Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313730303a3a2f34302d3430203d3e203435313135.roa
File:                     323430323a356563303a313730303a3a2f34302d3430203d3e203435313135.roa (raw, json)
Hash identifier:          JWpI3C78p3cirY3hYeKL8j4GVWcj8oD4wGpt8bGGBIQ=
Subject key identifier:   C2:35:A0:D7:0A:52:60:05:5B:4F:1D:4D:98:B8:05:22:2E:79:C4:45
Certificate issuer:       /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial:       4BB52D41085F31737216CA5B4C3ACEA8F3BCA033
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313730303a3a2f34302d3430203d3e203435313135.roa
Signing time:             Mon 29 Jun 2026 08:01:10 +0000
ROA not before:           Mon 29 Jun 2026 07:56:10 +0000
ROA not after:            Mon 28 Jun 2027 08:01:10 +0000
asID:                     45115
IP address blocks:        2402:5ec0:1700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 12:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b5:2d:41:08:5f:31:73:72:16:ca:5b:4c:3a:ce:a8:f3:bc:a0:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
        Validity
            Not Before: Jun 29 07:56:10 2026 GMT
            Not After : Jun 28 08:01:10 2027 GMT
        Subject: CN=C235A0D70A5260055B4F1D4D98B805222E79C445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c4:63:a2:a6:8a:d7:16:12:7b:aa:ea:66:72:
                    32:8c:62:78:95:56:83:e5:45:0e:b4:c5:4e:e3:f1:
                    e7:15:2d:a7:7b:40:b4:07:f5:d2:44:b0:68:86:3e:
                    21:6d:39:f0:40:34:c3:06:4f:33:00:19:62:2a:0c:
                    cc:79:77:f7:76:d9:e8:ef:53:89:e4:44:f0:05:f1:
                    76:4c:02:77:1b:71:bc:c0:09:3c:c3:7f:33:b0:31:
                    66:74:7c:d6:64:23:d5:6c:e4:d5:b4:e7:0d:4b:ee:
                    06:b6:36:14:a1:d7:92:1f:2b:c9:68:b6:31:ad:7c:
                    f3:38:1b:66:1e:2f:e9:a8:51:18:60:e9:5f:97:a2:
                    34:c6:0e:76:bc:5a:cd:4e:f0:f4:12:ba:99:7f:6b:
                    73:8e:6c:fa:5c:06:9f:d8:56:c0:91:41:d6:f2:71:
                    60:ad:30:52:10:fb:45:c3:4f:77:9d:60:ab:63:53:
                    7e:be:93:22:16:4d:c6:73:c2:5f:e8:3a:7b:d9:05:
                    71:18:70:86:d8:a9:2a:e3:91:cc:8a:21:41:e7:67:
                    b3:fa:69:d7:7b:ab:a6:8b:0d:30:a6:47:71:22:79:
                    0b:1f:2d:86:d9:2a:e4:34:c3:8c:34:86:ad:68:bb:
                    74:9c:ca:86:90:aa:c4:5f:8e:e9:7a:c8:a5:ae:f9:
                    5c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:35:A0:D7:0A:52:60:05:5B:4F:1D:4D:98:B8:05:22:2E:79:C4:45
            X509v3 Authority Key Identifier:
                keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313730303a3a2f34302d3430203d3e203435313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5ec0:1700::/40

    Signature Algorithm: sha256WithRSAEncryption
         0b:5c:54:64:f6:a9:5e:e1:35:61:27:5f:15:57:0d:d6:68:8c:
         d4:19:4e:2d:8d:eb:c4:c5:17:0f:b0:0d:23:7f:5d:92:f5:fe:
         aa:d7:21:c2:4e:68:c5:b1:a2:97:7a:77:93:1e:03:e3:8c:26:
         57:2f:37:67:4b:9c:59:24:b8:0c:17:85:8f:cf:b2:9d:6f:39:
         cd:5f:69:04:e4:2e:60:53:a4:59:d2:c2:a8:d6:77:7e:10:b7:
         89:1c:f1:14:9c:56:f6:2c:3b:3a:d3:72:91:ac:75:01:35:4e:
         bd:25:b7:f3:a8:59:c5:f7:b2:eb:9d:8d:b5:21:df:64:61:0c:
         05:c6:20:ad:c9:30:70:ed:2a:9c:a0:78:ff:0e:ef:51:0d:ee:
         bc:ae:61:0a:68:f0:ed:a4:58:ba:ac:e0:a6:b2:cf:9d:ba:57:
         2c:84:de:89:40:c4:5d:e3:f0:92:ab:f6:fe:f8:e4:04:c2:58:
         33:35:10:11:4f:b8:1f:f1:30:7e:78:a5:cf:87:c1:33:e6:e2:
         09:8f:7f:26:d5:18:af:a3:96:9a:04:66:79:2b:b1:6d:79:7e:
         c0:ff:76:5b:a1:5e:54:71:0a:d8:ec:4d:0f:a9:43:65:b3:5c:
         c5:8a:d1:72:a1:85:2b:d1:1f:ff:54:a6:fd:76:cb:1e:ff:a1:
         b9:d5:1e:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUS7UtQQhfMXNyFspbTDrOqPO8oDMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUw
N0U4MjQ4MTAeFw0yNjA2MjkwNzU2MTBaFw0yNzA2MjgwODAxMTBaMDMxMTAvBgNV
BAMTKEMyMzVBMEQ3MEE1MjYwMDU1QjRGMUQ0RDk4QjgwNTIyMkU3OUM0NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBxGOiporXFhJ7qupmcjKMYniV
VoPlRQ60xU7j8ecVLad7QLQH9dJEsGiGPiFtOfBANMMGTzMAGWIqDMx5d/d22ejv
U4nkRPAF8XZMAncbcbzACTzDfzOwMWZ0fNZkI9Vs5NW05w1L7ga2NhSh15IfK8lo
tjGtfPM4G2YeL+moURhg6V+XojTGDna8Ws1O8PQSupl/a3OObPpcBp/YVsCRQdby
cWCtMFIQ+0XDT3edYKtjU36+kyIWTcZzwl/oOnvZBXEYcIbYqSrjkcyKIUHnZ7P6
add7q6aLDTCmR3EieQsfLYbZKuQ0w4w0hq1ou3ScyoaQqsRfjul6yKWu+VztAgMB
AAGjggIgMIICHDAdBgNVHQ4EFgQUwjWg1wpSYAVbTx1NmLgFIi55xEUwHwYDVR0j
BBgwFoAUdl8Re+d+zDG9q5UzGOGi9QfoJIEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy
Mzg4MTUyMjkwNzA1NDExNy8wLzc2NUYxMTdCRTc3RUNDMzFCREFCOTUzMzE4RTFB
MkY1MDdFODI0ODEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUwN0U4MjQ4MS5jZXIw
gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMTIzODgxNTIyOTA3MDU0MTE3LzAvMzIzNDMwMzIz
YTM1NjU2MzMwM2EzMTM3MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDM0MzUz
MTMxMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB
Af8EEjAQMA4EAgACMAgDBgAkAl7AFzANBgkqhkiG9w0BAQsFAAOCAQEAC1xUZPap
XuE1YSdfFVcN1miM1BlOLY3rxMUXD7ANI39dkvX+qtchwk5oxbGil3p3kx4D44wm
Vy83Z0ucWSS4DBeFj8+ynW85zV9pBOQuYFOkWdLCqNZ3fhC3iRzxFJxW9iw7OtNy
kax1ATVOvSW386hZxfey652NtSHfZGEMBcYgrckwcO0qnKB4/w7vUQ3uvK5hCmjw
7aRYuqzgprLPnbpXLITeiUDEXePwkqv2/vjkBMJYMzUQEU+4H/Ewfnilz4fBM+bi
CY9/JtUYr6OWmgRmeSuxbXl+wP92W6FeVHEK2OxND6lDZbNcxYrRcqGFK9Ef/1Sm
/XbLHv+hudUeaQ==
-----END CERTIFICATE-----
Generated at Tue Jul 14 21:57:32 2026 by rpki-client