Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313430303a3a2f34302d3430203d3e203535393632.roa
File:                     323430323a356563303a313430303a3a2f34302d3430203d3e203535393632.roa (raw, json)
Hash identifier:          vGKu61txf+oFkZV0rJgFGixpQrdsRSUUFNERsISnv9E=
Subject key identifier:   31:47:8C:F2:27:57:96:F5:ED:A7:09:9C:E2:C0:E6:CF:1A:FD:1E:D6
Certificate issuer:       /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial:       03DB42AAA3D508D6ECD9B9FA2E64060E4F505B19
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313430303a3a2f34302d3430203d3e203535393632.roa
Signing time:             Mon 29 Jun 2026 07:58:04 +0000
ROA not before:           Mon 29 Jun 2026 07:53:04 +0000
ROA not after:            Mon 28 Jun 2027 07:58:04 +0000
asID:                     55962
IP address blocks:        2402:5ec0:1400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 12:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:db:42:aa:a3:d5:08:d6:ec:d9:b9:fa:2e:64:06:0e:4f:50:5b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
        Validity
            Not Before: Jun 29 07:53:04 2026 GMT
            Not After : Jun 28 07:58:04 2027 GMT
        Subject: CN=31478CF2275796F5EDA7099CE2C0E6CF1AFD1ED6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:60:dc:a8:43:b8:96:66:4f:39:fc:f0:eb:e1:
                    ed:76:15:d1:36:5a:71:b6:08:cf:08:92:4b:15:21:
                    95:17:8f:e9:ad:d9:d3:51:c2:5b:e0:6d:ad:53:b5:
                    97:a6:7d:41:d3:24:d6:bb:68:07:67:d7:d2:3c:3e:
                    bf:87:89:e6:2c:ce:e5:e3:62:cc:b1:f9:77:64:69:
                    8e:7e:3b:ec:6a:b1:ff:6a:79:e1:3b:4b:ac:84:be:
                    b3:e0:22:66:e8:9d:3c:9a:37:bf:58:86:93:d2:e5:
                    6d:0d:86:82:ba:02:9b:e1:24:b6:c5:8e:01:f9:6b:
                    c7:c6:b3:46:f2:af:54:b5:db:4b:21:59:0b:84:17:
                    e5:8d:5c:27:80:93:99:95:1d:85:9b:66:99:a7:8e:
                    9d:a2:01:07:d8:a9:9d:36:2c:bf:eb:cc:62:41:06:
                    9f:8d:38:15:74:8a:7f:7a:6a:47:21:71:98:77:5d:
                    1f:4a:40:83:e2:c9:a1:d0:d4:7e:5e:ee:4b:c1:3b:
                    aa:42:36:68:3b:72:5b:9d:e0:4d:04:bf:ed:e7:ca:
                    a3:fb:11:4a:6b:7d:15:6e:cf:29:2f:05:d7:55:7d:
                    71:5a:42:ef:e3:f8:4e:75:40:c3:4a:d3:be:a3:9e:
                    24:a9:27:52:ed:e8:75:9e:af:95:8e:a3:54:50:95:
                    d6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:47:8C:F2:27:57:96:F5:ED:A7:09:9C:E2:C0:E6:CF:1A:FD:1E:D6
            X509v3 Authority Key Identifier:
                keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313430303a3a2f34302d3430203d3e203535393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5ec0:1400::/40

    Signature Algorithm: sha256WithRSAEncryption
         32:19:cc:8c:86:01:95:d5:b2:1f:72:d9:21:05:52:60:ec:f0:
         e7:75:42:12:59:bc:31:4c:48:21:2c:3c:56:ce:2a:63:13:8a:
         19:fd:6b:7f:8d:2d:a0:d2:cf:25:89:f5:bd:03:39:a3:01:cd:
         59:2c:ca:15:dc:c6:3c:46:29:05:0e:2c:cb:e0:9c:14:67:b6:
         93:3a:1a:3a:82:99:0e:0f:45:e1:14:81:4d:8f:8a:63:a7:d0:
         4c:a5:fb:78:3c:8a:d8:fc:07:3d:6c:2c:95:ff:d8:ff:29:79:
         ae:2d:ec:0e:a0:b9:77:6c:ce:36:a1:92:7e:4c:15:91:14:58:
         e1:85:d8:4b:49:35:df:05:f7:fc:10:ed:98:85:09:a5:82:42:
         24:42:f9:d2:cf:96:89:b6:a3:3e:74:c0:cc:e2:2d:59:7f:f4:
         63:62:3c:a5:2a:61:2b:37:f9:44:72:1b:54:c2:8f:2c:47:23:
         5d:1e:0b:70:e9:ff:fe:f6:65:38:40:d2:90:59:55:c4:07:64:
         d5:06:b3:d3:83:17:99:c0:5c:9f:59:7b:6f:e4:d2:31:a9:65:
         18:45:a2:36:02:62:34:04:70:13:75:9e:5e:20:8b:2a:3a:9d:
         f2:7e:2e:73:44:06:9e:96:37:35:eb:03:d0:37:dd:61:d5:18:
         6a:9a:de:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUA9tCqqPVCNbs2bn6LmQGDk9QWxkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUw
N0U4MjQ4MTAeFw0yNjA2MjkwNzUzMDRaFw0yNzA2MjgwNzU4MDRaMDMxMTAvBgNV
BAMTKDMxNDc4Q0YyMjc1Nzk2RjVFREE3MDk5Q0UyQzBFNkNGMUFGRDFFRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqYNyoQ7iWZk85/PDr4e12FdE2
WnG2CM8IkksVIZUXj+mt2dNRwlvgba1TtZemfUHTJNa7aAdn19I8Pr+HieYszuXj
Ysyx+XdkaY5+O+xqsf9qeeE7S6yEvrPgImbonTyaN79YhpPS5W0NhoK6ApvhJLbF
jgH5a8fGs0byr1S120shWQuEF+WNXCeAk5mVHYWbZpmnjp2iAQfYqZ02LL/rzGJB
Bp+NOBV0in96akchcZh3XR9KQIPiyaHQ1H5e7kvBO6pCNmg7clud4E0Ev+3nyqP7
EUprfRVuzykvBddVfXFaQu/j+E51QMNK076jniSpJ1Lt6HWer5WOo1RQldYjAgMB
AAGjggIgMIICHDAdBgNVHQ4EFgQUMUeM8idXlvXtpwmc4sDmzxr9HtYwHwYDVR0j
BBgwFoAUdl8Re+d+zDG9q5UzGOGi9QfoJIEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy
Mzg4MTUyMjkwNzA1NDExNy8wLzc2NUYxMTdCRTc3RUNDMzFCREFCOTUzMzE4RTFB
MkY1MDdFODI0ODEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUwN0U4MjQ4MS5jZXIw
gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMTIzODgxNTIyOTA3MDU0MTE3LzAvMzIzNDMwMzIz
YTM1NjU2MzMwM2EzMTM0MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDM1MzUz
OTM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB
Af8EEjAQMA4EAgACMAgDBgAkAl7AFDANBgkqhkiG9w0BAQsFAAOCAQEAMhnMjIYB
ldWyH3LZIQVSYOzw53VCElm8MUxIISw8Vs4qYxOKGf1rf40toNLPJYn1vQM5owHN
WSzKFdzGPEYpBQ4sy+CcFGe2kzoaOoKZDg9F4RSBTY+KY6fQTKX7eDyK2PwHPWws
lf/Y/yl5ri3sDqC5d2zONqGSfkwVkRRY4YXYS0k13wX3/BDtmIUJpYJCJEL50s+W
ibajPnTAzOItWX/0Y2I8pSphKzf5RHIbVMKPLEcjXR4LcOn//vZlOEDSkFlVxAdk
1Qaz04MXmcBcn1l7b+TSMallGEWiNgJiNARwE3WeXiCLKjqd8n4uc0QGnpY3NesD
0DfdYdUYaprefQ==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:25 2026 by rpki-client