Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316230303a3a2f34302d3430203d3e203535393632.roa
File:                     323430323a356563303a316230303a3a2f34302d3430203d3e203535393632.roa (raw, json)
Hash identifier:          +Vt+AzO9zejRvn4N5XV9J9LEk8Eq7YMWobrxONO1Q0o=
Subject key identifier:   5A:A9:A3:D8:D0:53:AC:83:7E:47:F2:80:96:49:18:CF:C2:F8:38:2F
Certificate issuer:       /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial:       41970359B16E72BACA37C7D67876D17485E7C689
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316230303a3a2f34302d3430203d3e203535393632.roa
Signing time:             Mon 29 Jun 2026 08:04:05 +0000
ROA not before:           Mon 29 Jun 2026 07:59:05 +0000
ROA not after:            Mon 28 Jun 2027 08:04:05 +0000
asID:                     55962
IP address blocks:        2402:5ec0:1b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 12:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:97:03:59:b1:6e:72:ba:ca:37:c7:d6:78:76:d1:74:85:e7:c6:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
        Validity
            Not Before: Jun 29 07:59:05 2026 GMT
            Not After : Jun 28 08:04:05 2027 GMT
        Subject: CN=5AA9A3D8D053AC837E47F280964918CFC2F8382F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:25:ba:ac:64:23:02:47:19:a0:d9:0f:ea:e3:
                    6a:7e:72:20:9b:6c:1f:c1:2e:90:38:58:f6:e3:53:
                    be:08:da:5b:7a:bd:86:06:08:69:db:74:3e:c5:3c:
                    73:b0:fd:0b:51:5d:99:7e:db:43:20:48:09:82:55:
                    55:7c:01:6a:1c:18:de:12:b6:cf:29:fb:77:dd:ce:
                    4f:aa:bc:7a:57:b3:fe:dd:fe:48:56:dd:9a:fb:a8:
                    54:3b:95:a1:7b:92:7e:d3:1a:52:c5:9e:13:73:8e:
                    a2:cb:b2:fe:8e:f1:98:e2:61:e8:56:2c:0c:f9:29:
                    8f:cf:8e:0f:62:f0:dd:30:54:56:8a:3b:53:80:39:
                    1e:75:de:e0:d6:fb:d6:b0:51:7e:be:14:0a:eb:58:
                    41:c3:50:87:49:db:f7:97:a6:5a:ba:47:ef:8c:7f:
                    76:e7:95:20:3d:cd:a2:6c:06:cd:ae:e2:b1:fb:cb:
                    5f:ee:df:0a:2f:63:84:50:ea:bf:c3:e4:78:7c:4e:
                    55:57:b2:9d:df:b2:b6:96:22:49:3a:08:64:db:1f:
                    1b:72:04:6a:53:b6:49:79:35:77:f6:7c:2a:75:c0:
                    c9:71:23:fa:64:27:df:5b:be:b4:96:01:f3:0d:92:
                    cc:e4:1c:fa:e9:c6:e9:62:d1:10:e2:a9:37:ce:d6:
                    3e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A9:A3:D8:D0:53:AC:83:7E:47:F2:80:96:49:18:CF:C2:F8:38:2F
            X509v3 Authority Key Identifier:
                keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316230303a3a2f34302d3430203d3e203535393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5ec0:1b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6c:4a:f9:1a:1f:63:a0:a2:3b:c4:0e:ea:cd:7f:f3:93:ca:f1:
         19:da:be:58:5c:cd:7b:95:b1:9e:f0:50:51:5c:57:c2:69:fd:
         07:65:bb:fb:34:04:25:bc:d5:4b:18:65:aa:21:08:bc:65:fb:
         d7:74:05:62:bb:8d:ea:4c:a1:9a:d4:dc:28:f1:2c:1c:bd:83:
         eb:28:a9:d6:44:9a:72:d9:33:ee:a9:40:6b:2c:f3:9a:16:78:
         72:55:1e:fc:cf:49:79:87:40:ac:87:4e:15:5b:e0:fe:2d:ca:
         6b:f7:e5:cf:e0:87:d6:87:b1:f5:c1:3d:66:d3:5b:1b:bf:20:
         12:07:06:c4:8b:2d:13:d1:1e:d7:ce:4c:5d:69:2b:51:bf:20:
         2f:a6:c8:a1:f7:1a:7b:37:f8:72:15:3a:86:3c:0b:88:79:de:
         d9:04:f6:78:41:a5:e6:74:9f:97:44:2f:9e:a7:bc:85:5c:eb:
         d4:fb:5f:b5:9d:33:cb:27:49:f0:3f:a3:cd:a1:bd:e2:02:cd:
         56:32:eb:4a:a5:a5:5c:ad:32:e6:d3:e3:26:e9:9c:92:d1:8e:
         f3:34:97:74:a9:55:c8:40:f6:7a:06:b4:02:17:53:67:c1:1b:
         cf:14:d0:01:82:53:23:f1:6b:5a:5f:ca:cb:48:76:d9:06:97:
         75:03:2d:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUQZcDWbFucrrKN8fWeHbRdIXnxokwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUw
N0U4MjQ4MTAeFw0yNjA2MjkwNzU5MDVaFw0yNzA2MjgwODA0MDVaMDMxMTAvBgNV
BAMTKDVBQTlBM0Q4RDA1M0FDODM3RTQ3RjI4MDk2NDkxOENGQzJGODM4MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdJbqsZCMCRxmg2Q/q42p+ciCb
bB/BLpA4WPbjU74I2lt6vYYGCGnbdD7FPHOw/QtRXZl+20MgSAmCVVV8AWocGN4S
ts8p+3fdzk+qvHpXs/7d/khW3Zr7qFQ7laF7kn7TGlLFnhNzjqLLsv6O8ZjiYehW
LAz5KY/Pjg9i8N0wVFaKO1OAOR513uDW+9awUX6+FArrWEHDUIdJ2/eXplq6R++M
f3bnlSA9zaJsBs2u4rH7y1/u3wovY4RQ6r/D5Hh8TlVXsp3fsraWIkk6CGTbHxty
BGpTtkl5NXf2fCp1wMlxI/pkJ99bvrSWAfMNkszkHPrpxuli0RDiqTfO1j6dAgMB
AAGjggIgMIICHDAdBgNVHQ4EFgQUWqmj2NBTrIN+R/KAlkkYz8L4OC8wHwYDVR0j
BBgwFoAUdl8Re+d+zDG9q5UzGOGi9QfoJIEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy
Mzg4MTUyMjkwNzA1NDExNy8wLzc2NUYxMTdCRTc3RUNDMzFCREFCOTUzMzE4RTFB
MkY1MDdFODI0ODEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUwN0U4MjQ4MS5jZXIw
gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMTIzODgxNTIyOTA3MDU0MTE3LzAvMzIzNDMwMzIz
YTM1NjU2MzMwM2EzMTYyMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDM1MzUz
OTM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB
Af8EEjAQMA4EAgACMAgDBgAkAl7AGzANBgkqhkiG9w0BAQsFAAOCAQEAbEr5Gh9j
oKI7xA7qzX/zk8rxGdq+WFzNe5WxnvBQUVxXwmn9B2W7+zQEJbzVSxhlqiEIvGX7
13QFYruN6kyhmtTcKPEsHL2D6yip1kSactkz7qlAayzzmhZ4clUe/M9JeYdArIdO
FVvg/i3Ka/flz+CH1oex9cE9ZtNbG78gEgcGxIstE9Ee185MXWkrUb8gL6bIofca
ezf4chU6hjwLiHne2QT2eEGl5nSfl0Qvnqe8hVzr1PtftZ0zyydJ8D+jzaG94gLN
VjLrSqWlXK0y5tPjJumcktGO8zSXdKlVyED2ega0AhdTZ8EbzxTQAYJTI/FrWl/K
y0h22QaXdQMtWA==
-----END CERTIFICATE-----
Generated at Tue Jul 14 21:58:30 2026 by rpki-client