
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/323430303a333230303a3a2f33322d3438203d3e203337393633.roa
File: 323430303a333230303a3a2f33322d3438203d3e203337393633.roa (raw, json)
Hash identifier: 84KGuo7uycI86P+zGluBpQctc6Hs2B2jLaIXej6cm94=
Subject key identifier: 31:F1:77:DF:9F:47:A3:B0:C9:33:82:E9:F9:95:9E:E2:35:2F:53:EF
Certificate issuer: /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
Certificate serial: 4B97800871AFC3DDCF14504B0B9AF88235C2096B
Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/323430303a333230303a3a2f33322d3438203d3e203337393633.roa
Signing time: Thu 14 May 2026 02:15:42 +0000
ROA not before: Thu 14 May 2026 02:10:42 +0000
ROA not after: Thu 13 May 2027 02:15:42 +0000
asID: 37963
IP address blocks: 2400:3200::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Jun 2026 23:56:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:97:80:08:71:af:c3:dd:cf:14:50:4b:0b:9a:f8:82:35:c2:09:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
Validity
Not Before: May 14 02:10:42 2026 GMT
Not After : May 13 02:15:42 2027 GMT
Subject: CN=31F177DF9F47A3B0C93382E9F9959EE2352F53EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9c:b3:8a:ee:44:fe:ab:16:cc:6d:00:4f:c0:
72:bc:55:1e:4c:28:c7:87:f5:d0:60:23:37:4a:08:
26:b1:05:7b:62:82:40:3c:ac:d0:ae:c3:ee:86:96:
e1:63:0b:0b:c1:c7:61:da:23:f6:3b:12:35:4c:67:
26:db:6e:c8:04:32:e0:6f:17:85:5d:1d:d4:2c:45:
83:d3:b4:46:f5:02:a8:13:78:58:67:96:6f:91:da:
bf:75:38:4e:e3:18:5e:cb:e2:01:66:64:ac:6e:93:
90:ed:ae:33:6d:2d:61:20:e0:be:e3:63:7d:05:36:
ee:09:c6:d7:fb:46:f1:f2:44:07:48:76:11:2b:45:
7a:d7:bb:14:63:c9:0c:5d:24:f4:84:83:7e:07:d8:
77:39:79:c4:f3:64:11:d2:65:d3:27:7c:a4:ae:3e:
ad:93:67:ec:fa:f7:13:df:b1:4a:a6:dd:34:90:d5:
d1:ea:8d:69:bc:fa:d1:d2:df:72:d1:eb:91:95:b1:
d6:15:35:d0:74:fc:1e:f3:f7:f8:c3:2d:dd:f8:27:
79:e8:5d:0b:72:30:3d:f1:3f:e8:27:06:88:e5:ec:
67:06:1a:5e:41:c8:06:19:f9:02:94:1f:50:38:3a:
e7:f1:be:fb:54:07:a0:8a:1b:e2:44:ff:64:10:c8:
12:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F1:77:DF:9F:47:A3:B0:C9:33:82:E9:F9:95:9E:E2:35:2F:53:EF
X509v3 Authority Key Identifier:
keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/323430303a333230303a3a2f33322d3438203d3e203337393633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:3200::/32
Signature Algorithm: sha256WithRSAEncryption
43:f0:01:94:fb:41:2d:a6:7c:46:0a:9c:35:0b:ea:f2:9f:17:
70:bc:b5:cc:f8:b6:b6:96:46:8a:5b:85:57:44:dd:43:65:2d:
ad:ce:87:97:67:96:15:db:cd:c6:9e:2e:14:9e:ef:40:16:7a:
fc:f2:ca:e5:8d:54:7c:aa:78:6c:2e:de:96:3c:dd:b4:69:1f:
f7:93:f5:7d:88:ee:db:5e:d4:39:c0:ea:58:c4:3f:77:ed:1e:
3a:ee:b9:c8:eb:54:eb:22:86:4f:00:e4:98:de:8a:c8:14:6d:
fa:e0:39:11:91:5b:41:bb:cf:1a:b3:3d:32:a5:af:4b:c2:1e:
73:8b:60:ff:ad:40:19:e3:e6:d8:dd:29:3e:66:a7:ac:5c:c1:
89:80:43:c0:4a:d2:40:71:ee:25:20:94:a8:e1:20:62:13:ee:
6b:a4:e3:51:97:b9:8e:0e:93:03:f0:98:45:ad:c6:e4:c5:17:
e1:e6:ee:74:bb:46:71:bd:04:7b:79:38:95:71:d0:33:f8:69:
c3:27:c4:55:50:bb:47:fd:0c:e0:19:31:a7:6a:ed:33:f1:89:
7b:98:75:f5:05:39:85:3c:05:73:b6:6a:c5:15:a8:bc:97:6a:
e0:7f:6c:e3:2c:b3:b8:05:d2:4d:2c:c6:c3:86:5c:79:d7:fd:
80:61:cb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:18:26 2026 by rpki-client