
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316130303a3a2f34302d3430203d3e203233373234.roa
File: 323430323a356563303a316130303a3a2f34302d3430203d3e203233373234.roa (raw, json)
Hash identifier: Z3cTcBnaw9jEnyOzR5CIA99OVq5i0xZUpKKzt8oZap8=
Subject key identifier: A7:D3:1A:57:7F:A5:83:6C:8C:9B:0B:18:37:0E:09:DC:EF:69:C4:B8
Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial: 4182B97E6BF6C7751D5CD3AFBB0B787E47D1390E
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316130303a3a2f34302d3430203d3e203233373234.roa
Signing time: Mon 29 Jun 2026 08:04:05 +0000
ROA not before: Mon 29 Jun 2026 07:59:05 +0000
ROA not after: Mon 28 Jun 2027 08:04:05 +0000
asID: 23724
IP address blocks: 2402:5ec0:1a00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 12:11:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:82:b9:7e:6b:f6:c7:75:1d:5c:d3:af:bb:0b:78:7e:47:d1:39:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Validity
Not Before: Jun 29 07:59:05 2026 GMT
Not After : Jun 28 08:04:05 2027 GMT
Subject: CN=A7D31A577FA5836C8C9B0B18370E09DCEF69C4B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:03:3e:e1:4f:c6:f0:c4:27:1b:89:51:86:
e9:78:84:b9:03:5f:20:26:f4:2c:6f:be:3a:ae:a6:
28:78:d6:c7:07:4e:de:fc:61:17:96:89:c1:ab:ed:
ba:5b:a1:ae:c1:af:eb:3d:81:a6:2f:ab:f7:b9:b5:
ed:14:96:c7:78:9e:0a:c5:09:fa:6b:a9:5d:b3:aa:
79:3b:37:ec:a9:3a:53:0c:34:dc:38:c3:80:1e:25:
e0:f9:be:89:56:55:30:a6:4b:d5:9d:02:f9:e7:07:
ee:26:60:3e:d5:77:b8:53:55:06:89:e5:3f:da:b2:
35:a8:0e:b5:ab:73:e4:94:00:22:32:97:93:e9:f4:
95:06:55:81:9e:d7:92:98:31:9e:3f:e2:d4:6d:41:
0a:1a:d2:14:7e:57:c9:2c:05:16:1f:e6:72:26:aa:
23:16:e1:40:91:b9:9d:67:fa:be:5d:e6:85:d8:93:
cd:74:b0:17:dc:24:78:e7:01:af:64:dc:e5:aa:d1:
2c:32:4b:f2:6d:62:f8:a2:34:4c:6f:01:39:c9:af:
eb:2a:16:93:d6:0a:c4:4f:ff:5e:b5:99:bd:28:e8:
05:0b:7b:2a:9e:7e:90:59:95:0c:0c:f7:d3:d9:be:
12:39:3c:7d:42:3b:dc:90:06:7d:c9:3e:65:f6:ad:
61:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D3:1A:57:7F:A5:83:6C:8C:9B:0B:18:37:0E:09:DC:EF:69:C4:B8
X509v3 Authority Key Identifier:
keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316130303a3a2f34302d3430203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5ec0:1a00::/40
Signature Algorithm: sha256WithRSAEncryption
74:c6:d6:07:f8:11:b6:dd:1c:0f:f8:17:40:ad:10:72:cb:81:
1c:ea:c3:55:ef:d7:f7:7a:bb:ec:27:e6:3d:54:87:11:87:94:
10:34:1b:78:50:64:6a:c3:8b:b5:64:ce:3b:27:5f:37:5c:5a:
1d:b8:31:71:61:5b:75:03:cf:6e:d7:49:98:c6:08:ba:78:d5:
12:8f:fe:a1:1e:07:9a:68:41:35:ac:83:0e:32:48:60:36:96:
d2:ea:c3:2c:a6:b3:ff:1b:74:28:e9:fd:28:06:81:e7:d9:8d:
23:62:b7:fe:fd:f4:cc:24:c7:69:5c:ee:01:42:2f:df:02:9d:
fb:69:93:0e:db:80:3c:51:94:46:f4:9b:45:34:fb:3f:e0:ba:
68:80:df:6c:c2:08:08:29:68:2f:ce:47:d6:58:a7:ce:19:76:
88:ff:12:20:6c:8b:ab:fe:04:b1:e3:55:27:8c:5d:7a:72:74:
a1:05:f7:66:7d:49:b4:df:40:b0:11:08:6a:93:e0:dd:54:22:
35:43:9b:e5:8c:d3:62:c8:79:00:a9:b8:67:f0:ab:8f:8b:0a:
f7:8b:a4:64:c7:1c:62:1a:17:8d:68:f0:47:9d:53:d9:4c:35:
73:6d:45:14:d3:d7:98:d4:be:22:57:8c:20:a0:75:07:c6:ff:
d9:05:b9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:31 2026 by rpki-client