Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316430303a3a2f34302d3430203d3e203535393632.roa
File:                     323430323a356563303a316430303a3a2f34302d3430203d3e203535393632.roa (raw, json)
Hash identifier:          Rt0ozq8vIRR4iKraNU/oIbAJzpiKFOcwBxBlZiA1HUE=
Subject key identifier:   EF:60:EA:05:BB:88:05:21:69:D8:A0:C3:FB:3B:C4:0D:58:D3:A9:66
Certificate issuer:       /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial:       40A29904F4E831312B56454BB83958B925F93ECE
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316430303a3a2f34302d3430203d3e203535393632.roa
Signing time:             Mon 29 Jun 2026 08:04:05 +0000
ROA not before:           Mon 29 Jun 2026 07:59:05 +0000
ROA not after:            Mon 28 Jun 2027 08:04:05 +0000
asID:                     55962
IP address blocks:        2402:5ec0:1d00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 12:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a2:99:04:f4:e8:31:31:2b:56:45:4b:b8:39:58:b9:25:f9:3e:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
        Validity
            Not Before: Jun 29 07:59:05 2026 GMT
            Not After : Jun 28 08:04:05 2027 GMT
        Subject: CN=EF60EA05BB88052169D8A0C3FB3BC40D58D3A966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1a:3f:02:06:cc:3d:85:03:0f:c9:b0:84:dc:
                    05:fc:06:40:ff:86:29:59:65:30:fa:85:0d:ed:2c:
                    2a:0c:0a:42:c9:8d:0b:d4:ae:c1:1e:cf:76:bd:82:
                    fa:bb:bb:f0:ed:90:e2:68:5f:b9:4d:b3:92:84:7a:
                    58:a7:cf:bf:1c:ff:3b:fe:9c:01:37:d2:74:f0:ed:
                    dd:11:fc:99:f4:75:7b:39:10:54:39:44:ee:1e:cd:
                    15:4b:7b:df:71:e6:fc:8a:f1:02:24:7d:24:95:e1:
                    80:96:62:55:86:d0:db:fd:0d:80:3a:e9:fa:f1:4c:
                    61:6d:fa:77:27:e9:19:00:c0:56:ee:bd:07:b5:96:
                    f8:e5:aa:a5:bc:bd:60:91:98:50:7b:f8:0e:b0:d2:
                    5a:ee:04:80:10:92:10:b5:ea:e5:ab:df:48:ed:f9:
                    44:41:28:37:e2:44:a5:7d:fd:26:b4:56:5e:1d:91:
                    fb:e0:34:dd:1c:58:15:cf:33:ee:05:42:28:10:0e:
                    5f:28:98:73:35:a2:64:c7:3c:64:34:08:53:e4:e7:
                    51:d7:64:5a:f1:5c:0e:70:01:a2:4b:4a:58:22:0f:
                    a4:c8:85:3c:ab:e7:95:f9:49:22:56:c8:04:ba:bd:
                    03:02:c5:ac:2a:93:62:04:0b:56:d4:64:27:74:6f:
                    c4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:60:EA:05:BB:88:05:21:69:D8:A0:C3:FB:3B:C4:0D:58:D3:A9:66
            X509v3 Authority Key Identifier:
                keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316430303a3a2f34302d3430203d3e203535393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5ec0:1d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         1c:5d:8e:2e:24:d5:28:49:ea:c2:ae:1a:d5:05:6f:46:aa:cf:
         79:0d:e4:7d:e0:a0:a0:b1:6c:d9:9e:95:60:1f:6b:a3:9a:21:
         a8:fe:2d:3f:82:50:2f:e5:de:92:e9:b4:7c:1b:25:e2:c9:2e:
         28:3b:20:48:55:f7:27:cd:fd:b8:df:b7:3c:60:02:1a:a8:d8:
         ed:1a:0e:29:f8:1e:ea:4a:b7:e9:a4:6f:68:04:bf:6f:b1:8f:
         7e:d4:91:b3:13:e9:54:ed:42:ed:db:64:ae:a0:74:09:36:63:
         01:53:f9:cf:55:11:f0:ac:cb:3a:ed:f0:97:d0:c9:14:73:03:
         c6:b5:0e:81:87:0d:d4:0e:83:80:63:fd:7b:2b:2b:e9:6b:b5:
         22:0e:4b:e8:d3:22:4c:67:75:71:73:fc:5d:d2:b6:b8:c3:c8:
         39:4c:e0:36:03:be:cc:5b:f8:52:a0:ab:6d:99:0d:de:b9:d2:
         ae:15:68:cb:8c:89:71:de:24:c6:7e:dd:74:12:65:6f:ec:4a:
         49:d6:b4:89:82:f4:8a:b0:ac:92:a9:ef:c4:93:bf:ac:be:b7:
         dc:00:85:20:82:7d:22:50:24:9f:10:4d:a1:8d:56:81:ae:0c:
         d0:04:5f:8c:58:6a:0c:88:6e:fb:e4:1b:c6:ef:b0:68:e7:98:
         fc:4f:4f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:27 2026 by rpki-client