
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313230303a3a2f34302d3430203d3e2034383038.roa
File: 323430323a356563303a313230303a3a2f34302d3430203d3e2034383038.roa (raw, json)
Hash identifier: 4VIqh0GEkAhe5nqncPWRAxMiabIVsyOr0tfP8DAOtwE=
Subject key identifier: BC:5C:CC:B5:6A:BE:0E:26:34:91:A0:78:3E:A0:DB:C6:27:D3:0E:B1
Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial: 3B59691F0D29A3BD4CC602576BC2AADB4DBF0FE4
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313230303a3a2f34302d3430203d3e2034383038.roa
Signing time: Mon 29 Jun 2026 07:58:04 +0000
ROA not before: Mon 29 Jun 2026 07:53:04 +0000
ROA not after: Mon 28 Jun 2027 07:58:04 +0000
asID: 4808
IP address blocks: 2402:5ec0:1200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 12:11:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:59:69:1f:0d:29:a3:bd:4c:c6:02:57:6b:c2:aa:db:4d:bf:0f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Validity
Not Before: Jun 29 07:53:04 2026 GMT
Not After : Jun 28 07:58:04 2027 GMT
Subject: CN=BC5CCCB56ABE0E263491A0783EA0DBC627D30EB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:86:69:7a:ca:50:78:d8:31:fb:e3:3e:26:7f:
58:10:b7:d9:1c:a1:20:3b:50:64:f7:9f:97:19:ad:
58:4f:88:bf:72:69:0c:5b:3b:a3:ce:43:c3:de:79:
46:1a:52:b3:58:cb:33:a0:9e:42:d6:45:b7:65:1c:
ae:ab:d5:df:73:c4:5d:a8:2e:bb:57:e4:60:61:9f:
5f:95:b7:a8:73:ac:54:35:8f:44:5a:49:68:d5:73:
af:e1:a8:2c:12:c0:69:71:ff:a9:04:32:9d:ba:2c:
b2:30:da:04:37:e8:fc:f1:33:67:5c:cb:80:d5:4b:
78:74:54:51:b8:c3:07:be:13:49:5e:a9:76:b5:64:
bb:cb:e6:ec:b0:4a:c4:75:ae:db:b8:98:f2:ed:7f:
c6:d3:1a:b4:73:eb:d9:70:a2:d0:9a:4d:36:c1:e6:
3a:47:9a:27:43:9c:e0:be:96:95:08:72:3b:14:86:
cd:b8:0e:84:a5:ec:b0:da:21:fd:ca:74:ef:c1:15:
7e:0f:94:bc:13:58:87:99:92:19:3f:5b:5e:35:aa:
af:51:43:ab:e9:5a:9e:ec:a8:a2:89:af:47:3f:66:
ff:9a:0a:d3:93:f7:d7:78:0c:e1:d1:8c:61:83:af:
b2:24:66:f5:5c:85:7f:7e:a0:fb:25:96:4c:1e:32:
a2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5C:CC:B5:6A:BE:0E:26:34:91:A0:78:3E:A0:DB:C6:27:D3:0E:B1
X509v3 Authority Key Identifier:
keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313230303a3a2f34302d3430203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5ec0:1200::/40
Signature Algorithm: sha256WithRSAEncryption
4a:da:51:b7:30:cf:08:b4:30:3e:f7:9e:80:c9:ad:2e:82:3f:
c2:cf:37:ba:08:35:05:95:f8:fd:16:f0:cf:75:a7:66:e4:af:
0f:d1:7b:08:7b:e4:b4:50:f0:7f:52:71:b4:5d:3f:0d:d2:6a:
5b:2d:1d:6c:22:95:36:be:cb:cc:a4:91:c2:9e:0c:2a:9e:12:
13:cc:51:12:11:d5:2c:0c:65:dc:71:eb:34:65:05:a4:dd:44:
f8:74:ef:98:48:73:8b:09:d1:4f:4f:52:e7:ae:96:22:d1:2c:
28:de:07:4e:10:89:89:d5:36:d7:85:d0:1a:36:39:5a:bd:77:
8d:51:71:4e:3b:36:8a:a3:48:e3:bb:75:73:fa:b5:1b:0e:7b:
5b:8a:35:7f:29:75:d5:aa:42:b4:bb:b2:74:3b:6b:3a:cf:d9:
f6:92:97:a2:1d:d1:1f:d9:63:ac:80:61:80:06:99:0f:46:0d:
b8:0d:52:a4:47:aa:94:eb:e2:d7:bc:c6:98:a5:1d:95:c9:15:
57:80:df:b0:51:d3:f2:3a:e9:82:5a:43:6f:ce:7a:00:07:80:
b5:0d:29:ad:e1:13:ee:82:1e:48:df:9f:e2:c7:47:2b:c3:40:
eb:d0:66:b2:d6:44:61:31:4b:0a:2a:0f:05:3f:48:33:5b:cd:
6f:6a:9f:ef
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgIUO1lpHw0po71MxgJXa8Kq202/D+QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUw
N0U4MjQ4MTAeFw0yNjA2MjkwNzUzMDRaFw0yNzA2MjgwNzU4MDRaMDMxMTAvBgNV
BAMTKEJDNUNDQ0I1NkFCRTBFMjYzNDkxQTA3ODNFQTBEQkM2MjdEMzBFQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNhml6ylB42DH74z4mf1gQt9kc
oSA7UGT3n5cZrVhPiL9yaQxbO6POQ8PeeUYaUrNYyzOgnkLWRbdlHK6r1d9zxF2o
LrtX5GBhn1+Vt6hzrFQ1j0RaSWjVc6/hqCwSwGlx/6kEMp26LLIw2gQ36PzxM2dc
y4DVS3h0VFG4wwe+E0leqXa1ZLvL5uywSsR1rtu4mPLtf8bTGrRz69lwotCaTTbB
5jpHmidDnOC+lpUIcjsUhs24DoSl7LDaIf3KdO/BFX4PlLwTWIeZkhk/W141qq9R
Q6vpWp7sqKKJr0c/Zv+aCtOT99d4DOHRjGGDr7IkZvVchX9+oPsllkweMqLzAgMB
AAGjggIeMIICGjAdBgNVHQ4EFgQUvFzMtWq+DiY0kaB4PqDbxifTDrEwHwYDVR0j
BBgwFoAUdl8Re+d+zDG9q5UzGOGi9QfoJIEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy
Mzg4MTUyMjkwNzA1NDExNy8wLzc2NUYxMTdCRTc3RUNDMzFCREFCOTUzMzE4RTFB
MkY1MDdFODI0ODEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUwN0U4MjQ4MS5jZXIw
gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMTIzODgxNTIyOTA3MDU0MTE3LzAvMzIzNDMwMzIz
YTM1NjU2MzMwM2EzMTMyMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDM0Mzgz
MDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/
BBIwEDAOBAIAAjAIAwYAJAJewBIwDQYJKoZIhvcNAQELBQADggEBAEraUbcwzwi0
MD73noDJrS6CP8LPN7oINQWV+P0W8M91p2bkrw/Rewh75LRQ8H9ScbRdPw3Salst
HWwilTa+y8ykkcKeDCqeEhPMURIR1SwMZdxx6zRlBaTdRPh075hIc4sJ0U9PUueu
liLRLCjeB04QiYnVNteF0Bo2OVq9d41RcU47NoqjSOO7dXP6tRsOe1uKNX8pddWq
QrS7snQ7azrP2faSl6Id0R/ZY6yAYYAGmQ9GDbgNUqRHqpTr4te8xpilHZXJFVeA
37BR0/I66YJaQ2/OegAHgLUNKa3hE+6CHkjfn+LHRyvDQOvQZrLWRGExSwoqDwU/
SDNbzW9qn+8=
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:24 2026 by rpki-client