Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313430303a3a2f34302d3430203d3e203435313135.roa
File:                     323430323a356563303a313430303a3a2f34302d3430203d3e203435313135.roa (raw, json)
Hash identifier:          gvWr9SPf/pMPEcy7xoCzRdPm71pmwlv0c4vD0/gVebg=
Subject key identifier:   DC:47:52:C6:75:7B:FF:10:2D:82:8F:A3:08:95:D3:9B:C7:3D:B8:2E
Certificate issuer:       /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial:       54B5FC60F1F1AEF0D56CB48783AF6737513AEC8B
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313430303a3a2f34302d3430203d3e203435313135.roa
Signing time:             Mon 29 Jun 2026 07:58:04 +0000
ROA not before:           Mon 29 Jun 2026 07:53:04 +0000
ROA not after:            Mon 28 Jun 2027 07:58:04 +0000
asID:                     45115
IP address blocks:        2402:5ec0:1400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 12:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:b5:fc:60:f1:f1:ae:f0:d5:6c:b4:87:83:af:67:37:51:3a:ec:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
        Validity
            Not Before: Jun 29 07:53:04 2026 GMT
            Not After : Jun 28 07:58:04 2027 GMT
        Subject: CN=DC4752C6757BFF102D828FA30895D39BC73DB82E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7a:80:b4:4a:cd:a2:28:c3:94:b0:e7:4e:5e:
                    77:e6:c5:f4:df:bf:a8:52:94:0c:f2:d9:45:74:5a:
                    3b:3e:50:3f:50:12:ec:4d:9e:4a:2d:e3:0f:da:d7:
                    a3:8d:a7:52:59:07:1f:04:9d:bd:75:80:01:64:28:
                    52:25:13:cc:99:fa:28:bf:a8:0f:42:36:fc:68:63:
                    76:1d:28:a1:c9:ab:1f:c8:a7:99:78:2d:ab:13:d7:
                    4b:9a:15:c1:ee:b9:c5:10:c3:61:f6:71:1f:4b:6c:
                    5a:d4:fd:f3:ad:9c:60:25:0b:ff:4f:55:e7:4e:3e:
                    62:2c:40:3e:fb:f8:84:48:57:92:78:88:be:dd:69:
                    8c:04:4f:42:4b:94:34:8b:0c:03:7b:29:6d:c0:76:
                    cb:18:dc:4e:49:18:d6:2e:64:84:1a:75:84:a1:6f:
                    79:3c:5a:5e:85:e4:9c:d0:19:fc:21:89:a2:3f:d8:
                    f7:33:43:8f:12:94:41:d6:a8:a9:03:b7:87:63:22:
                    a8:39:ab:af:e8:4b:68:60:04:fe:e1:63:82:60:f5:
                    e8:3f:b5:97:2f:01:cb:e8:33:b7:e8:54:6c:33:9b:
                    95:04:5a:66:1d:fc:39:32:cc:f6:e7:0e:bc:12:0e:
                    42:28:16:ae:89:25:d0:7e:9b:5b:77:9c:28:5a:ec:
                    45:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:47:52:C6:75:7B:FF:10:2D:82:8F:A3:08:95:D3:9B:C7:3D:B8:2E
            X509v3 Authority Key Identifier:
                keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313430303a3a2f34302d3430203d3e203435313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5ec0:1400::/40

    Signature Algorithm: sha256WithRSAEncryption
         96:8a:80:0f:ba:d0:be:34:3d:4e:38:8b:c1:5c:9e:79:56:63:
         34:7e:c4:cc:e0:3a:f5:3d:39:71:e7:97:de:8b:fc:b0:62:d0:
         6d:73:51:5d:ad:73:cf:c7:b4:68:f6:3b:6d:2d:62:04:9a:4e:
         f6:b5:5d:bf:bd:c3:bd:e5:fc:43:ae:2e:60:55:1f:8b:da:26:
         3e:12:ec:f9:22:63:3b:35:8c:40:3f:9d:56:97:18:5d:08:24:
         02:36:65:6c:30:3a:16:c3:70:ad:9b:eb:a0:0e:2e:d7:0b:53:
         8d:7e:41:90:ed:bc:8d:31:7d:77:84:39:01:4e:07:85:17:25:
         6c:fb:7d:9a:e8:51:01:7c:48:60:04:d4:78:37:9c:fa:43:8b:
         41:c4:d3:a0:47:8b:5c:95:51:16:8b:2c:9a:90:dc:ab:8a:d4:
         ba:c9:6c:e7:b0:ca:01:88:6b:80:4a:2e:b2:f0:ae:ec:07:b8:
         ea:15:57:2d:55:c2:0b:f0:e1:ed:fe:b6:b0:85:b7:8f:04:4d:
         d3:2c:b8:7d:8f:3c:73:fa:27:d0:44:cd:ab:0e:c1:74:05:f4:
         05:3b:84:4e:28:42:1e:bf:90:6f:ed:e1:5b:a3:d5:b9:1a:1b:
         86:e4:39:b2:c1:bc:1c:70:ac:1b:93:88:18:d7:40:00:0d:b3:
         2f:6d:b7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:14 2026 by rpki-client