
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/323430373a376430303a313a3a2f34382d3438203d3e20313338393135.roa
File: 323430373a376430303a313a3a2f34382d3438203d3e20313338393135.roa (raw, json)
Hash identifier: GVUrnj180FKd+SY6zIZzgnNqGMgtGlxATCY9H/0PTKQ=
Subject key identifier: 9E:6B:59:76:E8:35:B0:63:35:8C:23:D2:E7:D2:D3:93:E0:1C:32:9B
Certificate issuer: /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
Certificate serial: 07D924F828181797F2E300979A9071141242C4A4
Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/323430373a376430303a313a3a2f34382d3438203d3e20313338393135.roa
Signing time: Tue 02 Jun 2026 06:26:04 +0000
ROA not before: Tue 02 Jun 2026 06:21:04 +0000
ROA not after: Tue 01 Jun 2027 06:26:04 +0000
asID: 138915
IP address blocks: 2407:7d00:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Jun 2026 20:39:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:d9:24:f8:28:18:17:97:f2:e3:00:97:9a:90:71:14:12:42:c4:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
Validity
Not Before: Jun 2 06:21:04 2026 GMT
Not After : Jun 1 06:26:04 2027 GMT
Subject: CN=9E6B5976E835B063358C23D2E7D2D393E01C329B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c9:1a:1d:86:90:a6:3f:05:5b:0c:91:80:3e:
d6:de:05:e8:2f:d2:14:f3:80:a5:1a:be:0b:f6:28:
1c:8b:0d:f3:5f:95:99:fe:d1:e0:cb:1f:f8:dd:28:
ac:46:bb:1e:e0:67:bc:86:d6:a6:a6:67:c3:d6:40:
67:5e:99:07:6d:2e:27:58:0c:4a:d1:77:10:0f:f6:
b7:48:74:5f:0a:4c:14:54:18:c4:b3:48:fe:21:14:
6e:f5:df:28:c4:3d:25:f4:9d:82:0d:85:40:60:67:
5d:1a:60:ec:33:97:8d:65:63:c4:79:62:2c:0b:2a:
0f:5a:b9:2b:4a:fd:19:7a:0e:09:0e:a0:08:34:af:
ae:7c:b3:e6:c7:39:7d:47:43:c8:aa:21:e5:60:f5:
4e:88:8a:b1:41:27:75:97:01:34:56:ed:b9:18:ef:
cc:7e:cd:a2:1e:c1:d7:5e:7c:ae:fa:f4:7e:e5:3e:
1b:97:31:8a:c6:98:b8:41:67:14:d1:5e:d5:fb:d4:
64:08:12:a8:4c:6d:d5:b1:d3:cf:1f:c3:68:ad:9d:
59:f2:49:35:26:98:85:04:ca:ed:a4:09:3a:22:3f:
e2:75:3c:a0:47:73:a3:43:6f:3d:e2:61:d0:6d:f2:
41:e5:27:25:ae:e5:91:59:74:de:be:f8:b3:27:d0:
58:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6B:59:76:E8:35:B0:63:35:8C:23:D2:E7:D2:D3:93:E0:1C:32:9B
X509v3 Authority Key Identifier:
keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/323430373a376430303a313a3a2f34382d3438203d3e20313338393135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2407:7d00:1::/48
Signature Algorithm: sha256WithRSAEncryption
8e:fc:fd:ee:2d:84:fd:6e:7b:da:e7:8e:53:79:36:7c:06:50:
90:e9:5c:27:c6:81:ac:83:e3:c7:15:a4:0f:d0:0a:a3:4f:40:
fd:49:5d:29:4c:06:d9:56:b4:7a:f9:af:3c:df:6f:cb:3f:2d:
c8:b2:4b:2d:89:83:ca:2d:f8:82:a8:65:95:f4:d0:a2:70:9a:
e2:61:40:6d:35:92:71:17:1c:d3:44:8e:00:75:2d:11:7e:50:
a5:79:51:62:ff:f6:b0:4c:bf:2f:ad:3a:57:d4:a3:b3:56:4e:
e2:a5:0b:7d:79:ea:33:06:e2:f1:6d:82:e4:76:23:92:df:10:
68:71:e2:80:5b:c4:81:4b:e2:c7:dd:d0:ac:0f:87:96:88:a3:
a9:51:ce:4e:74:4c:4f:94:ee:ca:38:3c:b5:64:1f:e9:9c:12:
b2:84:63:21:d8:4a:4a:2f:da:a3:39:ee:7b:b5:1f:c0:4f:ca:
97:2c:f2:98:c2:c4:50:7a:56:0e:58:da:73:2f:c9:4b:a9:3a:
46:b4:1d:5a:f8:43:28:02:a0:77:28:aa:a3:a0:15:12:07:d9:
7b:d3:bb:16:0b:86:e0:92:08:5e:6d:f7:4f:41:0b:80:00:50:
d3:10:86:8d:af:45:a3:f4:60:3c:fb:ea:e8:7c:7f:46:2e:c3:
a4:82:3e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:12:38 2026 by rpki-client