Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313930303a3a2f34302d3430203d3e203233373234.roa
File:                     323430323a356563303a313930303a3a2f34302d3430203d3e203233373234.roa (raw, json)
Hash identifier:          CRWmAJ5k6zk24i+3Aif/P50hkY1FdBjSX7c/Xj1SjKk=
Subject key identifier:   96:10:67:91:DB:E4:9B:83:26:24:8D:D0:10:4A:7E:3C:7B:8A:49:A8
Certificate issuer:       /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial:       79D14D24A3D1E859E42AFF153ECA811CCC971149
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313930303a3a2f34302d3430203d3e203233373234.roa
Signing time:             Mon 29 Jun 2026 08:01:10 +0000
ROA not before:           Mon 29 Jun 2026 07:56:10 +0000
ROA not after:            Mon 28 Jun 2027 08:01:10 +0000
asID:                     23724
IP address blocks:        2402:5ec0:1900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 12:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d1:4d:24:a3:d1:e8:59:e4:2a:ff:15:3e:ca:81:1c:cc:97:11:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
        Validity
            Not Before: Jun 29 07:56:10 2026 GMT
            Not After : Jun 28 08:01:10 2027 GMT
        Subject: CN=96106791DBE49B8326248DD0104A7E3C7B8A49A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0e:a1:12:46:a1:72:79:76:c7:7e:5a:5e:e5:
                    b4:04:27:15:05:13:de:4d:b9:10:8d:94:8b:c3:a7:
                    3f:0a:57:fb:36:3a:eb:dc:73:37:98:69:6e:cf:2e:
                    91:ee:de:a6:82:69:c2:8f:b9:d5:c6:68:f9:d5:d6:
                    55:ef:0c:ff:d5:f1:18:02:c4:1c:6f:50:57:f4:8c:
                    16:cd:ca:8b:da:60:b1:03:a4:b6:f5:b3:f7:d1:b5:
                    c5:f2:b5:3a:ac:68:97:9a:18:b3:3b:26:82:70:52:
                    95:83:c4:86:27:54:ed:08:63:ba:46:4c:e3:26:01:
                    e4:48:fc:53:63:3f:70:4b:1d:d8:dc:8f:51:a0:1a:
                    8b:0a:95:ba:8a:86:db:80:45:61:94:69:eb:3e:69:
                    7f:25:d3:a4:06:9b:5d:a4:db:eb:7e:62:1f:7e:db:
                    51:03:b5:e1:d6:f0:b2:26:e9:93:49:e0:b8:6e:46:
                    37:8c:af:4f:73:a8:3f:40:48:78:60:4c:cf:1b:9f:
                    5d:dc:af:f2:ea:ca:65:a5:f9:3e:0d:f2:e9:98:fe:
                    d6:d8:de:b4:de:5a:42:14:68:82:68:76:83:9b:79:
                    1f:0d:2d:56:a5:c5:da:39:7d:61:24:1e:7a:11:1c:
                    8d:22:6d:46:48:76:b5:03:aa:1e:b8:3c:2e:b1:91:
                    aa:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:10:67:91:DB:E4:9B:83:26:24:8D:D0:10:4A:7E:3C:7B:8A:49:A8
            X509v3 Authority Key Identifier:
                keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313930303a3a2f34302d3430203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5ec0:1900::/40

    Signature Algorithm: sha256WithRSAEncryption
         96:01:c5:c2:8d:b3:d7:fb:76:2e:b6:a7:f4:a5:9a:83:ca:f8:
         6e:9a:cb:25:09:9c:a5:67:cc:86:4b:0a:5f:d9:2b:b1:6e:02:
         a9:86:42:ea:01:d7:40:d9:11:9c:c8:d0:6e:e3:26:83:4d:24:
         a3:b7:4d:7b:ea:0e:70:ac:8f:0c:0f:4e:61:4c:42:5f:65:73:
         62:7a:2a:21:6f:66:18:6d:9a:75:9b:5f:d0:39:26:5f:32:71:
         a9:78:34:fa:e5:31:61:d1:0d:75:d7:8e:0a:f7:0c:18:62:f3:
         69:8b:6f:9c:40:1d:3d:e5:2f:0e:af:c9:9d:aa:73:e9:67:68:
         80:a0:c8:d7:58:08:8a:40:3a:6b:53:ef:bc:3a:c8:32:97:f1:
         04:7f:a9:e1:9b:b5:50:b5:dc:2c:4f:05:49:dc:1c:b1:35:9c:
         cc:49:2d:19:db:95:1b:10:75:07:25:17:4d:70:11:83:42:0a:
         8e:0a:d1:bc:05:82:db:12:2b:b1:94:07:c2:84:2c:9a:90:5c:
         4a:5b:88:ad:c2:71:70:e0:7b:88:c4:a5:a5:e3:01:b7:f6:ec:
         37:9b:cd:4d:c4:8a:4b:04:df:09:88:1d:c4:99:40:9c:84:6d:
         f6:77:1f:90:f8:34:9d:a2:71:b7:1e:30:cb:98:e5:5c:48:81:
         14:d2:40:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:57:33 2026 by rpki-client