Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313330303a3a2f34302d3430203d3e203535393632.roa
File:                     323430323a356563303a313330303a3a2f34302d3430203d3e203535393632.roa (raw, json)
Hash identifier:          EjSFkQWCqtquSIjp/OyZ9Sjc1N0o9YblcC/mw7PqidY=
Subject key identifier:   AA:0B:6F:30:30:19:1B:7A:CF:5A:38:77:99:E9:F5:84:12:00:86:06
Certificate issuer:       /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial:       12253977D34335A83DC4467616936FAD33BBFF03
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313330303a3a2f34302d3430203d3e203535393632.roa
Signing time:             Mon 29 Jun 2026 07:58:04 +0000
ROA not before:           Mon 29 Jun 2026 07:53:04 +0000
ROA not after:            Mon 28 Jun 2027 07:58:04 +0000
asID:                     55962
IP address blocks:        2402:5ec0:1300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 12:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:25:39:77:d3:43:35:a8:3d:c4:46:76:16:93:6f:ad:33:bb:ff:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
        Validity
            Not Before: Jun 29 07:53:04 2026 GMT
            Not After : Jun 28 07:58:04 2027 GMT
        Subject: CN=AA0B6F3030191B7ACF5A387799E9F58412008606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:07:4a:23:27:8e:e9:93:08:17:d7:10:74:42:
                    20:22:ad:62:ed:f6:47:4b:ed:a1:ac:b0:34:d5:7d:
                    e0:fe:8a:de:8c:94:34:10:80:01:41:38:d6:a1:7d:
                    08:ff:8e:11:a0:c5:5e:af:fa:c2:49:b5:3f:85:45:
                    c3:85:52:76:ee:db:54:98:e7:18:41:06:2d:13:6b:
                    ed:d9:2d:ab:f1:cf:df:04:f7:f0:bf:b5:7d:42:3b:
                    b0:99:bb:de:0d:9e:99:e1:cc:67:49:0d:a6:03:a3:
                    28:e1:38:58:91:2c:71:20:18:7d:e7:7b:a3:27:e7:
                    e1:ed:5a:ad:9a:cc:05:af:0a:83:a7:97:c7:c5:b6:
                    4a:92:a9:31:b8:ad:f8:90:21:86:35:d3:64:74:ce:
                    3b:35:d4:5a:a6:cd:95:51:f1:a8:e5:15:ab:55:da:
                    b7:79:bd:e1:87:75:db:bd:2d:5d:9b:44:2f:ab:d8:
                    8e:5f:b6:10:05:16:f7:da:c9:c8:06:87:ff:5b:6b:
                    24:02:5d:6e:95:1e:58:05:d1:9c:56:4b:1e:70:4b:
                    80:01:07:ea:8f:e9:ae:e0:a5:59:3c:d6:1c:7f:45:
                    86:56:ee:b1:50:91:0a:88:a6:ce:d0:fe:25:85:5d:
                    75:4f:6e:80:4f:42:08:16:d1:a2:7b:43:f6:0a:3f:
                    bf:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:0B:6F:30:30:19:1B:7A:CF:5A:38:77:99:E9:F5:84:12:00:86:06
            X509v3 Authority Key Identifier:
                keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313330303a3a2f34302d3430203d3e203535393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5ec0:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         39:26:f8:ac:fe:a7:13:02:ea:b6:3a:36:90:31:2d:44:70:44:
         17:52:38:8c:6b:f2:07:d2:07:26:48:c2:5b:7f:ea:2f:41:09:
         15:a2:f1:16:fd:81:2f:58:07:fb:d1:82:ea:da:72:58:52:34:
         9e:50:56:9e:f9:da:0b:9a:17:ca:19:35:21:49:53:cf:3f:ef:
         da:3b:9e:06:d4:ec:a5:3c:e2:c9:a3:d9:2a:92:37:c4:e8:a1:
         55:90:fd:83:78:d8:39:9b:68:c5:ea:c7:a4:be:42:bd:0a:aa:
         6b:7a:c4:8b:74:77:5a:66:e5:07:fc:b8:77:29:56:a6:11:9b:
         49:06:a9:39:11:22:12:40:f0:72:94:dd:00:5d:46:1f:d5:75:
         13:8d:69:d3:be:e0:7b:ee:e7:8f:8b:cd:bd:9c:fa:94:ce:45:
         66:ae:e3:81:10:f1:f7:d2:50:d7:1f:e4:ef:27:0c:51:5b:c3:
         ff:6d:73:76:3b:ee:e4:8b:cb:3f:e8:9e:2c:d1:e9:14:05:8e:
         3c:56:2d:5c:b5:63:97:77:1b:35:5a:7b:8d:01:ab:c0:cc:a4:
         29:65:b1:db:7d:00:a0:76:d6:9b:b1:bd:28:9b:b4:ec:8a:11:
         c3:d0:7f:1a:9e:2a:e8:96:62:b5:9c:1e:52:c7:8e:c7:07:2c:
         3d:31:99:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:23 2026 by rpki-client