
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313630303a3a2f34302d3430203d3e203233373234.roa
File: 323430323a356563303a313630303a3a2f34302d3430203d3e203233373234.roa (raw, json)
Hash identifier: n3atOR7BgnuX4vC+UUnoAdAtW1EKmcwhovZlE1dSE+o=
Subject key identifier: 9A:EC:18:A2:B0:62:89:67:51:27:D1:32:85:55:CC:EF:F7:CA:FB:B2
Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial: 6D79C0E915C65848B8DB943C8EBCB11BA9B9B39B
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313630303a3a2f34302d3430203d3e203233373234.roa
Signing time: Mon 29 Jun 2026 08:01:11 +0000
ROA not before: Mon 29 Jun 2026 07:56:11 +0000
ROA not after: Mon 28 Jun 2027 08:01:11 +0000
asID: 23724
IP address blocks: 2402:5ec0:1600::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 12:11:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:79:c0:e9:15:c6:58:48:b8:db:94:3c:8e:bc:b1:1b:a9:b9:b3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Validity
Not Before: Jun 29 07:56:11 2026 GMT
Not After : Jun 28 08:01:11 2027 GMT
Subject: CN=9AEC18A2B06289675127D1328555CCEFF7CAFBB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:86:02:80:50:73:fa:96:4d:c4:8d:9f:2e:9e:
8d:8a:a4:77:98:45:5a:10:20:62:4d:fb:40:85:91:
03:88:e2:5e:22:b0:1e:1b:47:39:cb:8f:bf:9c:09:
ef:cb:6b:24:2a:ea:00:ad:02:e5:18:43:e6:30:ea:
0b:2b:cb:7d:c4:68:d7:43:b9:d2:12:43:f7:4b:71:
f1:2a:27:b2:02:14:24:de:76:07:03:48:39:f2:19:
15:36:77:54:c0:07:58:31:41:be:5d:3c:5c:f8:74:
2d:c0:72:4b:de:a7:bd:1e:b5:10:8f:0b:49:13:c3:
22:e2:8e:22:b9:a8:55:30:6f:09:1a:bc:b6:02:f8:
f9:b9:4a:40:7e:b3:ac:60:34:42:af:3b:4f:39:67:
33:d6:eb:bf:11:81:99:86:f1:20:61:bb:95:ca:2d:
5b:b0:2f:33:4e:19:92:ff:15:41:e4:4c:89:22:8c:
22:63:7c:d4:5d:19:b4:fc:4b:7b:de:d7:d0:60:45:
87:ed:e9:04:9d:e6:a3:0c:fa:a4:a8:0a:c2:d2:47:
17:0c:6c:10:f8:ee:1c:80:4e:e4:4d:7b:81:68:8d:
19:a8:f3:65:af:52:b8:14:34:bb:93:37:10:a7:b7:
70:9a:21:d3:21:89:ca:56:7f:69:d4:c6:1c:59:42:
90:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EC:18:A2:B0:62:89:67:51:27:D1:32:85:55:CC:EF:F7:CA:FB:B2
X509v3 Authority Key Identifier:
keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313630303a3a2f34302d3430203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5ec0:1600::/40
Signature Algorithm: sha256WithRSAEncryption
3f:9a:85:a7:38:9a:7b:f9:18:9b:af:32:da:6d:f2:a7:e0:57:
dc:05:8a:40:e5:29:6c:0d:6a:1c:93:e9:8b:e5:30:98:8d:d1:
1d:c4:75:81:9b:5e:26:b7:61:82:b6:71:aa:e7:cf:ca:ff:a3:
52:4d:ec:42:9e:be:dd:b2:7f:c8:f5:8f:4b:a9:a7:60:ed:92:
40:2a:d1:04:88:34:1d:c4:d3:36:83:b5:75:d7:13:19:15:25:
6c:a6:b6:bc:6a:6a:b3:01:6c:95:d5:bb:bd:97:9e:7b:4b:63:
18:b8:ad:67:86:38:51:22:3f:47:9b:31:41:ac:50:b7:12:ab:
74:94:81:66:ae:cb:03:7c:9d:3d:1f:d5:62:9b:ee:db:4e:ac:
73:cf:46:64:97:4e:03:f3:dc:a1:7d:6a:f0:95:01:b0:b0:ec:
d8:18:9d:d5:37:0e:fa:09:bb:a7:5b:89:4f:35:a4:56:66:50:
12:ed:d4:8c:7f:64:3c:97:17:dd:fb:8f:d2:f1:a4:cf:ec:67:
5a:67:2e:13:1f:b4:ff:ad:27:fa:bc:fe:59:9f:ae:ab:2a:39:
ef:53:fd:4a:72:1f:29:c7:b6:93:73:03:dc:96:10:f6:f4:5d:
7f:46:1e:cf:3b:1c:f4:9e:95:f1:90:e1:8f:50:7b:15:fd:88:
17:cb:25:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUbXnA6RXGWEi425Q8jryxG6m5s5swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUw
N0U4MjQ4MTAeFw0yNjA2MjkwNzU2MTFaFw0yNzA2MjgwODAxMTFaMDMxMTAvBgNV
BAMTKDlBRUMxOEEyQjA2Mjg5Njc1MTI3RDEzMjg1NTVDQ0VGRjdDQUZCQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLhgKAUHP6lk3EjZ8uno2KpHeY
RVoQIGJN+0CFkQOI4l4isB4bRznLj7+cCe/LayQq6gCtAuUYQ+Yw6gsry33EaNdD
udISQ/dLcfEqJ7ICFCTedgcDSDnyGRU2d1TAB1gxQb5dPFz4dC3Ackvep70etRCP
C0kTwyLijiK5qFUwbwkavLYC+Pm5SkB+s6xgNEKvO085ZzPW678RgZmG8SBhu5XK
LVuwLzNOGZL/FUHkTIkijCJjfNRdGbT8S3ve19BgRYft6QSd5qMM+qSoCsLSRxcM
bBD47hyATuRNe4FojRmo82WvUrgUNLuTNxCnt3CaIdMhicpWf2nUxhxZQpC9AgMB
AAGjggIgMIICHDAdBgNVHQ4EFgQUmuwYorBiiWdRJ9EyhVXM7/fK+7IwHwYDVR0j
BBgwFoAUdl8Re+d+zDG9q5UzGOGi9QfoJIEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy
Mzg4MTUyMjkwNzA1NDExNy8wLzc2NUYxMTdCRTc3RUNDMzFCREFCOTUzMzE4RTFB
MkY1MDdFODI0ODEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUwN0U4MjQ4MS5jZXIw
gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMTIzODgxNTIyOTA3MDU0MTE3LzAvMzIzNDMwMzIz
YTM1NjU2MzMwM2EzMTM2MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzMz
NzMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB
Af8EEjAQMA4EAgACMAgDBgAkAl7AFjANBgkqhkiG9w0BAQsFAAOCAQEAP5qFpzia
e/kYm68y2m3yp+BX3AWKQOUpbA1qHJPpi+UwmI3RHcR1gZteJrdhgrZxqufPyv+j
Uk3sQp6+3bJ/yPWPS6mnYO2SQCrRBIg0HcTTNoO1ddcTGRUlbKa2vGpqswFsldW7
vZeee0tjGLitZ4Y4USI/R5sxQaxQtxKrdJSBZq7LA3ydPR/VYpvu206sc89GZJdO
A/PcoX1q8JUBsLDs2Bid1TcO+gm7p1uJTzWkVmZQEu3UjH9kPJcX3fuP0vGkz+xn
WmcuEx+0/60n+rz+WZ+uqyo571P9SnIfKce2k3MD3JYQ9vRdf0Yezzsc9J6V8ZDh
j1B7Ff2IF8slCg==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:14 2026 by rpki-client