
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a3a2f33322d3332203d3e203233373234.roa
File: 323430323a356563303a3a2f33322d3332203d3e203233373234.roa (raw, json)
Hash identifier: hWT/N+mBgyxkVKf94N78+f4HiGJyhS6s4ny2zkFM1jY=
Subject key identifier: EF:27:A8:E0:68:84:34:BA:6A:6C:21:87:4A:63:06:3E:CD:2F:4D:47
Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial: 1AC087FF54A93F5EA8B78CF83CEE08DC2CA65029
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a3a2f33322d3332203d3e203233373234.roa
Signing time: Mon 29 Jun 2026 07:53:29 +0000
ROA not before: Mon 29 Jun 2026 07:48:29 +0000
ROA not after: Mon 28 Jun 2027 07:53:29 +0000
asID: 23724
IP address blocks: 2402:5ec0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 12:11:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:c0:87:ff:54:a9:3f:5e:a8:b7:8c:f8:3c:ee:08:dc:2c:a6:50:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Validity
Not Before: Jun 29 07:48:29 2026 GMT
Not After : Jun 28 07:53:29 2027 GMT
Subject: CN=EF27A8E0688434BA6A6C21874A63063ECD2F4D47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7d:15:4c:e0:00:d7:8a:99:8b:63:25:77:91:
41:0a:98:f3:30:92:f2:10:5b:5d:53:a4:a8:6f:9f:
6e:2d:e5:5e:e7:aa:76:af:da:37:aa:a5:8e:8b:08:
2e:55:99:2e:9f:b8:26:a8:11:84:fb:11:8d:a2:c9:
de:67:9e:23:08:0a:85:30:d2:6b:b1:10:5c:06:7e:
c1:d9:f6:5e:7b:53:87:52:06:36:ff:58:23:62:34:
40:6f:e7:00:0c:ac:c4:f7:fb:30:fe:bd:fe:81:27:
a3:ea:e1:98:3e:87:1d:23:7e:6b:3c:ca:0d:b3:d9:
11:24:95:88:f6:c0:6f:af:ed:76:25:e9:c6:e1:65:
f2:f2:a6:6e:e8:05:e0:b7:76:93:d3:e1:b3:2b:87:
88:56:3b:a2:a3:b0:bd:ff:1a:65:0e:3a:27:5c:40:
b0:10:db:79:10:fb:15:fa:d8:94:68:63:06:2f:db:
02:ec:9e:99:70:b7:57:37:e9:3e:65:16:1a:eb:bf:
6e:d5:f0:72:3b:11:d1:0d:8f:26:f2:8d:af:a1:d3:
11:d9:cf:bc:04:97:c8:32:69:d9:af:d6:c0:79:1d:
0d:08:a9:09:4e:7d:06:2c:aa:9b:0c:28:b6:f8:0f:
02:c9:b8:a8:db:28:e2:51:ab:44:89:46:86:24:3c:
24:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:27:A8:E0:68:84:34:BA:6A:6C:21:87:4A:63:06:3E:CD:2F:4D:47
X509v3 Authority Key Identifier:
keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a3a2f33322d3332203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5ec0::/32
Signature Algorithm: sha256WithRSAEncryption
c1:04:7a:5e:3f:2f:66:ef:3c:c1:ab:34:8f:c0:0b:bb:8e:80:
a8:ee:97:95:1e:bb:b2:dc:c4:c7:36:b4:47:c4:49:8d:2d:fa:
8b:08:61:b1:a8:13:19:ca:05:d6:6e:50:8f:e5:73:35:67:0c:
b2:ba:b4:02:e9:8a:5e:67:3a:fc:3c:ba:c2:1c:49:e4:00:20:
e3:03:e1:cf:a0:81:fb:b7:44:79:ad:03:69:cb:aa:cf:6e:3b:
9c:c9:01:d7:31:9b:3f:93:88:d4:2c:c5:6d:ac:d4:ad:01:de:
24:b5:ca:c5:e0:31:6a:7a:70:15:a1:45:78:20:52:67:8f:28:
b7:f9:aa:d0:1e:24:d0:5a:1e:f2:98:b2:20:f0:24:6b:85:99:
89:da:cd:ac:e3:19:88:05:54:e8:32:2e:24:82:9a:5b:f0:35:
4d:9a:55:77:bd:dd:c4:a6:95:b6:81:9f:84:38:36:bf:73:fb:
c9:6e:1e:d4:80:47:15:96:f3:4c:12:73:03:41:f1:64:b5:b6:
ac:80:43:4a:13:38:77:b4:97:81:87:f6:20:a3:0b:0f:4f:e6:
ad:a8:d2:17:d2:15:2e:f1:2b:58:ce:b1:0a:94:cb:ca:14:a4:
1d:8c:67:a5:26:44:05:b1:47:16:bd:3d:4a:fb:83:3d:1c:80:
22:df:d0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:13 2026 by rpki-client