
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091911004482240513/0/323430323a333665303a643a3a2f34382d3438203d3e20313336313935.roa
File: 323430323a333665303a643a3a2f34382d3438203d3e20313336313935.roa (raw, json)
Hash identifier: vZdt/IJ7AD7PpWTEAs0AtcXm/pHXXDb9lBYbdsxgWVo=
Subject key identifier: 38:10:F1:BF:A3:21:93:89:D0:7E:6A:19:6C:6E:15:D5:B0:C4:EA:ED
Certificate issuer: /CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
Certificate serial: 059B8AB371F9FB55004847CDC23E6DADA09DF7F2
Authority key identifier: F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/323430323a333665303a643a3a2f34382d3438203d3e20313336313935.roa
Signing time: Wed 01 Jul 2026 09:31:16 +0000
ROA not before: Wed 01 Jul 2026 09:26:16 +0000
ROA not after: Wed 30 Jun 2027 09:31:16 +0000
asID: 136195
IP address blocks: 2402:36e0:d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl
rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:9b:8a:b3:71:f9:fb:55:00:48:47:cd:c2:3e:6d:ad:a0:9d:f7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
Validity
Not Before: Jul 1 09:26:16 2026 GMT
Not After : Jun 30 09:31:16 2027 GMT
Subject: CN=3810F1BFA3219389D07E6A196C6E15D5B0C4EAED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cd:d3:37:fc:9c:8d:6a:9f:83:46:e9:60:d5:
b2:66:e0:86:7f:96:d6:24:e7:69:17:d6:46:7b:a5:
ee:4b:1c:d2:95:f1:37:d2:59:39:31:43:46:d6:57:
07:2f:0e:68:7f:3c:ae:02:b4:dd:db:37:b4:16:39:
1e:70:2d:00:05:cd:f4:fe:7a:1a:c4:43:d9:77:40:
3a:a7:6c:a2:76:f8:43:28:24:a6:2b:76:4f:87:9c:
a2:8b:c4:13:81:00:27:3c:ef:2b:3e:14:24:cf:17:
ce:2c:41:d0:cf:3e:d2:13:c0:79:fc:1c:2a:b6:b3:
a7:f9:e0:cd:17:48:6e:a2:88:96:32:78:07:d6:58:
6c:1c:0e:e6:39:90:b9:e2:f3:e2:8e:cc:6f:2e:9b:
e4:4d:03:21:e2:a6:58:14:ee:cd:4e:08:21:f8:00:
8a:24:4a:2a:2a:bf:55:7e:26:17:a1:bc:0c:d5:d7:
6a:5b:b3:86:b9:fd:12:74:4b:1a:0f:98:6a:4b:3d:
96:7f:8e:1f:cd:9b:7d:33:82:3a:42:5b:08:db:04:
e0:39:d2:a8:c9:76:4b:48:00:28:ba:82:54:99:94:
28:a1:25:97:4c:60:ee:88:e6:4a:4f:95:7e:18:49:
f0:0c:5e:fc:36:a1:b5:ac:f4:0c:fe:54:ee:bc:df:
d0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:10:F1:BF:A3:21:93:89:D0:7E:6A:19:6C:6E:15:D5:B0:C4:EA:ED
X509v3 Authority Key Identifier:
keyid:F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/323430323a333665303a643a3a2f34382d3438203d3e20313336313935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:36e0:d::/48
Signature Algorithm: sha256WithRSAEncryption
7b:72:b9:ee:f2:46:0b:a4:1d:20:d2:c4:5f:0e:37:53:4a:60:
e9:ef:18:e7:c4:f6:dd:49:25:87:4f:5c:4d:a8:c5:1a:ab:df:
fa:10:84:a3:ec:d8:23:b4:5d:04:3c:63:3b:b7:14:aa:47:3e:
25:00:ff:6d:f9:ee:9f:77:bb:68:a3:f0:e5:13:d6:12:1f:de:
bf:26:ac:84:b2:61:88:10:8b:41:3f:58:e5:27:34:d5:0b:f4:
8c:da:7a:13:6d:53:3b:da:0d:43:ad:ee:45:ea:e8:7a:80:12:
51:48:48:a7:95:d6:4e:61:48:fe:96:ae:11:47:5c:b3:20:f5:
3e:66:b4:aa:2a:7c:b8:7c:1c:30:af:1b:90:e3:cd:40:fc:ff:
37:de:00:52:90:4e:33:63:2b:50:12:ff:01:c2:0f:5f:da:04:
6a:b7:62:19:ac:19:88:1f:ad:31:2c:b3:2a:a5:cf:7c:5b:2c:
3a:c1:02:92:09:74:89:df:a1:f1:71:e9:38:79:0c:27:7a:25:
eb:32:b7:e7:ff:15:f9:ff:4a:e8:6c:01:ed:3e:cd:b6:8b:83:
7a:83:68:a8:9a:23:ca:90:59:38:81:ee:31:49:f1:03:a0:3f:
89:65:df:89:4f:a1:74:db:7c:07:7e:73:80:5c:08:93:41:95:
ce:6e:ff:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:00 2026 by rpki-client