
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316330303a3a2f34302d3430203d3e203233373234.roa
File: 323430323a356563303a316330303a3a2f34302d3430203d3e203233373234.roa (raw, json)
Hash identifier: 2WDMh7OJEvzhkIGJP6fHum0eL3qzTMdhi/FxduOCtpo=
Subject key identifier: A5:13:39:CB:D4:17:7D:86:EA:BD:30:90:6C:A0:E7:C4:A3:51:32:30
Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial: 6C11A12CAC52C4887D477F4B65B0676AC874ECA1
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316330303a3a2f34302d3430203d3e203233373234.roa
Signing time: Mon 29 Jun 2026 08:04:04 +0000
ROA not before: Mon 29 Jun 2026 07:59:04 +0000
ROA not after: Mon 28 Jun 2027 08:04:04 +0000
asID: 23724
IP address blocks: 2402:5ec0:1c00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 12:11:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:11:a1:2c:ac:52:c4:88:7d:47:7f:4b:65:b0:67:6a:c8:74:ec:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Validity
Not Before: Jun 29 07:59:04 2026 GMT
Not After : Jun 28 08:04:04 2027 GMT
Subject: CN=A51339CBD4177D86EABD30906CA0E7C4A3513230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9b:5f:d8:45:5b:94:09:a8:69:b1:bb:75:62:
4a:34:bf:69:ec:e2:26:aa:2e:81:83:e2:f2:16:d9:
d3:97:86:25:7a:b4:d3:68:ae:1a:90:1b:22:71:ba:
e3:44:46:1e:f5:b4:83:38:32:92:3d:c3:fb:47:53:
6c:76:8d:16:6a:1c:d9:40:e7:f1:a0:1d:0d:bf:bd:
86:98:19:7f:5a:9a:e7:21:c5:af:76:12:c6:ec:64:
ad:5b:65:22:49:f9:fa:3c:0a:a7:89:62:ab:03:75:
7d:27:d5:d6:26:10:b9:69:7a:24:32:02:72:c0:42:
66:ce:f2:9e:c0:7d:9d:11:fc:0e:d7:02:8d:7d:dc:
6a:3e:29:8a:29:28:31:22:3d:51:d8:95:c0:fe:c2:
2b:42:00:2e:c5:86:e6:96:70:01:00:9d:0e:11:eb:
08:28:de:ab:6e:54:10:b6:87:1c:08:cc:3c:51:43:
f7:41:d5:46:56:be:99:c9:58:e7:e9:01:f6:54:88:
be:96:cb:7f:c8:98:98:17:e6:95:e9:25:0d:48:aa:
a7:5d:20:e2:59:94:e4:85:da:85:45:4f:7a:e5:90:
91:87:5f:09:72:86:b1:8a:2f:f0:e7:8a:26:17:ba:
ab:63:0a:33:7b:04:b9:3c:37:39:69:ae:ea:d7:a7:
ab:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:13:39:CB:D4:17:7D:86:EA:BD:30:90:6C:A0:E7:C4:A3:51:32:30
X509v3 Authority Key Identifier:
keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316330303a3a2f34302d3430203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5ec0:1c00::/40
Signature Algorithm: sha256WithRSAEncryption
82:cc:03:f9:79:d7:6c:94:86:54:3d:1d:19:54:d8:4a:31:60:
1f:8a:4d:31:d9:5d:57:17:b3:9e:55:2d:3e:67:7a:06:a7:31:
bd:9d:b2:a6:e8:cc:6b:91:f2:f1:f9:99:d3:41:2e:f7:c6:ce:
77:71:39:fd:97:40:ce:fa:0c:14:ad:ca:d5:92:53:bd:3b:29:
24:78:2e:f4:e6:4b:c1:21:7c:39:e6:f8:42:99:62:ff:28:a3:
7c:97:d3:14:19:c3:19:0c:76:23:f6:01:69:cd:ff:ca:7d:01:
12:19:13:f2:2d:0a:b9:c2:27:5a:9c:58:7f:d8:46:1f:6f:8c:
87:d5:1e:f5:ef:f7:e7:75:7e:7c:de:45:c7:1b:9b:ad:4e:23:
95:bb:fd:22:3f:74:48:41:e1:14:6c:b8:60:a3:0e:88:1c:fc:
d7:79:72:00:e5:9c:2e:c7:ae:f5:1a:0f:5d:7c:14:1b:ef:5e:
2f:89:57:95:68:71:6f:3e:fe:8c:56:7b:9a:79:78:6c:e7:3b:
69:ea:47:b7:cf:86:2c:5e:95:7a:52:72:83:8a:59:a3:81:7f:
49:7e:63:7f:2e:38:46:77:b2:f6:c3:e8:c0:c4:37:fa:00:55:
d4:79:c5:45:be:99:60:79:02:4c:4d:20:a0:ac:ad:f3:a3:79:
d7:e5:99:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:57:30 2026 by rpki-client