Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313730303a3a2f34302d3430203d3e203535393632.roa
File:                     323430323a356563303a313730303a3a2f34302d3430203d3e203535393632.roa (raw, json)
Hash identifier:          yPzaUiuZ3+FZz5j5mXOyY0wmaXLcdtYU81pz/bn6OXU=
Subject key identifier:   68:AC:BB:76:77:E0:A2:13:69:70:81:81:14:84:88:47:26:79:2E:50
Certificate issuer:       /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial:       4F51B6DB539DE6DFBA20B5779BB66173500CB5FC
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313730303a3a2f34302d3430203d3e203535393632.roa
Signing time:             Mon 29 Jun 2026 08:01:11 +0000
ROA not before:           Mon 29 Jun 2026 07:56:11 +0000
ROA not after:            Mon 28 Jun 2027 08:01:11 +0000
asID:                     55962
IP address blocks:        2402:5ec0:1700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 12:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:51:b6:db:53:9d:e6:df:ba:20:b5:77:9b:b6:61:73:50:0c:b5:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
        Validity
            Not Before: Jun 29 07:56:11 2026 GMT
            Not After : Jun 28 08:01:11 2027 GMT
        Subject: CN=68ACBB7677E0A213697081811484884726792E50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c5:65:2d:d0:e7:0a:9d:99:9e:f3:14:8b:87:
                    92:e0:34:29:7d:e3:df:bc:bb:c1:24:3e:a6:de:f6:
                    84:d3:2e:47:51:89:d7:d7:14:72:7a:e4:e4:44:cb:
                    11:56:24:2a:8d:19:58:81:c4:70:e2:eb:ec:3e:ef:
                    a7:19:c2:49:c5:c8:26:1e:04:bb:e7:a7:48:a0:ad:
                    f5:8e:d4:d5:ed:07:79:c1:c2:63:c6:66:09:bb:98:
                    93:12:5d:67:14:14:c3:d2:d5:e8:14:ee:63:bd:6c:
                    79:7f:a8:93:c3:10:3c:50:61:4e:f1:f3:00:80:07:
                    39:c2:f3:14:57:77:dc:23:1c:71:c7:48:28:f6:82:
                    f5:6a:be:fd:3c:86:a4:15:d5:b7:b5:43:57:1b:a7:
                    80:86:27:46:3c:b7:ca:45:5a:79:ca:ac:63:0b:25:
                    28:b1:87:28:9c:d4:42:c1:90:f9:7a:86:2f:16:f1:
                    4c:f4:e0:83:2b:70:67:91:a1:9f:c1:70:52:58:41:
                    79:38:a4:ad:35:c5:57:52:6a:92:57:00:9b:6b:91:
                    11:26:d3:57:ea:6b:8c:8a:a3:30:13:1c:11:66:94:
                    6b:6a:e7:1a:40:7d:39:83:bf:c5:95:e9:82:ff:4c:
                    21:f3:09:2a:4f:b2:e2:98:88:48:af:dd:79:f0:02:
                    7e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:AC:BB:76:77:E0:A2:13:69:70:81:81:14:84:88:47:26:79:2E:50
            X509v3 Authority Key Identifier:
                keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313730303a3a2f34302d3430203d3e203535393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5ec0:1700::/40

    Signature Algorithm: sha256WithRSAEncryption
         35:ad:a9:e3:73:d9:12:91:2a:4f:7b:a1:5f:e3:0f:83:b1:8f:
         24:2c:43:bf:da:58:4d:8a:6f:00:7c:ba:e8:49:19:30:b1:a7:
         c6:6a:2a:2b:2f:4d:e8:39:a1:4e:8f:48:13:00:78:6e:b1:32:
         87:d7:c9:d9:bf:89:ed:9d:f8:6d:4b:cb:31:5b:23:72:53:38:
         b5:ad:72:9f:b4:e0:cb:be:f3:7b:03:fa:f8:ef:d4:6d:f7:50:
         8b:84:b4:93:5b:61:86:c6:57:b5:3d:80:05:02:94:d4:ac:89:
         07:a1:75:48:6d:60:1a:2a:f3:db:dc:95:a4:8d:87:ac:82:f0:
         55:41:30:b3:e3:49:b3:2e:e6:b9:a6:b2:1b:3a:97:31:07:2a:
         ad:99:06:78:90:0a:bf:3b:b7:eb:74:b5:d8:36:7e:50:6b:fb:
         9a:ce:c8:8c:21:b5:89:00:99:3b:18:f3:91:7d:2d:8b:44:dd:
         bd:fa:3a:a8:91:90:a7:6e:5b:3e:d8:84:99:a2:de:dc:95:c1:
         59:5f:3a:67:aa:44:17:a2:a3:d3:6e:21:78:c0:0f:b8:39:d5:
         47:67:9c:27:fc:4a:c2:c6:1d:5e:e9:f2:da:22:f1:91:fc:aa:
         1b:0b:c9:32:36:fb:78:7b:ed:bf:a7:5d:05:29:f5:ff:2c:5b:
         64:e6:e3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:18 2026 by rpki-client