Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313630303a3a2f34302d3430203d3e203535393632.roa
File:                     323430323a356563303a313630303a3a2f34302d3430203d3e203535393632.roa (raw, json)
Hash identifier:          hcsj4tTvLO3xd56z0wgxOQprYjlryfpxOvMBikM4tug=
Subject key identifier:   6E:95:8C:4F:1E:A6:83:B2:93:63:6F:CA:71:15:15:EA:53:1A:C6:5E
Certificate issuer:       /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial:       28B7D7F1725701B694E01336A8B29D513532D08E
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313630303a3a2f34302d3430203d3e203535393632.roa
Signing time:             Mon 29 Jun 2026 08:01:11 +0000
ROA not before:           Mon 29 Jun 2026 07:56:11 +0000
ROA not after:            Mon 28 Jun 2027 08:01:11 +0000
asID:                     55962
IP address blocks:        2402:5ec0:1600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 12:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b7:d7:f1:72:57:01:b6:94:e0:13:36:a8:b2:9d:51:35:32:d0:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
        Validity
            Not Before: Jun 29 07:56:11 2026 GMT
            Not After : Jun 28 08:01:11 2027 GMT
        Subject: CN=6E958C4F1EA683B293636FCA711515EA531AC65E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0a:4a:46:f8:cd:27:47:7c:3d:7f:bb:8d:6c:
                    7a:60:5d:bb:85:66:a6:da:55:ad:5c:f4:66:60:46:
                    4e:5b:d1:5a:e0:f8:15:41:9e:c6:cf:df:b5:ef:73:
                    2b:c7:d1:21:1c:b8:9d:3e:f7:d8:34:1e:8c:93:e4:
                    de:3a:60:18:c0:d1:4b:15:45:76:3e:fd:8d:39:a8:
                    67:72:01:6e:c6:8d:17:ef:2e:95:0d:06:78:40:bd:
                    d7:d1:a1:01:1d:51:3b:d6:0f:9e:9e:a7:49:0d:71:
                    ac:e6:2f:6b:75:8a:d8:63:5f:4e:ce:65:43:7a:42:
                    e9:97:bb:e8:d1:18:7e:23:61:98:95:30:90:df:81:
                    63:6a:08:eb:c4:38:49:c5:81:a9:5c:7e:43:1c:fc:
                    79:64:7a:7a:e8:e6:1a:f4:e0:0c:81:8d:5e:a0:c8:
                    f1:52:78:e9:c1:0c:f3:1c:d4:eb:97:ce:6c:bc:8e:
                    9a:34:9a:46:46:49:b7:89:69:e1:b1:13:d1:a1:70:
                    c0:2e:b0:cc:e6:de:f6:b8:96:aa:82:58:fb:23:85:
                    7a:17:e7:ad:2b:24:5d:2e:f3:cf:3a:b9:39:1d:28:
                    14:9b:ce:59:cb:76:ff:10:f7:ac:6d:94:51:80:49:
                    aa:63:f9:23:e5:6d:bc:6f:d8:29:96:81:f9:24:59:
                    32:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:95:8C:4F:1E:A6:83:B2:93:63:6F:CA:71:15:15:EA:53:1A:C6:5E
            X509v3 Authority Key Identifier:
                keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313630303a3a2f34302d3430203d3e203535393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5ec0:1600::/40

    Signature Algorithm: sha256WithRSAEncryption
         10:71:36:84:0f:ea:e8:db:b2:55:a5:93:83:55:ef:fe:cf:da:
         e2:e8:64:0f:3b:f2:b9:47:4c:44:e9:2f:80:37:17:9d:c1:0f:
         2f:d6:e2:6b:30:7d:cd:dc:55:ab:c1:20:d8:7f:18:6c:a3:a3:
         0f:59:23:8d:aa:68:b6:8f:1b:c7:77:47:d5:eb:d9:b7:33:56:
         5b:9a:3f:66:77:16:bc:10:ea:ee:88:c0:6f:71:1b:f2:08:aa:
         30:08:f1:2b:ea:be:0b:29:24:35:e5:25:61:fc:6c:22:8d:50:
         32:0c:d6:bd:cc:43:06:37:90:9f:03:82:8e:fb:77:19:fb:64:
         60:32:aa:a7:23:e1:d3:df:09:94:ee:df:57:4a:97:11:1e:d7:
         f1:00:1d:59:d0:78:6d:03:66:3f:80:b6:4a:c3:b6:08:a4:ac:
         d0:fe:e2:ac:32:b2:5c:df:df:ea:9b:fd:0b:3f:7b:e4:87:a5:
         9e:96:e1:f7:ee:a4:c9:72:8c:38:2b:13:03:46:54:a9:ae:c8:
         58:6a:d7:0b:4b:30:05:ec:4e:69:e2:da:d8:77:68:a4:7c:d9:
         2b:71:fa:3f:48:70:ee:54:7d:38:98:ad:c4:6b:e5:a0:f4:5c:
         8e:50:64:35:d7:d0:7c:63:65:80:72:ff:e9:bb:6f:79:80:0e:
         66:a7:e0:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUKLfX8XJXAbaU4BM2qLKdUTUy0I4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUw
N0U4MjQ4MTAeFw0yNjA2MjkwNzU2MTFaFw0yNzA2MjgwODAxMTFaMDMxMTAvBgNV
BAMTKDZFOTU4QzRGMUVBNjgzQjI5MzYzNkZDQTcxMTUxNUVBNTMxQUM2NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtCkpG+M0nR3w9f7uNbHpgXbuF
ZqbaVa1c9GZgRk5b0Vrg+BVBnsbP37XvcyvH0SEcuJ0+99g0HoyT5N46YBjA0UsV
RXY+/Y05qGdyAW7GjRfvLpUNBnhAvdfRoQEdUTvWD56ep0kNcazmL2t1ithjX07O
ZUN6QumXu+jRGH4jYZiVMJDfgWNqCOvEOEnFgalcfkMc/Hlkenro5hr04AyBjV6g
yPFSeOnBDPMc1OuXzmy8jpo0mkZGSbeJaeGxE9GhcMAusMzm3va4lqqCWPsjhXoX
560rJF0u8886uTkdKBSbzlnLdv8Q96xtlFGASapj+SPlbbxv2CmWgfkkWTLRAgMB
AAGjggIgMIICHDAdBgNVHQ4EFgQUbpWMTx6mg7KTY2/KcRUV6lMaxl4wHwYDVR0j
BBgwFoAUdl8Re+d+zDG9q5UzGOGi9QfoJIEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy
Mzg4MTUyMjkwNzA1NDExNy8wLzc2NUYxMTdCRTc3RUNDMzFCREFCOTUzMzE4RTFB
MkY1MDdFODI0ODEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUwN0U4MjQ4MS5jZXIw
gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMTIzODgxNTIyOTA3MDU0MTE3LzAvMzIzNDMwMzIz
YTM1NjU2MzMwM2EzMTM2MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDM1MzUz
OTM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB
Af8EEjAQMA4EAgACMAgDBgAkAl7AFjANBgkqhkiG9w0BAQsFAAOCAQEAEHE2hA/q
6NuyVaWTg1Xv/s/a4uhkDzvyuUdMROkvgDcXncEPL9biazB9zdxVq8Eg2H8YbKOj
D1kjjapoto8bx3dH1evZtzNWW5o/ZncWvBDq7ojAb3Eb8giqMAjxK+q+CykkNeUl
YfxsIo1QMgzWvcxDBjeQnwOCjvt3GftkYDKqpyPh098JlO7fV0qXER7X8QAdWdB4
bQNmP4C2SsO2CKSs0P7irDKyXN/f6pv9Cz975Ielnpbh9+6kyXKMOCsTA0ZUqa7I
WGrXC0swBexOaeLa2HdopHzZK3H6P0hw7lR9OJitxGvloPRcjlBkNdfQfGNlgHL/
6btveYAOZqfglQ==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:26 2026 by rpki-client