
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316430303a3a2f34302d3430203d3e203535393632.roa
File: 323430323a356563303a316430303a3a2f34302d3430203d3e203535393632.roa (raw, json)
Hash identifier: Rt0ozq8vIRR4iKraNU/oIbAJzpiKFOcwBxBlZiA1HUE=
Subject key identifier: EF:60:EA:05:BB:88:05:21:69:D8:A0:C3:FB:3B:C4:0D:58:D3:A9:66
Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial: 40A29904F4E831312B56454BB83958B925F93ECE
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316430303a3a2f34302d3430203d3e203535393632.roa
Signing time: Mon 29 Jun 2026 08:04:05 +0000
ROA not before: Mon 29 Jun 2026 07:59:05 +0000
ROA not after: Mon 28 Jun 2027 08:04:05 +0000
asID: 55962
IP address blocks: 2402:5ec0:1d00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 12:11:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:a2:99:04:f4:e8:31:31:2b:56:45:4b:b8:39:58:b9:25:f9:3e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Validity
Not Before: Jun 29 07:59:05 2026 GMT
Not After : Jun 28 08:04:05 2027 GMT
Subject: CN=EF60EA05BB88052169D8A0C3FB3BC40D58D3A966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:3f:02:06:cc:3d:85:03:0f:c9:b0:84:dc:
05:fc:06:40:ff:86:29:59:65:30:fa:85:0d:ed:2c:
2a:0c:0a:42:c9:8d:0b:d4:ae:c1:1e:cf:76:bd:82:
fa:bb:bb:f0:ed:90:e2:68:5f:b9:4d:b3:92:84:7a:
58:a7:cf:bf:1c:ff:3b:fe:9c:01:37:d2:74:f0:ed:
dd:11:fc:99:f4:75:7b:39:10:54:39:44:ee:1e:cd:
15:4b:7b:df:71:e6:fc:8a:f1:02:24:7d:24:95:e1:
80:96:62:55:86:d0:db:fd:0d:80:3a:e9:fa:f1:4c:
61:6d:fa:77:27:e9:19:00:c0:56:ee:bd:07:b5:96:
f8:e5:aa:a5:bc:bd:60:91:98:50:7b:f8:0e:b0:d2:
5a:ee:04:80:10:92:10:b5:ea:e5:ab:df:48:ed:f9:
44:41:28:37:e2:44:a5:7d:fd:26:b4:56:5e:1d:91:
fb:e0:34:dd:1c:58:15:cf:33:ee:05:42:28:10:0e:
5f:28:98:73:35:a2:64:c7:3c:64:34:08:53:e4:e7:
51:d7:64:5a:f1:5c:0e:70:01:a2:4b:4a:58:22:0f:
a4:c8:85:3c:ab:e7:95:f9:49:22:56:c8:04:ba:bd:
03:02:c5:ac:2a:93:62:04:0b:56:d4:64:27:74:6f:
c4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:60:EA:05:BB:88:05:21:69:D8:A0:C3:FB:3B:C4:0D:58:D3:A9:66
X509v3 Authority Key Identifier:
keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316430303a3a2f34302d3430203d3e203535393632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5ec0:1d00::/40
Signature Algorithm: sha256WithRSAEncryption
1c:5d:8e:2e:24:d5:28:49:ea:c2:ae:1a:d5:05:6f:46:aa:cf:
79:0d:e4:7d:e0:a0:a0:b1:6c:d9:9e:95:60:1f:6b:a3:9a:21:
a8:fe:2d:3f:82:50:2f:e5:de:92:e9:b4:7c:1b:25:e2:c9:2e:
28:3b:20:48:55:f7:27:cd:fd:b8:df:b7:3c:60:02:1a:a8:d8:
ed:1a:0e:29:f8:1e:ea:4a:b7:e9:a4:6f:68:04:bf:6f:b1:8f:
7e:d4:91:b3:13:e9:54:ed:42:ed:db:64:ae:a0:74:09:36:63:
01:53:f9:cf:55:11:f0:ac:cb:3a:ed:f0:97:d0:c9:14:73:03:
c6:b5:0e:81:87:0d:d4:0e:83:80:63:fd:7b:2b:2b:e9:6b:b5:
22:0e:4b:e8:d3:22:4c:67:75:71:73:fc:5d:d2:b6:b8:c3:c8:
39:4c:e0:36:03:be:cc:5b:f8:52:a0:ab:6d:99:0d:de:b9:d2:
ae:15:68:cb:8c:89:71:de:24:c6:7e:dd:74:12:65:6f:ec:4a:
49:d6:b4:89:82:f4:8a:b0:ac:92:a9:ef:c4:93:bf:ac:be:b7:
dc:00:85:20:82:7d:22:50:24:9f:10:4d:a1:8d:56:81:ae:0c:
d0:04:5f:8c:58:6a:0c:88:6e:fb:e4:1b:c6:ef:b0:68:e7:98:
fc:4f:4f:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUQKKZBPToMTErVkVLuDlYuSX5Ps4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUw
N0U4MjQ4MTAeFw0yNjA2MjkwNzU5MDVaFw0yNzA2MjgwODA0MDVaMDMxMTAvBgNV
BAMTKEVGNjBFQTA1QkI4ODA1MjE2OUQ4QTBDM0ZCM0JDNDBENThEM0E5NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClGj8CBsw9hQMPybCE3AX8BkD/
hilZZTD6hQ3tLCoMCkLJjQvUrsEez3a9gvq7u/DtkOJoX7lNs5KEelinz78c/zv+
nAE30nTw7d0R/Jn0dXs5EFQ5RO4ezRVLe99x5vyK8QIkfSSV4YCWYlWG0Nv9DYA6
6frxTGFt+ncn6RkAwFbuvQe1lvjlqqW8vWCRmFB7+A6w0lruBIAQkhC16uWr30jt
+URBKDfiRKV9/Sa0Vl4dkfvgNN0cWBXPM+4FQigQDl8omHM1omTHPGQ0CFPk51HX
ZFrxXA5wAaJLSlgiD6TIhTyr55X5SSJWyAS6vQMCxawqk2IEC1bUZCd0b8QzAgMB
AAGjggIgMIICHDAdBgNVHQ4EFgQU72DqBbuIBSFp2KDD+zvEDVjTqWYwHwYDVR0j
BBgwFoAUdl8Re+d+zDG9q5UzGOGi9QfoJIEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy
Mzg4MTUyMjkwNzA1NDExNy8wLzc2NUYxMTdCRTc3RUNDMzFCREFCOTUzMzE4RTFB
MkY1MDdFODI0ODEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUwN0U4MjQ4MS5jZXIw
gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMTIzODgxNTIyOTA3MDU0MTE3LzAvMzIzNDMwMzIz
YTM1NjU2MzMwM2EzMTY0MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDM1MzUz
OTM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB
Af8EEjAQMA4EAgACMAgDBgAkAl7AHTANBgkqhkiG9w0BAQsFAAOCAQEAHF2OLiTV
KEnqwq4a1QVvRqrPeQ3kfeCgoLFs2Z6VYB9ro5ohqP4tP4JQL+Xekum0fBsl4sku
KDsgSFX3J839uN+3PGACGqjY7RoOKfge6kq36aRvaAS/b7GPftSRsxPpVO1C7dtk
rqB0CTZjAVP5z1UR8KzLOu3wl9DJFHMDxrUOgYcN1A6DgGP9eysr6Wu1Ig5L6NMi
TGd1cXP8XdK2uMPIOUzgNgO+zFv4UqCrbZkN3rnSrhVoy4yJcd4kxn7ddBJlb+xK
Sda0iYL0irCskqnvxJO/rL633ACFIIJ9IlAknxBNoY1Wga4M0ARfjFhqDIhu++Qb
xu+waOeY/E9PoQ==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:27 2026 by rpki-client