Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a3a2f33322d3332203d3e20313331353433.roa
File:                     323430323a356563303a3a2f33322d3332203d3e20313331353433.roa (raw, json)
Hash identifier:          g/J8HHnzwA3IhqtFRuLcA68ZRwpE7wjR26DVdmv8Ubg=
Subject key identifier:   47:83:F0:12:C7:B5:7C:D1:74:C4:E5:FA:18:30:9B:53:53:45:CC:FE
Certificate issuer:       /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial:       122FAB86C8B92B6598BCDE9BC89F608AE10380F6
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a3a2f33322d3332203d3e20313331353433.roa
Signing time:             Mon 29 Jun 2026 07:53:28 +0000
ROA not before:           Mon 29 Jun 2026 07:48:28 +0000
ROA not after:            Mon 28 Jun 2027 07:53:28 +0000
asID:                     131543
IP address blocks:        2402:5ec0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 12:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:2f:ab:86:c8:b9:2b:65:98:bc:de:9b:c8:9f:60:8a:e1:03:80:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
        Validity
            Not Before: Jun 29 07:48:28 2026 GMT
            Not After : Jun 28 07:53:28 2027 GMT
        Subject: CN=4783F012C7B57CD174C4E5FA18309B535345CCFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:77:07:ad:52:91:2f:c1:38:ad:5f:f3:e6:b4:
                    b0:5f:22:c5:60:f4:a5:7e:ff:a0:eb:c7:02:d6:69:
                    ba:db:22:d5:f0:e5:a3:ca:f3:38:06:89:00:9e:7c:
                    c0:6e:d2:c5:38:87:a9:4e:df:35:f5:ea:6a:53:be:
                    c6:0b:1e:ad:4f:d8:14:8f:c3:83:aa:2d:f9:f8:86:
                    8c:ac:6b:39:b5:df:6f:a0:b5:cf:e0:0c:4e:21:85:
                    98:9e:be:24:44:c9:ca:08:c2:ce:52:39:a8:04:5f:
                    c2:0f:0a:dd:0f:21:f2:63:e7:6b:52:e0:32:05:59:
                    b1:d6:22:87:15:ce:f3:82:23:4f:ff:c7:b9:e6:c3:
                    da:c7:6b:42:db:82:60:ec:05:2d:bb:96:e4:99:64:
                    ef:42:8d:af:19:8b:e5:88:9f:69:08:6d:89:96:75:
                    30:d7:ec:c9:d2:05:19:a7:85:7e:39:a1:38:0a:7e:
                    fd:5a:1e:3a:f8:d9:b6:71:18:db:b0:cb:91:ec:8a:
                    71:c7:8c:b9:88:48:0a:8d:a6:df:b7:43:c0:df:4c:
                    2e:01:c9:ce:13:56:31:27:f9:8d:d0:6c:3b:6e:3e:
                    dc:9b:20:82:c8:51:75:20:51:49:f7:38:09:a8:e6:
                    29:b8:00:54:76:0a:58:a9:d3:6a:57:b9:ff:8c:0c:
                    ed:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:83:F0:12:C7:B5:7C:D1:74:C4:E5:FA:18:30:9B:53:53:45:CC:FE
            X509v3 Authority Key Identifier:
                keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a3a2f33322d3332203d3e20313331353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:72:4a:af:bb:75:d1:1c:1e:9f:2c:2b:f9:a0:11:62:e4:df:
         53:72:6d:fb:75:4a:e8:10:f4:63:4f:af:6f:36:09:55:1e:c4:
         2f:9b:d9:ad:4b:c6:9f:0b:ca:1c:c1:8f:05:9c:e8:0f:6b:70:
         85:15:31:51:75:22:4f:1f:f9:38:f6:4f:d5:e7:57:42:48:4b:
         3d:da:4e:d7:54:f5:df:7e:4d:20:4c:37:6d:1e:45:be:c3:ef:
         3f:75:44:73:c2:82:4c:de:54:df:db:66:ad:01:ec:80:ac:e6:
         01:41:ee:3c:ef:4a:02:5c:1a:9f:1b:d4:cf:26:1c:a5:8e:7d:
         64:68:0e:7f:25:26:9d:40:09:56:cb:75:45:57:e5:e1:3a:bc:
         3d:b5:2a:cd:dc:48:3a:7d:4c:92:47:c8:75:26:31:9d:8f:a1:
         1d:73:f7:7c:61:88:19:5f:90:d6:e2:1b:ef:92:c9:1c:d2:2d:
         0e:60:9e:2a:98:e6:3c:17:c5:ca:27:0a:76:3c:13:a2:f8:3a:
         1f:43:cc:d7:00:12:9a:b0:c2:8e:11:15:8f:ab:76:28:5d:d8:
         2f:10:50:8f:3b:d7:dc:55:f3:39:44:fd:0a:a7:9c:fc:6d:aa:
         62:85:43:73:19:38:2a:65:d3:78:7b:aa:0d:a7:79:5d:f3:fe:
         c7:64:62:b5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 14 21:57:52 2026 by rpki-client