Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313430303a3a2f34302d3430203d3e203233373234.roa
File:                     323430323a356563303a313430303a3a2f34302d3430203d3e203233373234.roa (raw, json)
Hash identifier:          G7GP7qox1ZzpSQcL6937ehBGVTiiiYrcCxTGwT95c54=
Subject key identifier:   93:09:31:99:2B:67:3D:0B:B1:A4:9F:4F:9C:B5:72:D9:F8:AB:72:C7
Certificate issuer:       /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial:       486FEC3F1ADB1DEA2B03AEC07A64F06DB527415A
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313430303a3a2f34302d3430203d3e203233373234.roa
Signing time:             Mon 29 Jun 2026 07:58:05 +0000
ROA not before:           Mon 29 Jun 2026 07:53:05 +0000
ROA not after:            Mon 28 Jun 2027 07:58:05 +0000
asID:                     23724
IP address blocks:        2402:5ec0:1400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 12:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:6f:ec:3f:1a:db:1d:ea:2b:03:ae:c0:7a:64:f0:6d:b5:27:41:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
        Validity
            Not Before: Jun 29 07:53:05 2026 GMT
            Not After : Jun 28 07:58:05 2027 GMT
        Subject: CN=930931992B673D0BB1A49F4F9CB572D9F8AB72C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b7:43:3f:29:81:9a:de:e4:98:c3:58:32:f8:
                    ba:13:5d:1e:8e:c3:2e:00:04:b1:68:af:6f:71:a2:
                    10:4c:6c:df:24:1a:c1:61:2d:b2:94:af:c1:93:f6:
                    4d:b6:6d:bf:2c:48:b4:c9:1f:48:fc:0e:68:05:7b:
                    59:cd:36:bb:1b:e4:fe:78:05:34:5e:ef:32:29:35:
                    46:e8:bf:16:f1:91:17:2a:34:86:b2:ba:fb:d9:c1:
                    f1:75:87:f1:57:83:3f:15:21:44:2a:58:fd:66:59:
                    f2:df:3f:19:84:c6:fc:71:f9:cf:79:bf:5d:cc:34:
                    71:76:90:a5:68:8c:ad:68:62:c9:81:e5:5b:47:6d:
                    f2:67:b7:d4:00:6e:ec:d0:66:7d:d5:2c:73:66:c2:
                    8d:61:71:8a:83:aa:12:e6:be:3f:b9:06:2d:5b:80:
                    67:14:09:4e:2d:58:91:89:c4:3e:5c:c8:d2:ec:de:
                    c1:a5:10:34:64:6c:93:5a:82:3b:e7:2d:e1:75:90:
                    ba:ca:87:6b:f1:84:80:67:cf:9a:2d:73:2c:74:79:
                    65:8e:a3:51:22:43:d7:c8:dc:5b:ca:f7:4f:42:b7:
                    2a:af:af:37:8e:19:9f:b2:bd:3d:2d:21:68:22:e4:
                    5d:67:f4:9e:73:03:1a:f8:a6:31:b7:44:07:ac:e8:
                    74:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:09:31:99:2B:67:3D:0B:B1:A4:9F:4F:9C:B5:72:D9:F8:AB:72:C7
            X509v3 Authority Key Identifier:
                keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313430303a3a2f34302d3430203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5ec0:1400::/40

    Signature Algorithm: sha256WithRSAEncryption
         66:f6:f8:e4:38:8a:9b:c9:3f:34:f3:bf:55:ac:db:6d:4b:2c:
         5b:0b:e0:d6:22:52:fa:e2:fd:47:86:6d:37:54:fb:43:cf:fd:
         d6:c6:37:61:38:46:17:6b:47:92:02:35:3e:ae:d1:f0:31:3f:
         3f:ab:ba:29:7d:e9:a4:31:80:81:6f:ae:19:79:64:3a:b8:f8:
         15:0f:17:b3:87:8b:7c:9c:9e:17:c5:ee:e4:a2:11:0e:87:cb:
         79:e1:ab:f3:97:35:de:af:4c:b6:89:10:6b:be:68:39:2c:55:
         57:59:c3:c2:88:a7:b6:f3:6f:16:a6:62:cb:d8:10:6b:f9:18:
         55:a3:74:55:99:c4:41:86:b2:46:ca:39:8a:47:81:0a:37:10:
         ab:56:d2:2f:02:d2:f2:a4:e0:9e:e0:bf:82:12:d8:b4:0c:86:
         da:d0:fb:b5:1b:8a:96:bc:30:73:f8:a5:85:a6:f7:16:ea:df:
         c4:3f:7c:e0:12:b6:bb:4a:c1:62:95:83:ef:d9:f9:9f:03:40:
         d1:93:09:65:1a:42:87:fb:01:ed:88:91:04:91:b0:0e:15:c2:
         7b:66:7b:7c:42:28:cd:8c:84:da:05:08:08:c9:03:39:0f:f5:
         21:07:71:d4:7b:c1:02:3d:1c:bc:0f:f9:81:89:1a:c2:b7:9c:
         01:31:b8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:14 2026 by rpki-client