
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094515575008264194/0/323430303a663665303a3a2f33322d3332203d3e2034353338.roa
File: 323430303a663665303a3a2f33322d3332203d3e2034353338.roa (raw, json)
Hash identifier: dZfvY3RNoTh3qofijw1u28Fhn4AvvN7Hm4pg6qTC8NI=
Subject key identifier: 16:4F:08:3A:46:51:4F:44:23:7E:9C:2F:2C:56:D7:CD:1F:15:2A:7F
Certificate issuer: /CN=F360D54AD10E3C89DA06AC0AF4E83E769B23E977
Certificate serial: 1E013F91AA4C557D9576A9CF9940B1EDE8B891D6
Authority key identifier: F3:60:D5:4A:D1:0E:3C:89:DA:06:AC:0A:F4:E8:3E:76:9B:23:E9:77
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094515575008264194/0/323430303a663665303a3a2f33322d3332203d3e2034353338.roa
Signing time: Thu 09 Apr 2026 07:06:39 +0000
ROA not before: Thu 09 Apr 2026 07:01:39 +0000
ROA not after: Thu 08 Apr 2027 07:06:39 +0000
asID: 4538
IP address blocks: 2400:f6e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094515575008264194/0/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.crl
rsync://rpki-rps.cnnic.cn/repo/A1094515575008264194/0/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 02:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:01:3f:91:aa:4c:55:7d:95:76:a9:cf:99:40:b1:ed:e8:b8:91:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F360D54AD10E3C89DA06AC0AF4E83E769B23E977
Validity
Not Before: Apr 9 07:01:39 2026 GMT
Not After : Apr 8 07:06:39 2027 GMT
Subject: CN=164F083A46514F44237E9C2F2C56D7CD1F152A7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:92:dd:32:db:9d:15:fe:c6:57:78:be:c2:34:
11:dc:fa:cc:5f:ce:c5:92:c7:54:64:c2:67:7d:24:
76:38:15:09:64:7e:3d:d8:ec:56:96:40:4b:04:92:
78:6b:ff:ac:95:67:27:4c:3b:f0:7b:0c:61:55:05:
ca:19:dd:9a:5b:fa:4e:88:0b:dc:e5:08:7c:9d:78:
04:87:44:96:77:9f:44:4f:49:9c:73:d2:83:eb:e1:
ab:d7:be:8f:ad:b1:a9:53:e1:88:33:45:df:e8:3b:
43:71:62:0e:da:cf:29:ed:32:78:2f:bd:80:4f:84:
9b:0c:0e:72:20:5e:21:21:57:5f:40:91:4c:d3:69:
d2:89:d8:f3:85:27:06:7a:94:a2:f6:6b:d7:df:b8:
8d:c3:d1:1b:3e:07:9a:2a:b4:c5:df:04:fc:28:ff:
09:58:93:af:28:ce:2e:40:dc:69:f0:cd:ba:03:d3:
88:94:5a:22:34:b6:53:0e:9b:59:10:3d:32:fa:bb:
03:09:c0:a7:31:fc:2a:4e:77:69:a9:63:da:a5:9d:
52:cc:b5:8b:55:20:5f:bd:53:dd:d2:0a:72:eb:57:
44:6f:83:b3:85:e5:5c:64:b7:01:59:98:96:8b:9e:
1a:6d:cb:e0:8f:16:35:e2:c0:93:da:34:0a:96:2f:
30:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4F:08:3A:46:51:4F:44:23:7E:9C:2F:2C:56:D7:CD:1F:15:2A:7F
X509v3 Authority Key Identifier:
keyid:F3:60:D5:4A:D1:0E:3C:89:DA:06:AC:0A:F4:E8:3E:76:9B:23:E9:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094515575008264194/0/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094515575008264194/0/323430303a663665303a3a2f33322d3332203d3e2034353338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:f6e0::/32
Signature Algorithm: sha256WithRSAEncryption
82:58:d0:74:0e:71:e7:a7:3b:05:f6:74:99:58:fd:76:4d:9f:
64:b9:8e:9e:0a:a2:af:64:9c:92:96:75:16:ab:b3:5b:52:1c:
07:73:17:23:38:8f:87:c6:14:52:f3:ae:63:da:f8:8e:d7:a8:
8e:dc:29:51:9f:63:79:f6:4f:3b:a8:29:0c:1a:71:13:30:5c:
89:40:03:f1:7a:2c:f5:11:e0:b5:a8:8e:ce:cf:4c:ae:f7:84:
c3:8e:3d:34:b5:a5:cf:f8:47:cf:b1:2c:13:c3:c7:b8:51:7e:
e4:18:c0:59:fb:dd:45:b0:3c:66:65:eb:0b:00:c1:ed:28:27:
7d:57:02:7b:6c:be:52:e9:64:91:c5:7b:9d:8a:c4:e7:0c:e0:
36:74:a7:88:1b:37:c9:64:ef:fc:7f:29:d7:0a:0f:a7:b4:6d:
85:10:ec:12:91:35:a7:d4:35:34:a5:29:80:44:e5:eb:49:6e:
f5:b9:28:96:d6:94:6e:55:87:d4:c3:68:04:4a:90:79:e5:2c:
21:74:91:a6:39:c2:e8:01:d5:12:6a:67:07:10:87:2a:32:d9:
cb:94:3b:a7:9c:43:70:16:b9:64:76:e3:bd:95:5b:02:a3:2c:
00:6c:1f:a5:fb:a6:45:cc:55:af:fa:bf:f7:ac:d5:0b:b4:d2:
2c:fc:7f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:32 2026 by rpki-client