Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316630303a3a2f34302d3430203d3e203435313135.roa
File:                     323430323a356563303a316630303a3a2f34302d3430203d3e203435313135.roa (raw, json)
Hash identifier:          helgw4Qgcs5C1FWVs/9J/85Y+14aXOv0++cumrULVXI=
Subject key identifier:   FE:E2:26:56:D6:2A:B8:00:B8:F9:B5:B7:2A:D9:22:A9:1C:BD:24:BD
Certificate issuer:       /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial:       8763C6A634D78A198B16CF4A8FCBF3CF850848
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316630303a3a2f34302d3430203d3e203435313135.roa
Signing time:             Mon 29 Jun 2026 08:05:53 +0000
ROA not before:           Mon 29 Jun 2026 08:00:53 +0000
ROA not after:            Mon 28 Jun 2027 08:05:53 +0000
asID:                     45115
IP address blocks:        2402:5ec0:1f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 12:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            87:63:c6:a6:34:d7:8a:19:8b:16:cf:4a:8f:cb:f3:cf:85:08:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
        Validity
            Not Before: Jun 29 08:00:53 2026 GMT
            Not After : Jun 28 08:05:53 2027 GMT
        Subject: CN=FEE22656D62AB800B8F9B5B72AD922A91CBD24BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:61:d5:61:a7:63:69:bb:eb:eb:70:e6:d7:32:
                    0c:a7:91:60:06:2b:58:b1:be:c0:1d:aa:b2:c5:d5:
                    a9:28:86:7d:a5:9c:ce:61:1b:f4:aa:69:d7:e9:4f:
                    1c:20:e3:97:ae:80:ff:62:38:b6:fd:86:1a:a4:bf:
                    e5:50:b8:25:3f:ab:71:36:19:37:f9:f3:f1:0f:2d:
                    92:31:aa:46:a0:e5:89:f9:ad:bb:3b:83:63:7d:5a:
                    7d:34:7a:2c:3d:54:8d:bd:99:34:8c:2f:bb:ad:1a:
                    a4:9c:86:81:9a:ea:ad:40:6d:e2:7a:15:d1:83:bc:
                    8f:4c:39:f3:f9:bc:3e:f7:4c:0c:8a:f6:0b:ba:f3:
                    17:10:d7:da:ed:e7:e3:b9:7a:a2:9a:d8:cc:32:e1:
                    1c:42:f6:53:a3:de:13:20:9b:e4:54:5f:55:57:4d:
                    be:86:94:eb:9e:04:42:47:ad:eb:f8:59:43:d8:7d:
                    22:1d:72:ce:41:fc:19:12:3e:c2:19:d8:26:4e:7a:
                    d1:f0:9c:09:a9:b0:79:cb:4e:f5:4e:22:53:8e:2d:
                    0a:0e:67:5a:82:3a:2f:4c:be:c2:2a:9b:f2:58:4b:
                    c3:a0:46:74:78:cd:42:ec:05:ab:2a:f9:5c:55:e1:
                    d6:b1:19:fa:21:97:a9:9f:db:cf:71:9c:72:7c:68:
                    c4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E2:26:56:D6:2A:B8:00:B8:F9:B5:B7:2A:D9:22:A9:1C:BD:24:BD
            X509v3 Authority Key Identifier:
                keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316630303a3a2f34302d3430203d3e203435313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5ec0:1f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8e:a0:1a:86:66:6e:4a:09:a6:4f:11:90:1e:3f:65:3d:02:c5:
         43:46:2d:5a:e4:32:3c:91:fb:6b:81:2b:10:a2:07:60:07:04:
         38:3a:5b:55:3d:9c:f0:36:11:ec:86:9b:f5:59:0b:55:9a:d2:
         1e:74:b7:40:1f:da:42:1a:65:0c:21:e9:84:5c:cb:5f:f8:92:
         1c:87:fc:e2:d5:a9:12:e8:82:99:44:7e:62:a9:d5:17:1c:ad:
         e7:e3:5b:1d:7a:3d:b1:54:3f:68:a3:10:6e:93:c0:50:18:c8:
         0f:5f:d0:6b:36:0b:61:c6:7f:89:05:9d:c5:72:ca:e9:c1:cf:
         79:5c:c8:f9:c0:0a:24:ee:0d:f6:2e:0d:3b:4a:13:eb:15:27:
         52:72:b0:4e:46:32:f9:30:5c:20:db:90:50:78:3b:7b:14:d7:
         69:0d:32:47:0f:2c:a6:37:f8:22:92:99:af:fd:44:2b:c2:c4:
         69:e5:4f:40:93:80:84:60:4a:65:01:15:4c:20:0c:9b:27:f9:
         5c:f3:25:fd:f6:60:55:d2:26:97:fa:8e:24:d4:ac:bb:17:95:
         2b:10:65:9b:7b:7d:e9:c9:52:b6:cb:7f:a9:20:15:21:d0:0e:
         b9:fa:e2:b5:bc:34:2c:f4:d9:f1:ef:9c:6f:43:50:e0:21:9f:
         44:f3:fd:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:19 2026 by rpki-client