
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313430303a3a2f34302d3430203d3e2034383038.roa
File: 323430323a356563303a313430303a3a2f34302d3430203d3e2034383038.roa (raw, json)
Hash identifier: s69X4yXvkFWoY4hGmuFySm9fjR0+PjpuNCAbMpPlIIw=
Subject key identifier: E8:E6:79:B2:5F:9E:10:F4:03:33:13:C7:C9:4A:D4:E5:F2:EE:65:30
Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial: 2B7E2E5415781FDF471B34162E5B8A6DF2438698
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313430303a3a2f34302d3430203d3e2034383038.roa
Signing time: Mon 29 Jun 2026 07:58:05 +0000
ROA not before: Mon 29 Jun 2026 07:53:05 +0000
ROA not after: Mon 28 Jun 2027 07:58:05 +0000
asID: 4808
IP address blocks: 2402:5ec0:1400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 12:11:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:7e:2e:54:15:78:1f:df:47:1b:34:16:2e:5b:8a:6d:f2:43:86:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Validity
Not Before: Jun 29 07:53:05 2026 GMT
Not After : Jun 28 07:58:05 2027 GMT
Subject: CN=E8E679B25F9E10F4033313C7C94AD4E5F2EE6530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ae:ba:4a:86:06:17:91:a1:7c:ae:71:aa:b6:
59:87:4b:0e:28:5f:42:6b:3b:0f:4b:2d:d2:2e:86:
0c:be:f9:43:42:4d:a9:74:ed:f5:84:89:a5:ac:88:
ed:98:a2:bc:84:41:2e:4f:46:a6:01:ca:eb:91:02:
b6:c2:17:ec:1d:0b:54:2a:bf:86:95:4b:c9:ff:2c:
30:6b:d7:0f:66:fb:41:01:e1:93:45:52:a5:29:05:
07:aa:41:e3:f9:2f:8a:ca:be:43:1d:41:c6:7c:8d:
56:fc:f5:77:19:22:3e:16:05:70:5d:b4:80:04:35:
3c:57:f8:6f:7e:57:50:97:da:ff:ab:53:cc:60:d6:
f6:fa:d4:de:41:b7:ca:18:2f:6b:ef:c4:bb:10:b0:
43:db:2c:49:66:2e:c4:1a:a7:1e:c6:c9:8d:2d:a1:
ce:38:a5:5a:2a:42:a7:fc:b1:b0:d9:85:03:f7:06:
13:01:6c:9f:26:6f:06:02:24:5d:97:53:a0:2a:f7:
27:a7:9e:ff:22:85:8a:c9:ca:2a:fd:98:67:bb:ee:
9a:9d:d4:32:06:6d:69:cd:7d:80:95:d7:00:d2:0b:
74:42:6e:30:f6:08:7d:b0:eb:13:84:be:e5:06:29:
36:9e:81:0d:62:12:0d:76:2e:f3:05:75:e5:2f:78:
e1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E6:79:B2:5F:9E:10:F4:03:33:13:C7:C9:4A:D4:E5:F2:EE:65:30
X509v3 Authority Key Identifier:
keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313430303a3a2f34302d3430203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5ec0:1400::/40
Signature Algorithm: sha256WithRSAEncryption
89:18:a7:fa:af:dc:0e:e2:0a:7d:c1:d1:a1:c3:63:21:6b:97:
62:b5:8e:e7:f4:1a:8e:b4:99:c0:fc:bb:34:60:37:a7:d9:28:
bb:bf:34:14:de:04:7c:9d:c5:b6:6e:d6:4c:e6:2b:5d:96:a4:
98:61:fd:cb:a4:09:3f:7d:1b:a4:79:d5:79:bd:fe:d6:22:9f:
eb:3b:68:f1:44:a7:c4:ce:8a:83:78:2f:1e:3f:b3:54:c2:bd:
b8:ec:33:fc:e9:86:d3:80:b9:15:96:2b:da:fb:31:70:aa:22:
ef:da:e7:49:21:3c:40:28:da:cb:7a:3e:af:ed:37:7a:81:26:
bf:c4:d7:7b:68:53:ab:51:7f:5a:5f:3b:4e:ce:bc:51:03:01:
56:67:5e:58:9d:77:63:55:7c:6a:e0:c3:1f:ba:d3:e9:7e:7f:
43:4e:6b:21:bf:02:8d:8f:8b:4a:a7:86:db:00:be:b2:f1:36:
6e:11:ac:44:c5:4f:92:24:cb:ac:cd:1f:f3:ef:c3:c3:a5:64:
c9:c3:3f:08:19:ce:27:44:3c:d9:31:e1:75:43:c4:2c:7c:53:
af:21:b4:31:e2:a3:9c:62:ea:73:e4:a4:b0:7f:d0:4f:b6:62:
61:6b:dd:34:bd:bc:24:a6:40:dd:0b:24:c7:44:06:96:63:87:
1e:38:e7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:29 2026 by rpki-client