Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316330303a3a2f34302d3430203d3e2034383038.roa
File:                     323430323a356563303a316330303a3a2f34302d3430203d3e2034383038.roa (raw, json)
Hash identifier:          6tdczm3wyC/zid9F6yPTBzs505f6Kf9NsQjOkKcnPw8=
Subject key identifier:   95:0F:F5:CA:0E:AA:4D:4B:5E:8B:45:8A:01:B4:0F:07:D4:68:DA:D8
Certificate issuer:       /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial:       0E70A136513C3A3C8F2C8A0E78C2FD5CD27A702F
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316330303a3a2f34302d3430203d3e2034383038.roa
Signing time:             Mon 29 Jun 2026 08:04:05 +0000
ROA not before:           Mon 29 Jun 2026 07:59:05 +0000
ROA not after:            Mon 28 Jun 2027 08:04:05 +0000
asID:                     4808
IP address blocks:        2402:5ec0:1c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 12:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:70:a1:36:51:3c:3a:3c:8f:2c:8a:0e:78:c2:fd:5c:d2:7a:70:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
        Validity
            Not Before: Jun 29 07:59:05 2026 GMT
            Not After : Jun 28 08:04:05 2027 GMT
        Subject: CN=950FF5CA0EAA4D4B5E8B458A01B40F07D468DAD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0b:f7:b4:6f:58:5c:71:5e:ae:c0:70:44:ad:
                    4f:4f:cd:5a:84:5b:d4:00:5b:6f:ec:01:d2:9a:d6:
                    2f:95:14:0b:bd:2e:4d:f3:78:ba:c6:e0:fc:37:a9:
                    ba:9e:dc:3a:e6:14:e9:95:a6:cd:a3:9d:08:45:cd:
                    8d:fe:82:6b:5a:87:f4:8a:c0:10:f7:4c:fc:01:88:
                    50:e8:a1:34:74:61:8a:c6:4b:6e:b2:02:05:1e:52:
                    5f:43:5c:0a:59:c2:b7:54:9a:87:be:2c:2a:0a:b8:
                    f0:92:80:78:52:98:c0:3c:47:ad:74:13:3f:4a:6d:
                    82:8f:4e:6d:05:c6:0a:fe:d3:a3:ab:94:52:24:13:
                    e6:85:6f:b5:10:fe:22:59:46:a3:15:81:12:f8:76:
                    d1:06:7a:9f:cc:bd:76:39:c6:8e:ce:bb:08:33:fa:
                    d4:49:f3:98:90:a3:10:2e:50:29:91:08:18:3b:68:
                    2a:c5:c0:4e:cd:7a:15:13:70:7f:d4:57:c3:33:d8:
                    51:5a:d1:e8:37:4a:b7:e2:97:38:30:1c:ac:bf:cf:
                    2b:3d:3b:db:8b:c5:f0:4d:5d:28:db:ca:d8:43:ec:
                    e5:bc:e1:e3:6e:ee:b2:02:fb:05:6f:03:04:db:df:
                    08:3d:61:5f:a5:ad:38:5f:68:ac:aa:d4:b9:7d:7e:
                    cf:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0F:F5:CA:0E:AA:4D:4B:5E:8B:45:8A:01:B4:0F:07:D4:68:DA:D8
            X509v3 Authority Key Identifier:
                keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316330303a3a2f34302d3430203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5ec0:1c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         29:b8:48:fa:c8:46:02:65:74:94:ee:69:7c:94:b0:bc:f0:d7:
         1d:58:f1:6e:ab:9f:41:4e:70:e1:f7:6e:74:80:62:14:00:4a:
         d9:a0:4c:b4:58:6e:db:16:66:01:e9:51:e0:cd:6a:70:51:48:
         8b:ec:4e:a3:a4:a1:55:aa:49:d7:30:c3:73:b2:6f:7d:c5:f9:
         6a:d0:20:14:95:ac:4b:b4:65:d7:91:36:66:d2:00:f2:3c:3a:
         3c:93:90:47:0b:c6:62:8e:6f:2e:04:74:64:02:f3:2c:da:cc:
         0e:4a:8f:00:46:a9:bc:5a:06:81:a5:6e:80:bc:d9:41:89:de:
         db:e3:40:b6:d5:68:77:9c:8d:36:3d:21:ee:35:ef:91:70:6d:
         a3:8f:c3:47:4a:71:10:06:08:0f:8d:70:86:28:7f:25:18:6a:
         29:b4:62:9c:b0:c0:60:09:c4:da:b9:32:ff:f0:2a:d9:01:15:
         fc:0a:24:c3:9c:56:b5:4d:ae:eb:1e:89:19:b8:a9:85:74:c4:
         3d:59:90:41:f0:76:8f:0e:ff:f1:14:2c:9f:1d:a6:57:1d:8a:
         1a:e8:c1:80:db:89:6a:59:14:5f:b2:a0:36:c5:e0:e9:59:8f:
         2c:1a:01:d6:16:13:fc:09:5c:d1:74:c8:c7:ef:d9:8c:1c:18:
         ca:99:8c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:22 2026 by rpki-client