Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313330303a3a2f34302d3430203d3e203233373234.roa
File:                     323430323a356563303a313330303a3a2f34302d3430203d3e203233373234.roa (raw, json)
Hash identifier:          JcprHF1dnuK0n9UiydnswVL2kAggDTjRc0d7+Exl2EU=
Subject key identifier:   F0:6C:88:C8:A2:8D:E9:3E:B4:33:DD:95:EC:D7:57:CC:C9:4A:F0:83
Certificate issuer:       /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial:       51AB6195C50D8FDB3F3B38CB364742E5484E2A7D
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313330303a3a2f34302d3430203d3e203233373234.roa
Signing time:             Mon 29 Jun 2026 07:58:05 +0000
ROA not before:           Mon 29 Jun 2026 07:53:05 +0000
ROA not after:            Mon 28 Jun 2027 07:58:05 +0000
asID:                     23724
IP address blocks:        2402:5ec0:1300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 12:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ab:61:95:c5:0d:8f:db:3f:3b:38:cb:36:47:42:e5:48:4e:2a:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
        Validity
            Not Before: Jun 29 07:53:05 2026 GMT
            Not After : Jun 28 07:58:05 2027 GMT
        Subject: CN=F06C88C8A28DE93EB433DD95ECD757CCC94AF083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c4:ef:64:92:ca:26:f6:33:25:90:3d:5a:77:
                    54:62:4b:d8:94:39:50:c5:4e:5b:1f:95:fb:4a:e1:
                    f3:58:36:ca:82:a9:f0:ee:86:6f:4f:ab:56:4f:48:
                    fa:67:84:e1:a7:f9:3b:55:3f:ae:73:a3:aa:82:e1:
                    d3:b8:13:16:89:7a:69:a7:4e:46:fe:dc:11:2f:35:
                    d8:89:45:7f:98:b5:81:b7:bd:b0:1b:89:3a:d5:94:
                    00:97:84:c5:20:7c:4b:ab:65:a1:a3:30:88:8b:3b:
                    01:89:b6:58:8a:0a:00:7c:05:be:0e:c5:b5:ff:5f:
                    60:64:db:8d:cb:65:4c:0a:a2:bb:b0:21:b2:d5:d8:
                    3b:f8:a3:5c:26:cc:81:9a:4d:dd:05:1c:7b:1c:cd:
                    68:3e:67:24:83:64:c5:bb:b3:e0:f2:d5:26:14:38:
                    a4:d9:05:70:de:53:3e:b9:f9:f3:1b:63:bb:c5:81:
                    0b:87:03:dc:6b:84:56:11:e0:f5:7f:32:ac:5d:30:
                    99:5a:7f:37:e9:df:81:af:1a:18:f3:59:56:68:9c:
                    d2:df:44:cf:d9:9a:27:a8:c4:f5:6c:d3:5a:48:c0:
                    29:bc:9b:30:c2:31:09:62:6d:34:81:3c:32:cf:12:
                    2e:67:71:f4:d1:3a:c3:4d:b9:ec:be:dd:cb:6c:1e:
                    36:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6C:88:C8:A2:8D:E9:3E:B4:33:DD:95:EC:D7:57:CC:C9:4A:F0:83
            X509v3 Authority Key Identifier:
                keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313330303a3a2f34302d3430203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5ec0:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         62:af:3d:96:7d:a0:d9:1b:5f:6b:68:75:6e:9c:25:5f:02:62:
         77:e3:0b:ae:70:b9:cf:e1:0f:99:ef:f4:50:31:42:39:a5:4b:
         73:e0:d9:5f:f2:9f:58:9b:e3:6e:4e:0c:99:91:77:09:76:15:
         1c:08:ff:e4:e4:cc:46:ab:06:29:2e:4d:f6:53:26:db:0f:12:
         9d:0f:26:81:c1:db:f0:f8:56:7f:db:1d:aa:19:0f:87:cc:06:
         0d:67:e3:30:09:19:89:d6:8f:3c:38:e8:4a:01:09:cb:58:1d:
         4f:96:b1:03:76:7f:c9:c3:00:3a:92:76:e5:fe:25:af:28:b6:
         98:dc:60:e0:0e:88:27:6b:2c:ec:0c:a1:90:3e:16:a9:76:81:
         4b:52:60:7c:90:63:e5:97:6a:32:75:bd:17:50:13:5d:7b:25:
         21:62:e0:2d:b8:7d:8c:3f:18:b6:20:7e:57:7b:d8:b8:24:c6:
         4b:2b:84:ea:2a:71:b1:9d:d5:79:7a:8e:f8:fc:d9:76:ab:09:
         de:3b:3a:10:74:86:39:81:b7:35:ec:14:cc:b5:83:98:f4:96:
         79:ad:e0:1e:5c:23:c3:9f:c7:8c:c5:ab:47:61:ee:a3:3d:19:
         df:56:55:30:a3:ca:7e:b5:e0:98:40:8c:09:cf:a1:d9:2f:4a:
         2a:5c:e4:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUUathlcUNj9s/OzjLNkdC5UhOKn0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUw
N0U4MjQ4MTAeFw0yNjA2MjkwNzUzMDVaFw0yNzA2MjgwNzU4MDVaMDMxMTAvBgNV
BAMTKEYwNkM4OEM4QTI4REU5M0VCNDMzREQ5NUVDRDc1N0NDQzk0QUYwODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDxO9kksom9jMlkD1ad1RiS9iU
OVDFTlsflftK4fNYNsqCqfDuhm9Pq1ZPSPpnhOGn+TtVP65zo6qC4dO4ExaJemmn
Tkb+3BEvNdiJRX+YtYG3vbAbiTrVlACXhMUgfEurZaGjMIiLOwGJtliKCgB8Bb4O
xbX/X2Bk243LZUwKoruwIbLV2Dv4o1wmzIGaTd0FHHsczWg+ZySDZMW7s+Dy1SYU
OKTZBXDeUz65+fMbY7vFgQuHA9xrhFYR4PV/MqxdMJlafzfp34GvGhjzWVZonNLf
RM/ZmieoxPVs01pIwCm8mzDCMQlibTSBPDLPEi5ncfTROsNNuey+3ctsHjabAgMB
AAGjggIgMIICHDAdBgNVHQ4EFgQU8GyIyKKN6T60M92V7NdXzMlK8IMwHwYDVR0j
BBgwFoAUdl8Re+d+zDG9q5UzGOGi9QfoJIEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy
Mzg4MTUyMjkwNzA1NDExNy8wLzc2NUYxMTdCRTc3RUNDMzFCREFCOTUzMzE4RTFB
MkY1MDdFODI0ODEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUwN0U4MjQ4MS5jZXIw
gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMTIzODgxNTIyOTA3MDU0MTE3LzAvMzIzNDMwMzIz
YTM1NjU2MzMwM2EzMTMzMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzMz
NzMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB
Af8EEjAQMA4EAgACMAgDBgAkAl7AEzANBgkqhkiG9w0BAQsFAAOCAQEAYq89ln2g
2Rtfa2h1bpwlXwJid+MLrnC5z+EPme/0UDFCOaVLc+DZX/KfWJvjbk4MmZF3CXYV
HAj/5OTMRqsGKS5N9lMm2w8SnQ8mgcHb8PhWf9sdqhkPh8wGDWfjMAkZidaPPDjo
SgEJy1gdT5axA3Z/ycMAOpJ25f4lryi2mNxg4A6IJ2ss7AyhkD4WqXaBS1JgfJBj
5ZdqMnW9F1ATXXslIWLgLbh9jD8YtiB+V3vYuCTGSyuE6ipxsZ3VeXqO+PzZdqsJ
3js6EHSGOYG3NewUzLWDmPSWea3gHlwjw5/HjMWrR2Huoz0Z31ZVMKPKfrXgmECM
Cc+h2S9KKlzkxg==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:12 2026 by rpki-client