
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313530303a3a2f34302d3430203d3e203233373234.roa
File: 323430323a356563303a313530303a3a2f34302d3430203d3e203233373234.roa (raw, json)
Hash identifier: huXjwZUIKfOAdBeBpNno2aR32dkpC8xznd4c9gOhC5A=
Subject key identifier: C6:13:E4:DF:FB:8A:1D:DF:85:90:77:F8:9A:66:28:F8:C9:8D:7B:7D
Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial: 4D42855DD84116D35D4FE1235634B1105D64F661
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313530303a3a2f34302d3430203d3e203233373234.roa
Signing time: Mon 29 Jun 2026 07:58:04 +0000
ROA not before: Mon 29 Jun 2026 07:53:04 +0000
ROA not after: Mon 28 Jun 2027 07:58:04 +0000
asID: 23724
IP address blocks: 2402:5ec0:1500::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 12:11:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:42:85:5d:d8:41:16:d3:5d:4f:e1:23:56:34:b1:10:5d:64:f6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Validity
Not Before: Jun 29 07:53:04 2026 GMT
Not After : Jun 28 07:58:04 2027 GMT
Subject: CN=C613E4DFFB8A1DDF859077F89A6628F8C98D7B7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5b:97:c8:bb:30:9e:01:6e:b9:b1:03:f6:92:
16:13:90:30:19:30:35:cc:8d:f5:0a:02:be:ad:80:
f6:8e:fe:ed:0d:23:b1:44:27:41:73:36:31:90:14:
e0:98:dd:b2:aa:dd:2d:a9:23:81:42:ab:19:bd:0f:
0d:bc:43:2f:dd:16:1c:a6:0c:43:d4:03:a9:71:39:
0b:c5:59:77:22:f4:d9:a7:1d:ea:0a:cd:ee:2f:7d:
c1:8e:a4:38:91:55:48:e0:e5:8a:3d:10:d4:65:65:
e8:98:ca:de:3b:65:31:6a:76:06:0c:2d:d3:01:05:
fe:58:40:03:13:99:d9:22:7b:d2:c8:1f:3e:99:28:
f7:8b:7e:01:3a:ed:82:c6:36:d6:a6:5c:8e:1a:47:
bb:0e:d3:e6:17:ef:f1:66:46:a7:03:f3:8e:2c:e8:
49:ce:22:99:3d:df:cb:8d:5d:56:f2:a3:e5:15:e3:
41:ed:84:e3:07:be:7f:87:3d:e0:ce:32:de:81:49:
5a:b8:4f:7d:ad:28:11:80:a7:c1:7f:91:37:27:cf:
79:90:9a:51:c2:4b:00:0c:ac:09:27:5b:8e:7b:54:
5d:e2:6e:6e:2d:ac:d9:a4:32:e1:43:52:02:ed:bf:
94:ec:4b:11:0a:27:94:be:e6:14:7c:4d:cd:80:c3:
ed:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:13:E4:DF:FB:8A:1D:DF:85:90:77:F8:9A:66:28:F8:C9:8D:7B:7D
X509v3 Authority Key Identifier:
keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313530303a3a2f34302d3430203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5ec0:1500::/40
Signature Algorithm: sha256WithRSAEncryption
3c:6b:8c:1d:c9:13:26:95:98:a4:39:8b:23:fd:0c:dc:57:56:
94:94:f5:09:87:26:f3:be:a5:a3:c3:a0:70:fd:ca:f9:0b:b5:
4d:1d:a3:3e:8e:7f:6a:7a:28:7b:a5:74:9b:e0:78:4b:ff:0b:
03:74:47:a5:48:8b:6e:c8:8f:17:91:bc:d8:37:cc:f7:31:36:
03:b0:00:1f:12:58:4f:c0:c0:dd:1d:2a:10:03:58:66:0e:40:
ce:b1:3b:77:c2:38:3a:7e:75:d4:8b:e4:6b:47:dc:94:e9:aa:
ae:ef:11:26:83:ba:ef:21:c7:84:11:25:77:4c:52:5f:87:cd:
55:3d:90:c0:a8:fd:32:40:1c:66:0b:0c:77:84:ab:d6:7a:10:
ae:c1:5f:f9:50:43:a4:37:5a:9e:f2:9b:66:c3:29:8b:67:01:
df:01:ad:84:b1:75:3b:28:12:03:0e:91:96:3d:02:37:a9:4e:
9a:f0:31:8b:85:ec:87:7e:1f:45:9b:42:a7:b5:26:89:61:7f:
05:6e:cb:2a:35:c1:26:b5:11:c8:4d:ee:54:d3:fa:d2:13:bf:
9a:81:ae:76:e6:ea:85:a0:86:3e:4a:36:8a:0a:11:24:02:d8:
06:63:68:e0:23:cf:3e:17:27:8c:47:dc:fb:79:89:a2:68:41:
17:80:06:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:56 2026 by rpki-client