
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a3a2f33322d3332203d3e2034383038.roa
File: 323430323a356563303a3a2f33322d3332203d3e2034383038.roa (raw, json)
Hash identifier: O0qF94C+uaXEodiy/lKdRNCmG45fKoD97osiz4UmayA=
Subject key identifier: D4:1B:38:FE:99:3C:6C:28:5E:E2:42:A5:8E:BC:D3:97:54:58:6E:6B
Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial: 3834354DB7FDF7501283B604D06E332BC41DD7DC
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a3a2f33322d3332203d3e2034383038.roa
Signing time: Mon 29 Jun 2026 07:53:28 +0000
ROA not before: Mon 29 Jun 2026 07:48:28 +0000
ROA not after: Mon 28 Jun 2027 07:53:28 +0000
asID: 4808
IP address blocks: 2402:5ec0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 12:11:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:34:35:4d:b7:fd:f7:50:12:83:b6:04:d0:6e:33:2b:c4:1d:d7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Validity
Not Before: Jun 29 07:48:28 2026 GMT
Not After : Jun 28 07:53:28 2027 GMT
Subject: CN=D41B38FE993C6C285EE242A58EBCD39754586E6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d6:9d:01:90:d2:b5:3b:27:55:f1:2f:dd:4a:
55:52:e8:68:01:8f:28:e2:06:c4:bb:ce:80:0c:b5:
c4:74:b2:26:dd:43:8c:4c:e8:29:f1:cb:46:75:c0:
dd:5f:00:83:8a:d0:58:31:9e:2f:46:dc:8f:da:2c:
5f:ac:de:d9:e5:f0:d3:46:f7:0f:65:66:b3:70:a4:
ea:0f:69:24:25:dc:03:b2:78:26:9f:e1:92:54:3c:
32:44:74:9c:83:72:c4:0f:a9:0e:9b:74:a3:be:e6:
22:44:d3:63:53:51:1e:1d:a8:e0:2c:e0:7a:c9:b9:
91:7b:91:cb:52:a9:57:e7:99:f6:e0:02:67:8f:5d:
80:f5:01:07:55:42:e6:ac:25:79:d6:34:da:3f:41:
8b:1b:46:d9:7c:cd:c4:65:6e:b4:9c:4e:5e:7d:a2:
5d:9f:1f:5a:28:4b:5e:c3:bd:bc:1f:16:64:35:fd:
ee:36:28:d2:21:58:b5:65:9d:b4:be:53:41:82:52:
0c:71:0b:f7:4d:83:46:57:8f:6e:be:54:3d:c2:28:
15:f2:76:de:b4:33:e0:c4:bd:c0:b6:9c:0c:98:bf:
33:23:16:1e:ee:54:fa:3d:70:4a:21:6b:19:e2:7c:
45:e3:4e:2c:52:21:28:e7:50:af:9a:6c:4d:bf:8a:
86:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1B:38:FE:99:3C:6C:28:5E:E2:42:A5:8E:BC:D3:97:54:58:6E:6B
X509v3 Authority Key Identifier:
keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a3a2f33322d3332203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5ec0::/32
Signature Algorithm: sha256WithRSAEncryption
bd:a6:92:1c:6c:55:d6:4d:50:39:f9:0f:c7:81:25:18:9e:9b:
04:c3:69:e7:bc:6c:72:01:85:30:33:60:84:13:ad:c8:de:26:
5f:74:59:df:a2:aa:1f:78:ae:e1:54:d8:05:4c:70:08:6b:1e:
21:b1:56:8b:be:d2:fd:78:2d:7e:b4:1d:ae:19:5c:c0:b0:6c:
33:5f:60:b5:56:3a:fc:70:55:69:65:de:85:c7:d1:93:10:9a:
90:4f:8c:ef:fb:2d:04:88:1a:f3:6c:f3:03:20:7f:8c:c0:0f:
ea:e6:d5:aa:63:40:a7:6e:84:d1:4d:b6:d0:ab:62:61:e5:d4:
0f:b9:13:18:1c:83:19:73:56:f6:bc:ce:dc:7e:99:7a:eb:26:
61:39:c0:db:4c:40:25:05:bf:05:d3:ec:fb:1e:29:f6:1e:b5:
95:4d:0b:ee:46:8a:eb:f5:c3:fd:e6:43:fc:cd:b9:6b:95:42:
cc:73:04:b1:5d:29:41:ee:10:b3:3d:8a:99:77:7a:af:4e:ab:
25:4f:b5:89:92:7d:5e:e9:ce:9a:93:58:13:d0:fc:2e:c5:3c:
6e:7b:58:46:db:77:5c:0f:5d:1a:04:0e:c2:26:44:c6:80:44:
03:42:00:27:4a:cd:28:28:60:94:f9:49:35:e6:70:30:76:73:
82:3c:fc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:29 2026 by rpki-client