
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313530303a3a2f34302d3430203d3e2034383038.roa
File: 323430323a356563303a313530303a3a2f34302d3430203d3e2034383038.roa (raw, json)
Hash identifier: OVHnzZQha4Hvf8Ft0Kvtt32ww1jEk0mCRYmtctAlGb4=
Subject key identifier: 7F:22:26:9D:68:3E:D8:B7:E7:4E:0F:B8:95:48:8D:FA:00:3E:D6:3E
Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial: 5B41ADC0213C1B271B7F97E9180B07F7096CD312
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313530303a3a2f34302d3430203d3e2034383038.roa
Signing time: Mon 29 Jun 2026 07:58:03 +0000
ROA not before: Mon 29 Jun 2026 07:53:03 +0000
ROA not after: Mon 28 Jun 2027 07:58:03 +0000
asID: 4808
IP address blocks: 2402:5ec0:1500::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 12:11:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:41:ad:c0:21:3c:1b:27:1b:7f:97:e9:18:0b:07:f7:09:6c:d3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Validity
Not Before: Jun 29 07:53:03 2026 GMT
Not After : Jun 28 07:58:03 2027 GMT
Subject: CN=7F22269D683ED8B7E74E0FB895488DFA003ED63E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1b:b6:9a:f5:70:f5:90:bc:97:16:44:ec:9c:
ca:46:31:e7:4d:aa:d5:85:8e:87:54:33:07:a9:f9:
ca:64:c7:24:92:62:92:f9:58:61:ea:a7:a8:50:82:
ed:06:1d:a3:65:cf:02:eb:bf:ce:7e:ae:47:f6:86:
88:cb:84:76:e3:27:48:f0:93:ca:15:2d:bb:69:8f:
51:4f:5d:ed:04:d6:da:86:5a:ff:6f:ac:c4:c1:b9:
d0:c1:80:2d:f5:c1:8a:8b:f2:14:00:86:93:72:cf:
7c:fe:c5:9f:b0:39:3b:26:b8:65:10:31:b1:6f:d5:
0c:fe:db:d0:68:15:ba:66:9f:36:0a:2c:1c:81:ea:
ae:94:61:c2:42:af:a9:f8:1a:9c:8a:4d:d4:e0:04:
c8:00:0e:0c:e9:33:2f:33:a8:79:ef:c5:75:35:aa:
22:68:75:02:34:27:e2:67:49:63:21:01:cf:00:cb:
33:71:0e:e4:28:00:4d:ba:ab:ad:1a:95:47:41:4a:
b7:8b:9c:07:60:c1:5d:53:78:54:57:1e:17:be:fb:
71:34:4c:7e:6f:bb:07:29:9d:33:15:fe:9c:4a:21:
45:64:06:01:e3:b7:cd:34:22:4a:78:5c:7c:1f:35:
e0:ba:2b:86:13:1a:5a:ea:fd:4a:57:9b:d9:db:35:
12:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:22:26:9D:68:3E:D8:B7:E7:4E:0F:B8:95:48:8D:FA:00:3E:D6:3E
X509v3 Authority Key Identifier:
keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313530303a3a2f34302d3430203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5ec0:1500::/40
Signature Algorithm: sha256WithRSAEncryption
86:d3:ab:c3:0b:8c:25:16:17:d5:c5:7a:a4:e7:40:0e:b5:66:
ea:5c:ed:4b:dd:db:4c:9c:6e:e7:cc:a4:aa:16:e5:9f:72:a2:
54:d7:3a:da:94:d1:38:77:3e:02:3e:01:bf:5d:ec:f0:47:47:
ee:9f:4b:24:f8:bc:65:c1:58:e4:1e:4f:db:28:17:a0:84:a8:
c0:bb:89:3e:00:f9:e8:03:97:e0:ba:49:b7:49:27:bf:83:6f:
45:98:25:2d:4a:75:cc:03:fc:8c:47:5b:66:43:e3:7e:92:e2:
39:2a:63:f1:ac:13:48:40:64:c9:f0:8f:7c:f9:0a:b3:5a:e5:
a0:1e:7c:0d:dd:53:0f:fe:2f:19:89:01:ec:9d:c9:d9:4a:b7:
99:a5:de:56:07:7a:41:8f:7d:68:16:68:26:50:b9:38:45:eb:
16:f5:7f:6c:96:bc:ad:56:c4:ff:4a:c8:fd:0a:ae:00:81:d7:
1e:c9:ae:20:e3:cf:74:ce:06:e9:21:15:72:85:22:1c:25:82:
0a:c5:58:a2:a8:d3:36:13:db:56:06:db:e5:8c:ae:9c:9e:e6:
01:da:7a:3c:62:91:5b:51:b9:88:c2:b1:a7:36:de:d4:ed:8d:
60:2e:21:8f:5c:9d:88:15:6a:0b:80:7e:80:aa:b0:08:d7:8a:
c9:81:63:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:05 2026 by rpki-client