
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123911365988253733/0/323430323a366538303a3a2f33322d3332203d3e20313339313030.roa
File: 323430323a366538303a3a2f33322d3332203d3e20313339313030.roa (raw, json)
Hash identifier: vwm0wFYdrshqVC19O/olyhuC+X7rA1oBdsrwCje/4V0=
Subject key identifier: A2:5E:FB:35:F8:38:92:18:8E:50:92:53:91:8D:17:2B:79:14:F5:B2
Certificate issuer: /CN=12BD80FB666E9FF3B78C5257CB80604CE466A620
Certificate serial: 183B794E9A05F952E2C4291230221ED40C41E8D4
Authority key identifier: 12:BD:80:FB:66:6E:9F:F3:B7:8C:52:57:CB:80:60:4C:E4:66:A6:20
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/12BD80FB666E9FF3B78C5257CB80604CE466A620.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/323430323a366538303a3a2f33322d3332203d3e20313339313030.roa
Signing time: Mon 29 Jun 2026 10:05:31 +0000
ROA not before: Mon 29 Jun 2026 10:00:31 +0000
ROA not after: Mon 28 Jun 2027 10:05:31 +0000
asID: 139100
IP address blocks: 2402:6e80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.crl
rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/12BD80FB666E9FF3B78C5257CB80604CE466A620.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 12:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:3b:79:4e:9a:05:f9:52:e2:c4:29:12:30:22:1e:d4:0c:41:e8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12BD80FB666E9FF3B78C5257CB80604CE466A620
Validity
Not Before: Jun 29 10:00:31 2026 GMT
Not After : Jun 28 10:05:31 2027 GMT
Subject: CN=A25EFB35F83892188E509253918D172B7914F5B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:76:13:65:3f:14:2f:ef:b2:af:db:9f:bd:10:
16:a5:f3:47:71:1c:5c:66:96:b7:82:e2:8d:4d:cc:
4d:13:51:05:86:3e:8d:d4:bc:8c:2c:23:41:4a:59:
78:ba:91:44:6d:44:89:22:ec:b3:e9:23:7a:6d:68:
41:32:6a:c3:a7:66:6a:83:97:97:73:c7:7e:f5:07:
b6:0d:ab:62:3d:b7:9a:4a:bb:ab:7a:d4:f2:44:5a:
cc:16:03:06:26:54:86:4b:39:af:96:a2:37:e5:f7:
57:42:e4:3c:0b:4f:9e:0d:b2:ad:f2:f7:bd:55:30:
10:a7:31:27:ba:63:cf:ed:62:14:b8:a4:75:3c:ec:
65:1d:66:09:62:ea:c5:79:2d:7b:b4:28:f8:23:b5:
87:5e:81:18:4d:2f:15:14:58:d2:7e:1a:3c:bd:f5:
44:36:62:3f:b9:cf:7b:cd:e7:e9:d0:c1:d7:8b:67:
99:bf:da:5f:03:54:c2:6a:7e:ca:0c:00:3f:65:75:
ae:c4:3a:d7:36:72:08:5f:8f:d1:67:e3:82:a9:da:
58:03:f4:d6:f8:42:ad:7f:e9:42:a0:6b:d1:4a:cc:
97:fd:f3:29:57:37:ff:59:fa:65:b0:34:32:8e:5a:
d4:19:48:67:c9:89:d5:ef:8f:56:2b:ab:a7:17:b8:
72:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5E:FB:35:F8:38:92:18:8E:50:92:53:91:8D:17:2B:79:14:F5:B2
X509v3 Authority Key Identifier:
keyid:12:BD:80:FB:66:6E:9F:F3:B7:8C:52:57:CB:80:60:4C:E4:66:A6:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/12BD80FB666E9FF3B78C5257CB80604CE466A620.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/323430323a366538303a3a2f33322d3332203d3e20313339313030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:6e80::/32
Signature Algorithm: sha256WithRSAEncryption
bc:cc:df:17:3e:89:ad:92:78:e0:98:0f:68:b1:d2:cb:2d:18:
ce:cc:37:26:5d:24:0c:e4:c7:72:24:2d:3b:48:1b:86:e8:9b:
0a:46:83:fe:e4:bc:f2:c0:25:94:3c:68:e3:ca:98:df:1e:62:
cc:74:83:b0:5c:cb:90:d5:21:81:66:15:48:1d:18:51:6a:95:
64:75:38:15:14:0c:8c:b5:98:31:04:e9:21:ed:74:15:d3:b5:
63:5e:ad:09:a5:af:b0:71:e6:3f:10:fc:c7:66:5c:2c:5a:8e:
c2:ed:18:6d:68:41:47:a9:ef:5f:48:c2:a1:25:fe:8f:cf:59:
6d:ed:76:5c:ff:b4:40:d9:94:63:53:fd:07:a9:f6:0c:b5:97:
f4:2d:2c:8d:f0:a5:a8:bb:1a:3f:a3:5c:c4:7a:85:32:02:c9:
8c:cc:2f:bb:72:e0:05:b8:77:c1:1e:99:89:dd:13:05:d8:65:
f0:1a:f0:ad:8b:6a:4e:3a:45:40:f5:c1:07:ef:3f:7c:73:7b:
85:5e:26:30:a7:4b:79:05:c0:5e:89:64:6d:a3:54:02:d6:25:
82:42:f6:38:cd:a7:80:0a:d6:b5:9d:ba:aa:c5:11:74:02:79:
fb:5e:f7:de:87:ff:70:ea:a8:ba:81:f5:0f:cb:9a:7b:fc:fc:
e5:6c:ff:df
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:14 2026 by rpki-client