
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313730303a3a2f34302d3430203d3e203233373234.roa
File: 323430323a356563303a313730303a3a2f34302d3430203d3e203233373234.roa (raw, json)
Hash identifier: e2G30S+Q6ZQmfIXxaM/po6a6ek4/WJZGPi75EKcPZNE=
Subject key identifier: ED:4A:96:46:3D:32:CA:5F:5D:7F:4E:1B:7A:9D:B0:0D:39:AB:1F:EB
Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial: 6E52611A9DB9CC5C7323A30697615E118B075364
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313730303a3a2f34302d3430203d3e203233373234.roa
Signing time: Mon 29 Jun 2026 08:01:10 +0000
ROA not before: Mon 29 Jun 2026 07:56:10 +0000
ROA not after: Mon 28 Jun 2027 08:01:10 +0000
asID: 23724
IP address blocks: 2402:5ec0:1700::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 12:11:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:52:61:1a:9d:b9:cc:5c:73:23:a3:06:97:61:5e:11:8b:07:53:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Validity
Not Before: Jun 29 07:56:10 2026 GMT
Not After : Jun 28 08:01:10 2027 GMT
Subject: CN=ED4A96463D32CA5F5D7F4E1B7A9DB00D39AB1FEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e4:79:cd:be:d1:08:87:59:4f:cb:62:43:bb:
7f:14:f4:22:a5:a2:90:0d:cb:62:97:b3:13:c4:d5:
52:db:11:1f:5a:12:89:3a:0c:7d:51:02:b1:54:f2:
92:75:25:2d:9e:13:46:f1:8c:00:3b:d8:1d:79:40:
4b:fa:3e:77:98:b5:0a:e5:48:67:9f:2d:23:26:68:
c4:00:6f:e2:04:b2:f2:dc:54:ae:4b:e7:57:c2:1d:
49:09:9d:d0:f5:cc:9a:bd:0d:46:4a:92:a4:80:2b:
48:60:10:de:82:19:fa:50:d6:d7:08:7b:d1:c6:10:
7d:4c:91:51:c3:c0:47:f6:6e:52:a1:1a:a6:f6:bf:
97:24:59:b1:59:1f:a6:fb:76:0b:29:a7:48:e0:3e:
cb:70:13:1f:c1:28:6b:e1:7d:d9:04:0a:11:c8:1f:
30:14:e4:c4:9f:1b:b2:07:5f:48:47:1f:e9:61:25:
f6:7b:b1:9a:71:8c:60:f9:0c:9c:9d:32:d1:a6:79:
ce:fc:16:db:cd:25:c7:86:82:4b:91:8c:13:c3:24:
c4:22:ad:af:a9:88:f7:cd:48:24:ea:97:e1:1d:1f:
ac:19:bd:1c:b3:55:d8:c0:f5:1f:36:6c:8b:88:b2:
4b:78:59:67:76:6f:f7:bc:0a:bc:c3:ad:cb:fd:e7:
53:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4A:96:46:3D:32:CA:5F:5D:7F:4E:1B:7A:9D:B0:0D:39:AB:1F:EB
X509v3 Authority Key Identifier:
keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313730303a3a2f34302d3430203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5ec0:1700::/40
Signature Algorithm: sha256WithRSAEncryption
cb:5a:e3:7a:c3:f8:70:25:ed:bd:88:fe:fc:33:cc:21:c1:96:
d7:81:db:f3:67:6c:45:4e:d9:8a:04:f6:0a:3d:11:64:ee:e9:
d6:65:24:32:e5:64:31:ad:3e:e4:4b:22:30:ca:6b:d6:15:22:
ae:ef:95:28:cd:a1:a9:ff:f1:0a:cd:7e:bb:bf:ba:48:36:03:
a1:44:8f:a9:80:f9:30:31:11:b1:b1:b9:00:0e:79:6b:6b:7e:
9f:7f:61:87:96:e0:1d:7a:51:d4:fb:d9:2c:8c:f6:22:35:53:
76:15:81:55:af:05:f3:a0:4e:c8:fd:24:3a:1c:35:c6:5e:8f:
93:d0:ca:a1:28:9d:2f:ce:8e:6b:79:88:2e:e7:0f:35:aa:3b:
5e:e1:58:de:39:f8:0a:6b:53:20:3c:c1:b8:f1:a2:9d:9a:c5:
17:e0:0b:82:43:2b:0f:11:85:2d:b1:c1:96:d7:8e:9d:e7:18:
e0:86:b8:47:68:05:16:66:d7:c4:dc:ef:2d:6e:33:3b:39:bf:
2a:e9:88:f0:25:8a:42:fd:0d:72:17:c6:c6:10:34:3e:94:d7:
c5:6e:d5:a2:0a:3a:3b:14:41:fc:10:2f:88:2c:ec:4b:86:ea:
42:9e:84:16:5f:a9:2d:36:4d:fe:79:8d:53:30:a5:43:d6:a5:
23:9d:3b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:57:31 2026 by rpki-client