Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313230303a3a2f34302d3430203d3e2034383038.roa
File:                     323430323a356563303a313230303a3a2f34302d3430203d3e2034383038.roa (raw, json)
Hash identifier:          4VIqh0GEkAhe5nqncPWRAxMiabIVsyOr0tfP8DAOtwE=
Subject key identifier:   BC:5C:CC:B5:6A:BE:0E:26:34:91:A0:78:3E:A0:DB:C6:27:D3:0E:B1
Certificate issuer:       /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial:       3B59691F0D29A3BD4CC602576BC2AADB4DBF0FE4
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313230303a3a2f34302d3430203d3e2034383038.roa
Signing time:             Mon 29 Jun 2026 07:58:04 +0000
ROA not before:           Mon 29 Jun 2026 07:53:04 +0000
ROA not after:            Mon 28 Jun 2027 07:58:04 +0000
asID:                     4808
IP address blocks:        2402:5ec0:1200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 12:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:59:69:1f:0d:29:a3:bd:4c:c6:02:57:6b:c2:aa:db:4d:bf:0f:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
        Validity
            Not Before: Jun 29 07:53:04 2026 GMT
            Not After : Jun 28 07:58:04 2027 GMT
        Subject: CN=BC5CCCB56ABE0E263491A0783EA0DBC627D30EB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:86:69:7a:ca:50:78:d8:31:fb:e3:3e:26:7f:
                    58:10:b7:d9:1c:a1:20:3b:50:64:f7:9f:97:19:ad:
                    58:4f:88:bf:72:69:0c:5b:3b:a3:ce:43:c3:de:79:
                    46:1a:52:b3:58:cb:33:a0:9e:42:d6:45:b7:65:1c:
                    ae:ab:d5:df:73:c4:5d:a8:2e:bb:57:e4:60:61:9f:
                    5f:95:b7:a8:73:ac:54:35:8f:44:5a:49:68:d5:73:
                    af:e1:a8:2c:12:c0:69:71:ff:a9:04:32:9d:ba:2c:
                    b2:30:da:04:37:e8:fc:f1:33:67:5c:cb:80:d5:4b:
                    78:74:54:51:b8:c3:07:be:13:49:5e:a9:76:b5:64:
                    bb:cb:e6:ec:b0:4a:c4:75:ae:db:b8:98:f2:ed:7f:
                    c6:d3:1a:b4:73:eb:d9:70:a2:d0:9a:4d:36:c1:e6:
                    3a:47:9a:27:43:9c:e0:be:96:95:08:72:3b:14:86:
                    cd:b8:0e:84:a5:ec:b0:da:21:fd:ca:74:ef:c1:15:
                    7e:0f:94:bc:13:58:87:99:92:19:3f:5b:5e:35:aa:
                    af:51:43:ab:e9:5a:9e:ec:a8:a2:89:af:47:3f:66:
                    ff:9a:0a:d3:93:f7:d7:78:0c:e1:d1:8c:61:83:af:
                    b2:24:66:f5:5c:85:7f:7e:a0:fb:25:96:4c:1e:32:
                    a2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5C:CC:B5:6A:BE:0E:26:34:91:A0:78:3E:A0:DB:C6:27:D3:0E:B1
            X509v3 Authority Key Identifier:
                keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313230303a3a2f34302d3430203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5ec0:1200::/40

    Signature Algorithm: sha256WithRSAEncryption
         4a:da:51:b7:30:cf:08:b4:30:3e:f7:9e:80:c9:ad:2e:82:3f:
         c2:cf:37:ba:08:35:05:95:f8:fd:16:f0:cf:75:a7:66:e4:af:
         0f:d1:7b:08:7b:e4:b4:50:f0:7f:52:71:b4:5d:3f:0d:d2:6a:
         5b:2d:1d:6c:22:95:36:be:cb:cc:a4:91:c2:9e:0c:2a:9e:12:
         13:cc:51:12:11:d5:2c:0c:65:dc:71:eb:34:65:05:a4:dd:44:
         f8:74:ef:98:48:73:8b:09:d1:4f:4f:52:e7:ae:96:22:d1:2c:
         28:de:07:4e:10:89:89:d5:36:d7:85:d0:1a:36:39:5a:bd:77:
         8d:51:71:4e:3b:36:8a:a3:48:e3:bb:75:73:fa:b5:1b:0e:7b:
         5b:8a:35:7f:29:75:d5:aa:42:b4:bb:b2:74:3b:6b:3a:cf:d9:
         f6:92:97:a2:1d:d1:1f:d9:63:ac:80:61:80:06:99:0f:46:0d:
         b8:0d:52:a4:47:aa:94:eb:e2:d7:bc:c6:98:a5:1d:95:c9:15:
         57:80:df:b0:51:d3:f2:3a:e9:82:5a:43:6f:ce:7a:00:07:80:
         b5:0d:29:ad:e1:13:ee:82:1e:48:df:9f:e2:c7:47:2b:c3:40:
         eb:d0:66:b2:d6:44:61:31:4b:0a:2a:0f:05:3f:48:33:5b:cd:
         6f:6a:9f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:24 2026 by rpki-client