
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316330303a3a2f34302d3430203d3e2034383038.roa
File: 323430323a356563303a316330303a3a2f34302d3430203d3e2034383038.roa (raw, json)
Hash identifier: 6tdczm3wyC/zid9F6yPTBzs505f6Kf9NsQjOkKcnPw8=
Subject key identifier: 95:0F:F5:CA:0E:AA:4D:4B:5E:8B:45:8A:01:B4:0F:07:D4:68:DA:D8
Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial: 0E70A136513C3A3C8F2C8A0E78C2FD5CD27A702F
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316330303a3a2f34302d3430203d3e2034383038.roa
Signing time: Mon 29 Jun 2026 08:04:05 +0000
ROA not before: Mon 29 Jun 2026 07:59:05 +0000
ROA not after: Mon 28 Jun 2027 08:04:05 +0000
asID: 4808
IP address blocks: 2402:5ec0:1c00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 12:11:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:70:a1:36:51:3c:3a:3c:8f:2c:8a:0e:78:c2:fd:5c:d2:7a:70:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Validity
Not Before: Jun 29 07:59:05 2026 GMT
Not After : Jun 28 08:04:05 2027 GMT
Subject: CN=950FF5CA0EAA4D4B5E8B458A01B40F07D468DAD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0b:f7:b4:6f:58:5c:71:5e:ae:c0:70:44:ad:
4f:4f:cd:5a:84:5b:d4:00:5b:6f:ec:01:d2:9a:d6:
2f:95:14:0b:bd:2e:4d:f3:78:ba:c6:e0:fc:37:a9:
ba:9e:dc:3a:e6:14:e9:95:a6:cd:a3:9d:08:45:cd:
8d:fe:82:6b:5a:87:f4:8a:c0:10:f7:4c:fc:01:88:
50:e8:a1:34:74:61:8a:c6:4b:6e:b2:02:05:1e:52:
5f:43:5c:0a:59:c2:b7:54:9a:87:be:2c:2a:0a:b8:
f0:92:80:78:52:98:c0:3c:47:ad:74:13:3f:4a:6d:
82:8f:4e:6d:05:c6:0a:fe:d3:a3:ab:94:52:24:13:
e6:85:6f:b5:10:fe:22:59:46:a3:15:81:12:f8:76:
d1:06:7a:9f:cc:bd:76:39:c6:8e:ce:bb:08:33:fa:
d4:49:f3:98:90:a3:10:2e:50:29:91:08:18:3b:68:
2a:c5:c0:4e:cd:7a:15:13:70:7f:d4:57:c3:33:d8:
51:5a:d1:e8:37:4a:b7:e2:97:38:30:1c:ac:bf:cf:
2b:3d:3b:db:8b:c5:f0:4d:5d:28:db:ca:d8:43:ec:
e5:bc:e1:e3:6e:ee:b2:02:fb:05:6f:03:04:db:df:
08:3d:61:5f:a5:ad:38:5f:68:ac:aa:d4:b9:7d:7e:
cf:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0F:F5:CA:0E:AA:4D:4B:5E:8B:45:8A:01:B4:0F:07:D4:68:DA:D8
X509v3 Authority Key Identifier:
keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316330303a3a2f34302d3430203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5ec0:1c00::/40
Signature Algorithm: sha256WithRSAEncryption
29:b8:48:fa:c8:46:02:65:74:94:ee:69:7c:94:b0:bc:f0:d7:
1d:58:f1:6e:ab:9f:41:4e:70:e1:f7:6e:74:80:62:14:00:4a:
d9:a0:4c:b4:58:6e:db:16:66:01:e9:51:e0:cd:6a:70:51:48:
8b:ec:4e:a3:a4:a1:55:aa:49:d7:30:c3:73:b2:6f:7d:c5:f9:
6a:d0:20:14:95:ac:4b:b4:65:d7:91:36:66:d2:00:f2:3c:3a:
3c:93:90:47:0b:c6:62:8e:6f:2e:04:74:64:02:f3:2c:da:cc:
0e:4a:8f:00:46:a9:bc:5a:06:81:a5:6e:80:bc:d9:41:89:de:
db:e3:40:b6:d5:68:77:9c:8d:36:3d:21:ee:35:ef:91:70:6d:
a3:8f:c3:47:4a:71:10:06:08:0f:8d:70:86:28:7f:25:18:6a:
29:b4:62:9c:b0:c0:60:09:c4:da:b9:32:ff:f0:2a:d9:01:15:
fc:0a:24:c3:9c:56:b5:4d:ae:eb:1e:89:19:b8:a9:85:74:c4:
3d:59:90:41:f0:76:8f:0e:ff:f1:14:2c:9f:1d:a6:57:1d:8a:
1a:e8:c1:80:db:89:6a:59:14:5f:b2:a0:36:c5:e0:e9:59:8f:
2c:1a:01:d6:16:13:fc:09:5c:d1:74:c8:c7:ef:d9:8c:1c:18:
ca:99:8c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:22 2026 by rpki-client