
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316130303a3a2f34302d3430203d3e2034383038.roa
File: 323430323a356563303a316130303a3a2f34302d3430203d3e2034383038.roa (raw, json)
Hash identifier: YhlEDoSDc+frlGUJ1Po9IJEHBZPCVXcQ24VQ2tzCTJM=
Subject key identifier: 03:B5:58:3B:8D:12:EE:5A:EC:08:79:C3:54:AB:2E:7A:D9:AC:88:E2
Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial: 5448400CA928EE5CE1147ECD24A457D4B61183AC
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316130303a3a2f34302d3430203d3e2034383038.roa
Signing time: Mon 29 Jun 2026 08:04:06 +0000
ROA not before: Mon 29 Jun 2026 07:59:06 +0000
ROA not after: Mon 28 Jun 2027 08:04:06 +0000
asID: 4808
IP address blocks: 2402:5ec0:1a00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 12:11:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:48:40:0c:a9:28:ee:5c:e1:14:7e:cd:24:a4:57:d4:b6:11:83:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Validity
Not Before: Jun 29 07:59:06 2026 GMT
Not After : Jun 28 08:04:06 2027 GMT
Subject: CN=03B5583B8D12EE5AEC0879C354AB2E7AD9AC88E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:96:d1:42:db:16:e0:30:2a:c2:4e:ed:15:25:
c6:c5:e9:9e:83:9e:5d:8a:ff:83:45:69:d8:83:14:
17:3d:bb:a4:46:b1:24:b0:8e:47:2f:6a:cf:5a:55:
e2:19:a5:c4:61:75:c0:2e:1a:8c:23:1c:b2:43:8d:
4a:78:d9:39:25:fc:54:6a:9b:94:58:d9:a7:81:84:
c0:81:f7:db:aa:e7:d5:11:28:66:90:f6:64:2c:a8:
bf:85:e0:f0:26:b5:2f:38:50:b4:c6:cb:0a:8c:91:
f7:1f:1b:28:c1:7e:21:99:0f:88:52:58:2f:13:69:
60:e6:e8:bf:09:b4:b6:1b:3f:c2:2e:bc:2e:bf:8b:
27:1f:51:de:bc:05:54:a9:39:c9:9f:fd:45:50:02:
44:3a:23:9b:63:d4:53:54:fb:1c:e1:bf:92:11:e2:
d0:e0:ab:b2:d8:2c:6e:db:55:af:85:72:15:65:02:
f9:80:c3:16:74:cc:91:5d:82:aa:df:5e:f6:c4:2c:
dc:3e:32:e0:a6:17:f0:a4:80:4a:bc:0a:17:df:29:
49:3b:1d:ca:e0:33:c3:70:2a:09:b7:bf:7f:f2:ef:
39:5c:f9:7b:98:50:88:a3:bf:bc:71:0e:16:c3:63:
fc:d6:64:6d:d1:5a:19:52:ba:62:2f:a4:97:1c:6c:
24:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B5:58:3B:8D:12:EE:5A:EC:08:79:C3:54:AB:2E:7A:D9:AC:88:E2
X509v3 Authority Key Identifier:
keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316130303a3a2f34302d3430203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5ec0:1a00::/40
Signature Algorithm: sha256WithRSAEncryption
53:d8:cc:ca:ff:64:c2:c0:69:e8:b6:92:93:b9:8b:7f:31:a7:
d8:fa:d5:47:4a:38:4e:1a:84:b0:fc:1e:31:18:c5:8c:1d:bf:
ab:44:80:93:6a:d9:17:57:83:c9:4b:82:0f:95:63:96:d1:1e:
86:11:f2:67:e3:bc:d4:e4:79:52:c3:97:84:92:4f:62:5e:8d:
72:15:4c:db:04:96:b6:62:79:49:13:5e:0d:eb:f5:66:8f:6e:
5e:b0:82:63:c0:aa:57:ad:ac:0c:d2:31:b4:8f:a3:71:ec:53:
a2:f9:92:86:b5:ff:93:ce:f4:4e:79:f2:72:ed:17:5f:f0:a3:
93:21:4c:3a:a7:63:42:35:2d:14:44:7a:fa:74:86:7d:e7:5c:
98:ca:33:20:6a:c1:e8:d1:66:58:ed:1f:d0:ec:33:40:ce:47:
32:36:ac:71:7d:c4:19:70:16:14:51:fb:18:0e:95:1e:c5:1a:
6c:f1:f7:04:2f:aa:9e:38:93:7f:5f:9e:08:6c:16:f8:ba:e6:
fe:22:c0:f1:6e:1c:b4:5c:81:0f:6c:a2:43:08:19:fa:01:5c:
c1:b2:f9:9b:b6:31:24:3c:5e:be:1b:82:2c:7c:fd:7f:32:2d:
f3:79:d9:9e:b7:33:86:80:ed:9a:e3:b6:50:66:4e:ba:45:c4:
a1:1e:5d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:57:52 2026 by rpki-client