Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a3a2f33322d3332203d3e203435313135.roa
File:                     323430323a356563303a3a2f33322d3332203d3e203435313135.roa (raw, json)
Hash identifier:          CJdvyZT6Vy20PNijTLov+zdR9aTXpQCf13a+Q88db4w=
Subject key identifier:   B8:25:F5:2D:27:9C:1C:B6:7A:27:D9:69:65:30:11:F4:E5:9D:97:4E
Certificate issuer:       /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial:       277C2D56ED33B3003CF706EF56E3DEB3A416DDB1
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a3a2f33322d3332203d3e203435313135.roa
Signing time:             Mon 29 Jun 2026 07:53:28 +0000
ROA not before:           Mon 29 Jun 2026 07:48:28 +0000
ROA not after:            Mon 28 Jun 2027 07:53:28 +0000
asID:                     45115
IP address blocks:        2402:5ec0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 12:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:7c:2d:56:ed:33:b3:00:3c:f7:06:ef:56:e3:de:b3:a4:16:dd:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
        Validity
            Not Before: Jun 29 07:48:28 2026 GMT
            Not After : Jun 28 07:53:28 2027 GMT
        Subject: CN=B825F52D279C1CB67A27D969653011F4E59D974E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4b:e4:46:7c:05:a0:55:08:b6:2e:20:5d:30:
                    77:83:ba:06:dd:57:61:5a:1e:d4:b9:6f:72:6e:4b:
                    75:9d:39:1e:e0:52:cb:c8:54:61:de:ea:72:44:5b:
                    87:e1:37:62:e3:f1:a7:49:1f:4e:36:34:b5:16:fd:
                    3b:4a:e1:ba:9c:7b:a4:19:8c:bf:c9:a3:13:f2:62:
                    f9:e6:fe:73:27:f5:4a:1e:1b:8e:e0:bd:75:80:90:
                    f2:02:67:be:b7:0d:e2:73:62:2a:3b:b7:d3:96:00:
                    e4:9c:28:f9:1e:bb:37:7b:d8:dc:bd:a6:0f:42:6d:
                    a8:c8:54:73:fe:77:95:53:c5:1e:b0:40:4d:3a:7a:
                    76:de:e1:e3:e6:68:ed:29:d3:dc:42:ac:2d:47:78:
                    20:4d:78:0e:da:9f:dc:16:ab:68:fa:9d:3e:d9:9a:
                    fe:e0:e2:ea:7b:44:53:c2:f0:6c:ea:6b:b5:af:15:
                    67:4c:12:16:bd:d4:fb:7b:c4:cb:d7:8b:c5:37:9b:
                    81:91:8a:bc:c6:59:85:21:a9:b1:26:1b:3e:a0:eb:
                    7c:8c:f0:81:e3:47:15:f0:f4:cf:5b:2a:c3:66:6b:
                    dd:12:31:aa:c3:7a:4d:59:25:4d:87:b2:83:25:bd:
                    32:c5:1c:e7:1f:66:c8:ff:7d:7a:d7:2b:f9:b1:4d:
                    28:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:25:F5:2D:27:9C:1C:B6:7A:27:D9:69:65:30:11:F4:E5:9D:97:4E
            X509v3 Authority Key Identifier:
                keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a3a2f33322d3332203d3e203435313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:7b:e3:1e:3e:8a:56:ba:68:0b:8a:c4:fe:2d:54:f0:0f:17:
         f6:71:7b:85:5d:d6:d2:35:e4:83:19:40:d6:63:ec:75:9c:39:
         05:70:8e:de:1a:9b:0a:51:e7:90:24:77:49:cf:28:e3:43:38:
         31:af:82:91:5a:ad:4f:5e:18:0a:e8:14:02:7d:77:fb:cb:39:
         e2:26:1a:26:29:39:65:bf:27:aa:de:14:a7:7d:33:f7:f5:50:
         88:e7:8e:d2:2e:68:11:49:86:6d:95:a9:ef:60:31:11:01:cb:
         2c:fc:1a:9a:92:d6:0b:b7:c1:be:ab:d6:55:77:73:fa:8d:98:
         65:ec:b9:f4:92:af:ec:2b:f2:40:4e:d7:21:0c:03:71:e0:a6:
         2c:39:5f:ba:cd:7f:6e:42:d5:e7:b5:4d:44:ff:72:61:0b:d5:
         bc:88:35:f5:9c:0b:3a:b8:62:68:2c:49:f9:dc:a4:f5:80:34:
         ec:1f:73:1e:f8:d3:cb:30:50:01:e8:97:23:1b:2e:fc:0f:e4:
         dc:4f:74:2c:41:a4:f0:3d:de:52:02:05:1c:59:1a:d1:07:b8:
         3d:5d:cf:87:ec:21:d0:b4:8b:4f:0e:9b:8b:04:20:a0:eb:22:
         48:1c:70:56:29:3a:0b:1f:03:d1:54:62:e9:df:ab:e1:04:82:
         32:b0:55:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:13 2026 by rpki-client