
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094436162547744770/0/323430313a643738303a3a2f34382d3438203d3e20313331353036.roa
File: 323430313a643738303a3a2f34382d3438203d3e20313331353036.roa (raw, json)
Hash identifier: IpsexcgtGyJ+z3cYrXzZ6SOiKsWTzQyQl49/exqd790=
Subject key identifier: 1A:82:82:C9:0C:7C:9D:8A:CF:EB:02:EA:06:FF:E7:F5:42:BC:6E:AD
Certificate issuer: /CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163
Certificate serial: 49F267580A618C0B3DD897B3EAF2AD2908869663
Authority key identifier: EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/323430313a643738303a3a2f34382d3438203d3e20313331353036.roa
Signing time: Thu 09 Apr 2026 02:00:18 +0000
ROA not before: Thu 09 Apr 2026 01:55:18 +0000
ROA not after: Thu 08 Apr 2027 02:00:18 +0000
asID: 131506
IP address blocks: 2401:d780::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl
rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 12:29:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:f2:67:58:0a:61:8c:0b:3d:d8:97:b3:ea:f2:ad:29:08:86:96:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163
Validity
Not Before: Apr 9 01:55:18 2026 GMT
Not After : Apr 8 02:00:18 2027 GMT
Subject: CN=1A8282C90C7C9D8ACFEB02EA06FFE7F542BC6EAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c0:b8:fb:0b:90:6f:30:ac:3e:e2:a8:e4:11:
58:91:15:a1:bc:df:12:bf:41:35:6e:8f:83:4a:31:
3e:e8:6c:a9:e8:28:e7:c2:bd:c5:8f:3c:28:88:b8:
ee:5f:e2:49:56:35:27:c2:73:c6:6c:19:e2:0a:e1:
c6:7e:90:13:32:1a:ca:d1:7c:5f:f8:54:7e:0b:12:
87:a2:b6:63:42:85:e7:5d:4d:ca:ce:30:1a:d7:4b:
41:54:f7:da:81:0e:fa:55:01:aa:9c:9d:87:af:8a:
56:72:04:41:f5:be:c1:35:cb:ce:84:29:00:6c:58:
13:ed:04:72:fe:2d:62:0f:41:6c:e1:a6:6f:1b:3b:
7f:0a:e7:67:8b:eb:07:b4:c5:7c:2a:3e:d7:37:63:
95:ec:4f:1a:5f:54:42:fe:6f:c5:02:8c:83:62:0e:
9a:e6:3d:45:5d:7b:99:9f:f4:11:c9:55:a2:fd:f7:
ef:f6:d3:f0:8b:19:2d:a8:f0:2b:b4:07:42:71:f6:
20:2e:c3:35:e5:54:40:8d:95:9e:96:39:62:c6:1a:
26:90:b2:d7:9e:37:d1:74:e0:a2:90:3f:e7:ae:6e:
54:8d:09:82:7e:ee:e0:08:96:75:32:4c:23:6e:dc:
0b:98:ab:cc:e5:d5:8f:fa:bb:b5:82:c9:6e:fb:3b:
d0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:82:82:C9:0C:7C:9D:8A:CF:EB:02:EA:06:FF:E7:F5:42:BC:6E:AD
X509v3 Authority Key Identifier:
keyid:EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/323430313a643738303a3a2f34382d3438203d3e20313331353036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:d780::/48
Signature Algorithm: sha256WithRSAEncryption
70:58:e8:95:02:dd:5d:3f:d9:43:a0:2b:31:11:16:82:1a:c6:
7d:93:08:d8:5b:2c:77:2b:bf:75:f3:d9:67:9f:3e:0f:4d:80:
cb:bc:68:bc:e0:c0:1c:62:2e:31:de:ac:d5:93:29:a4:ea:13:
09:c1:6d:76:6f:1f:03:fa:e6:60:d9:aa:04:3b:79:36:10:94:
30:c0:9b:73:4d:cb:34:67:c9:d7:5f:2e:16:d1:37:f1:1b:4e:
8d:b3:56:27:59:c9:37:b8:ad:1b:43:6d:44:51:b4:7d:b0:5e:
fc:43:ec:e7:38:46:d9:b8:24:fa:97:0d:a0:ff:0a:7f:b7:11:
0a:fc:6b:f9:7c:87:2a:19:ac:d7:ac:a1:34:5a:6a:99:6f:74:
d8:e8:1c:b7:e5:be:79:77:63:66:ce:3f:8d:c2:2f:35:6f:a2:
72:26:98:2f:66:0d:c9:6d:d3:96:80:e6:d2:17:70:75:c7:35:
08:6d:c3:54:64:8d:71:1c:4d:9b:df:49:4e:62:87:5c:74:ba:
92:c1:b5:10:56:11:6a:75:0f:f9:f7:f0:c7:bd:e1:c4:c0:fe:
74:b4:03:13:e8:9c:e6:61:84:c6:dd:82:43:a0:ee:2a:b9:1b:
2c:c5:d4:40:45:5b:fa:26:90:05:f7:5c:43:82:a4:04:ae:87:
10:7a:1d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:56:16 2026 by rpki-client