    d9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:9B:52:25:4C:6E:C5:DC:46:CF:1F:7D:B9:2C:A7:51:6C:F3:1F:4D
            X509v3 Authority Key Identifier:
                keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313230303a3a2f34302d3430203d3e203435313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5ec0:1200::/40

    Signature Algorithm: sha256WithRSAEncryption
         a8:1b:55:0b:cc:d1:89:83:e5:e9:e7:18:60:62:4c:30:7c:c0:
         79:b7:02:60:0c:c3:35:09:58:ca:7a:92:91:4e:64:dc:e6:72:
         7a:60:87:76:3a:bd:e5:c3:52:75:5e:2f:53:d9:ad:30:64:85:
         7a:a3:6b:7a:31:40:7c:af:96:b0:72:d4:25:d9:54:78:14:73:
         e1:ab:86:7a:93:9e:12:5d:8c:df:a9:51:e6:b1:75:6d:aa:22:
         6d:3d:f0:3f:b5:32:37:d2:ac:0f:cd:f4:38:e2:83:34:5f:46:
         d7:f1:0e:8c:45:7a:4d:b5:26:7a:9f:32:ba:70:83:b5:fb:0c:
         31:aa:d0:05:a6:50:47:a4:54:53:67:4c:19:a8:db:f3:f4:10:
         2b:00:ce:66:59:8c:9e:15:12:88:83:d9:7d:ec:d5:a6:be:8a:
         cf:df:cc:46:73:fd:9c:de:c8:a6:0d:38:4c:38:1e:c7:e8:c9:
         c5:95:75:46:21:d2:68:da:d6:14:30:b1:a1:11:5a:e4:2d:e8:
         46:b0:38:fb:f6:8a:3f:19:5c:74:e9:aa:db:f3:6f:e9:19:53:
         1f:59:56:8e:4d:cb:5f:5d:d5:79:1e:14:10:a1:fb:7c:0f:6a:
         a4:93:d2:fb:28:19:8b:87:73:a2:f7:81:d6:40:a5:f0:bb:5d:
         62:06:7a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:57:22 2026 by rpki-client