
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316530303a3a2f34302d3430203d3e203535393632.roa
File: 323430323a356563303a316530303a3a2f34302d3430203d3e203535393632.roa (raw, json)
Hash identifier: SkNo2PvCmS0mM3amj+k9fQtuEH6vjqQgb1eRNL3L+vQ=
Subject key identifier: 77:BE:A7:DA:BD:FC:6C:F1:F3:0E:7B:A0:8F:F2:58:9C:1A:DE:78:E7
Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial: 1EC750CBC3F50016E243C2EA97B6C8539B39FB5E
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316530303a3a2f34302d3430203d3e203535393632.roa
Signing time: Mon 29 Jun 2026 08:05:53 +0000
ROA not before: Mon 29 Jun 2026 08:00:53 +0000
ROA not after: Mon 28 Jun 2027 08:05:53 +0000
asID: 55962
IP address blocks: 2402:5ec0:1e00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 12:11:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:c7:50:cb:c3:f5:00:16:e2:43:c2:ea:97:b6:c8:53:9b:39:fb:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Validity
Not Before: Jun 29 08:00:53 2026 GMT
Not After : Jun 28 08:05:53 2027 GMT
Subject: CN=77BEA7DABDFC6CF1F30E7BA08FF2589C1ADE78E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3c:22:52:d6:df:9f:9d:1f:ec:18:69:69:9e:
6c:2a:ba:d1:09:f9:48:8c:42:61:9d:39:ac:ab:17:
ed:05:6d:45:93:d8:e2:41:dc:05:e7:f2:eb:71:ff:
38:2f:42:7d:41:f4:84:99:3a:87:22:a2:02:38:86:
0d:d1:7c:fe:a0:e4:1b:3d:70:ef:74:1c:49:ef:2f:
5c:f8:56:a0:ad:b6:be:69:46:78:d2:7a:c7:12:67:
96:92:74:7b:29:99:aa:4e:0c:31:e7:66:8d:c1:bb:
80:1f:89:5d:fb:c9:6a:ba:87:47:8d:7e:7f:7f:d1:
21:09:cc:ad:a7:2b:0a:da:05:09:15:67:ad:b7:7b:
57:be:d9:80:ec:42:58:d1:a0:29:7c:c6:67:69:9a:
15:5d:05:77:c5:a6:c8:d3:3d:c9:ca:fb:b1:03:3e:
b5:de:52:1c:0f:40:08:1a:90:a6:da:7a:8f:5b:b6:
95:84:82:eb:34:72:60:f4:c3:1c:2d:ec:82:88:6b:
14:4c:dd:37:39:05:43:03:dc:0f:e5:5a:99:a2:19:
71:9e:0b:4b:c8:ae:8a:bc:8c:dc:13:0f:ba:d7:7c:
56:13:d9:8b:b4:02:04:8f:04:6f:dd:14:35:a9:14:
4e:4d:7b:ce:bc:46:fb:54:cd:32:de:bd:b9:ef:0f:
9b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BE:A7:DA:BD:FC:6C:F1:F3:0E:7B:A0:8F:F2:58:9C:1A:DE:78:E7
X509v3 Authority Key Identifier:
keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316530303a3a2f34302d3430203d3e203535393632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5ec0:1e00::/40
Signature Algorithm: sha256WithRSAEncryption
15:9b:1c:eb:dc:24:75:bf:25:85:b4:f1:b1:2f:25:1b:aa:46:
31:88:1c:e4:65:35:81:4e:d4:64:9f:e5:ea:62:cf:cb:a2:26:
fc:7a:30:3a:0d:11:8a:d1:2a:25:d1:63:a5:fb:09:0c:3d:f0:
30:ac:0f:ea:c0:ab:c8:62:7b:93:71:6a:94:05:58:26:22:21:
90:80:78:b8:5d:9c:17:a2:d2:c2:76:26:08:1f:e5:dc:0b:34:
b8:64:2d:b5:47:04:fb:30:0a:62:b5:31:ad:2d:c7:30:9b:c2:
04:44:79:0e:09:b7:0c:96:89:e3:21:01:b4:11:29:ea:af:6a:
69:e8:19:12:01:e1:a6:00:b8:95:2f:2d:47:7f:d3:5b:2d:34:
41:ba:d7:6e:a1:cb:92:fe:11:57:61:96:c9:b6:bc:12:cd:bc:
7a:06:ef:ab:8e:6a:4d:3f:4f:6c:cd:d4:ba:13:1f:e0:74:15:
3b:4f:a0:ed:17:82:87:e1:a1:e9:0b:cc:f7:c4:9b:73:9e:58:
34:b6:28:a8:df:88:d7:95:92:f6:bc:e0:e1:71:a7:60:d8:30:
06:37:a9:70:0c:b2:ee:a2:bb:83:28:2d:6e:1d:70:df:10:a7:
9a:03:91:fb:7f:e4:11:1e:c5:3f:05:b2:53:9a:54:9e:69:44:
06:bb:7d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:30 2026 by rpki-client