
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a3a2f33322d3332203d3e203435313135.roa
File: 323430323a356563303a3a2f33322d3332203d3e203435313135.roa (raw, json)
Hash identifier: CJdvyZT6Vy20PNijTLov+zdR9aTXpQCf13a+Q88db4w=
Subject key identifier: B8:25:F5:2D:27:9C:1C:B6:7A:27:D9:69:65:30:11:F4:E5:9D:97:4E
Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial: 277C2D56ED33B3003CF706EF56E3DEB3A416DDB1
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a3a2f33322d3332203d3e203435313135.roa
Signing time: Mon 29 Jun 2026 07:53:28 +0000
ROA not before: Mon 29 Jun 2026 07:48:28 +0000
ROA not after: Mon 28 Jun 2027 07:53:28 +0000
asID: 45115
IP address blocks: 2402:5ec0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 12:11:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:7c:2d:56:ed:33:b3:00:3c:f7:06:ef:56:e3:de:b3:a4:16:dd:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Validity
Not Before: Jun 29 07:48:28 2026 GMT
Not After : Jun 28 07:53:28 2027 GMT
Subject: CN=B825F52D279C1CB67A27D969653011F4E59D974E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4b:e4:46:7c:05:a0:55:08:b6:2e:20:5d:30:
77:83:ba:06:dd:57:61:5a:1e:d4:b9:6f:72:6e:4b:
75:9d:39:1e:e0:52:cb:c8:54:61:de:ea:72:44:5b:
87:e1:37:62:e3:f1:a7:49:1f:4e:36:34:b5:16:fd:
3b:4a:e1:ba:9c:7b:a4:19:8c:bf:c9:a3:13:f2:62:
f9:e6:fe:73:27:f5:4a:1e:1b:8e:e0:bd:75:80:90:
f2:02:67:be:b7:0d:e2:73:62:2a:3b:b7:d3:96:00:
e4:9c:28:f9:1e:bb:37:7b:d8:dc:bd:a6:0f:42:6d:
a8:c8:54:73:fe:77:95:53:c5:1e:b0:40:4d:3a:7a:
76:de:e1:e3:e6:68:ed:29:d3:dc:42:ac:2d:47:78:
20:4d:78:0e:da:9f:dc:16:ab:68:fa:9d:3e:d9:9a:
fe:e0:e2:ea:7b:44:53:c2:f0:6c:ea:6b:b5:af:15:
67:4c:12:16:bd:d4:fb:7b:c4:cb:d7:8b:c5:37:9b:
81:91:8a:bc:c6:59:85:21:a9:b1:26:1b:3e:a0:eb:
7c:8c:f0:81:e3:47:15:f0:f4:cf:5b:2a:c3:66:6b:
dd:12:31:aa:c3:7a:4d:59:25:4d:87:b2:83:25:bd:
32:c5:1c:e7:1f:66:c8:ff:7d:7a:d7:2b:f9:b1:4d:
28:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:25:F5:2D:27:9C:1C:B6:7A:27:D9:69:65:30:11:F4:E5:9D:97:4E
X509v3 Authority Key Identifier:
keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a3a2f33322d3332203d3e203435313135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5ec0::/32
Signature Algorithm: sha256WithRSAEncryption
61:7b:e3:1e:3e:8a:56:ba:68:0b:8a:c4:fe:2d:54:f0:0f:17:
f6:71:7b:85:5d:d6:d2:35:e4:83:19:40:d6:63:ec:75:9c:39:
05:70:8e:de:1a:9b:0a:51:e7:90:24:77:49:cf:28:e3:43:38:
31:af:82:91:5a:ad:4f:5e:18:0a:e8:14:02:7d:77:fb:cb:39:
e2:26:1a:26:29:39:65:bf:27:aa:de:14:a7:7d:33:f7:f5:50:
88:e7:8e:d2:2e:68:11:49:86:6d:95:a9:ef:60:31:11:01:cb:
2c:fc:1a:9a:92:d6:0b:b7:c1:be:ab:d6:55:77:73:fa:8d:98:
65:ec:b9:f4:92:af:ec:2b:f2:40:4e:d7:21:0c:03:71:e0:a6:
2c:39:5f:ba:cd:7f:6e:42:d5:e7:b5:4d:44:ff:72:61:0b:d5:
bc:88:35:f5:9c:0b:3a:b8:62:68:2c:49:f9:dc:a4:f5:80:34:
ec:1f:73:1e:f8:d3:cb:30:50:01:e8:97:23:1b:2e:fc:0f:e4:
dc:4f:74:2c:41:a4:f0:3d:de:52:02:05:1c:59:1a:d1:07:b8:
3d:5d:cf:87:ec:21:d0:b4:8b:4f:0e:9b:8b:04:20:a0:eb:22:
48:1c:70:56:29:3a:0b:1f:03:d1:54:62:e9:df:ab:e1:04:82:
32:b0:55:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:13 2026 by rpki-client