
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313730303a3a2f34302d3430203d3e203535393632.roa
File: 323430323a356563303a313730303a3a2f34302d3430203d3e203535393632.roa (raw, json)
Hash identifier: yPzaUiuZ3+FZz5j5mXOyY0wmaXLcdtYU81pz/bn6OXU=
Subject key identifier: 68:AC:BB:76:77:E0:A2:13:69:70:81:81:14:84:88:47:26:79:2E:50
Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial: 4F51B6DB539DE6DFBA20B5779BB66173500CB5FC
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313730303a3a2f34302d3430203d3e203535393632.roa
Signing time: Mon 29 Jun 2026 08:01:11 +0000
ROA not before: Mon 29 Jun 2026 07:56:11 +0000
ROA not after: Mon 28 Jun 2027 08:01:11 +0000
asID: 55962
IP address blocks: 2402:5ec0:1700::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 12:11:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:51:b6:db:53:9d:e6:df:ba:20:b5:77:9b:b6:61:73:50:0c:b5:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Validity
Not Before: Jun 29 07:56:11 2026 GMT
Not After : Jun 28 08:01:11 2027 GMT
Subject: CN=68ACBB7677E0A213697081811484884726792E50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c5:65:2d:d0:e7:0a:9d:99:9e:f3:14:8b:87:
92:e0:34:29:7d:e3:df:bc:bb:c1:24:3e:a6:de:f6:
84:d3:2e:47:51:89:d7:d7:14:72:7a:e4:e4:44:cb:
11:56:24:2a:8d:19:58:81:c4:70:e2:eb:ec:3e:ef:
a7:19:c2:49:c5:c8:26:1e:04:bb:e7:a7:48:a0:ad:
f5:8e:d4:d5:ed:07:79:c1:c2:63:c6:66:09:bb:98:
93:12:5d:67:14:14:c3:d2:d5:e8:14:ee:63:bd:6c:
79:7f:a8:93:c3:10:3c:50:61:4e:f1:f3:00:80:07:
39:c2:f3:14:57:77:dc:23:1c:71:c7:48:28:f6:82:
f5:6a:be:fd:3c:86:a4:15:d5:b7:b5:43:57:1b:a7:
80:86:27:46:3c:b7:ca:45:5a:79:ca:ac:63:0b:25:
28:b1:87:28:9c:d4:42:c1:90:f9:7a:86:2f:16:f1:
4c:f4:e0:83:2b:70:67:91:a1:9f:c1:70:52:58:41:
79:38:a4:ad:35:c5:57:52:6a:92:57:00:9b:6b:91:
11:26:d3:57:ea:6b:8c:8a:a3:30:13:1c:11:66:94:
6b:6a:e7:1a:40:7d:39:83:bf:c5:95:e9:82:ff:4c:
21:f3:09:2a:4f:b2:e2:98:88:48:af:dd:79:f0:02:
7e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AC:BB:76:77:E0:A2:13:69:70:81:81:14:84:88:47:26:79:2E:50
X509v3 Authority Key Identifier:
keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313730303a3a2f34302d3430203d3e203535393632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5ec0:1700::/40
Signature Algorithm: sha256WithRSAEncryption
35:ad:a9:e3:73:d9:12:91:2a:4f:7b:a1:5f:e3:0f:83:b1:8f:
24:2c:43:bf:da:58:4d:8a:6f:00:7c:ba:e8:49:19:30:b1:a7:
c6:6a:2a:2b:2f:4d:e8:39:a1:4e:8f:48:13:00:78:6e:b1:32:
87:d7:c9:d9:bf:89:ed:9d:f8:6d:4b:cb:31:5b:23:72:53:38:
b5:ad:72:9f:b4:e0:cb:be:f3:7b:03:fa:f8:ef:d4:6d:f7:50:
8b:84:b4:93:5b:61:86:c6:57:b5:3d:80:05:02:94:d4:ac:89:
07:a1:75:48:6d:60:1a:2a:f3:db:dc:95:a4:8d:87:ac:82:f0:
55:41:30:b3:e3:49:b3:2e:e6:b9:a6:b2:1b:3a:97:31:07:2a:
ad:99:06:78:90:0a:bf:3b:b7:eb:74:b5:d8:36:7e:50:6b:fb:
9a:ce:c8:8c:21:b5:89:00:99:3b:18:f3:91:7d:2d:8b:44:dd:
bd:fa:3a:a8:91:90:a7:6e:5b:3e:d8:84:99:a2:de:dc:95:c1:
59:5f:3a:67:aa:44:17:a2:a3:d3:6e:21:78:c0:0f:b8:39:d5:
47:67:9c:27:fc:4a:c2:c6:1d:5e:e9:f2:da:22:f1:91:fc:aa:
1b:0b:c9:32:36:fb:78:7b:ed:bf:a7:5d:05:29:f5:ff:2c:5b:
64:e6:e3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:18 2026 by rpki-client