
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313130303a3a2f34302d3430203d3e20313331353433.roa
File: 323430323a356563303a313130303a3a2f34302d3430203d3e20313331353433.roa (raw, json)
Hash identifier: m3jPhub96k/wtqlFrSg5WqCHKMuh2c2bxAOaPNcBmx4=
Subject key identifier: 04:D8:58:5A:B4:75:BF:27:3F:36:A4:68:86:1A:78:BE:A4:19:55:F0
Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial: 34C51FE3F5B9EFE3B1BD018CBFBA82E1E39F3D58
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313130303a3a2f34302d3430203d3e20313331353433.roa
Signing time: Mon 29 Jun 2026 07:53:28 +0000
ROA not before: Mon 29 Jun 2026 07:48:28 +0000
ROA not after: Mon 28 Jun 2027 07:53:28 +0000
asID: 131543
IP address blocks: 2402:5ec0:1100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 12:11:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:c5:1f:e3:f5:b9:ef:e3:b1:bd:01:8c:bf:ba:82:e1:e3:9f:3d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Validity
Not Before: Jun 29 07:48:28 2026 GMT
Not After : Jun 28 07:53:28 2027 GMT
Subject: CN=04D8585AB475BF273F36A468861A78BEA41955F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:02:5d:ea:1e:90:02:ef:c3:65:4d:bd:58:df:
af:40:dd:f7:b9:7c:30:86:d1:e1:fe:a2:12:3f:fb:
16:e7:28:46:c1:2c:cc:19:16:c2:27:59:fb:f7:56:
bb:76:94:dd:0e:3e:a9:98:aa:6a:89:80:6b:a2:c8:
78:49:35:37:b2:bd:96:89:83:b5:93:26:f8:6b:a5:
bf:30:01:ed:5a:9d:01:e4:15:33:c5:fe:99:ff:e7:
10:7f:55:96:19:ac:0b:95:88:bf:91:03:ca:15:e1:
92:cb:ac:01:c9:e7:99:17:a5:dd:fb:97:eb:83:82:
8a:94:7a:36:88:af:ec:22:1f:ec:55:7b:34:9d:e9:
ac:37:f8:77:46:41:ae:5f:1a:11:3f:34:bf:78:92:
0e:f8:ef:98:93:e7:14:e6:d6:24:ea:f0:fd:3b:44:
2e:b1:6e:8c:4e:4c:93:16:a8:bb:2c:c2:84:08:8f:
df:a5:df:6e:52:b9:aa:f7:c5:d5:eb:18:75:d6:1d:
27:19:25:2e:69:78:4b:c0:ad:55:67:fc:ca:08:77:
22:cd:61:ad:48:40:c4:97:e7:c2:5e:30:77:41:71:
d1:70:27:0f:52:48:74:0a:4c:3b:8d:da:a7:db:e8:
6f:f1:40:38:36:37:d1:cb:40:0d:1f:dc:bf:bc:f1:
43:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D8:58:5A:B4:75:BF:27:3F:36:A4:68:86:1A:78:BE:A4:19:55:F0
X509v3 Authority Key Identifier:
keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313130303a3a2f34302d3430203d3e20313331353433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5ec0:1100::/40
Signature Algorithm: sha256WithRSAEncryption
50:e3:ef:c9:ad:0a:ed:a7:92:f8:ed:2e:5f:85:42:e6:01:b9:
ad:a8:56:63:74:18:fd:0b:7d:c3:36:bc:ca:28:fe:9d:df:3b:
72:df:0d:48:6f:b1:b0:52:45:e8:2f:65:80:b0:c4:ab:f4:51:
c6:39:b1:2a:6b:63:35:30:77:9b:80:3f:70:f0:0d:3c:93:54:
22:ce:96:62:dd:80:9e:26:54:2b:cd:12:77:18:38:32:7a:57:
26:6b:a6:ef:c8:6a:28:78:c4:97:c8:c6:9b:50:e0:b1:92:3b:
be:5b:33:44:97:44:47:41:77:96:64:33:97:93:53:bb:b3:e7:
00:fa:68:2c:7b:3e:07:8b:b3:6f:d0:31:14:ea:4e:76:4e:aa:
96:0a:f7:ee:cc:c8:d8:1d:d8:25:85:e1:79:a1:d4:7d:ae:0b:
94:ee:89:56:51:9d:ab:7c:86:09:03:4e:df:62:ef:5a:26:47:
6c:83:e0:7a:39:a6:0b:4b:0d:e9:a1:be:11:cd:a2:2c:b8:f9:
ad:69:d9:c4:17:f6:06:3a:70:dc:24:f7:1c:8a:5f:bd:4f:30:
78:90:fd:fa:13:fb:11:ab:03:48:31:7f:35:02:c4:c3:63:ba:
57:bd:29:f7:dc:53:7f:fa:b4:f7:32:4a:0e:80:b7:5b:37:e7:
08:47:87:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:38 2026 by rpki-client