
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094515575008264194/0/323430303a663665303a3a2f33322d3332203d3e2034383437.roa
File: 323430303a663665303a3a2f33322d3332203d3e2034383437.roa (raw, json)
Hash identifier: q8pNtYg37mnzCRV+B0OR/ZjEtbIsMDmu2RkagFgKEtI=
Subject key identifier: FF:38:D9:8A:8C:88:23:3E:C8:E1:D8:54:71:5D:8C:D6:83:FE:6F:AE
Certificate issuer: /CN=F360D54AD10E3C89DA06AC0AF4E83E769B23E977
Certificate serial: 73784734B339B57395AC9576C502AE9C803F1AA8
Authority key identifier: F3:60:D5:4A:D1:0E:3C:89:DA:06:AC:0A:F4:E8:3E:76:9B:23:E9:77
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094515575008264194/0/323430303a663665303a3a2f33322d3332203d3e2034383437.roa
Signing time: Thu 09 Apr 2026 07:06:39 +0000
ROA not before: Thu 09 Apr 2026 07:01:39 +0000
ROA not after: Thu 08 Apr 2027 07:06:39 +0000
asID: 4847
IP address blocks: 2400:f6e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094515575008264194/0/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.crl
rsync://rpki-rps.cnnic.cn/repo/A1094515575008264194/0/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 02:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:78:47:34:b3:39:b5:73:95:ac:95:76:c5:02:ae:9c:80:3f:1a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F360D54AD10E3C89DA06AC0AF4E83E769B23E977
Validity
Not Before: Apr 9 07:01:39 2026 GMT
Not After : Apr 8 07:06:39 2027 GMT
Subject: CN=FF38D98A8C88233EC8E1D854715D8CD683FE6FAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3f:99:e0:84:31:84:dc:66:66:4b:3d:b3:1a:
c4:b0:c2:f4:b5:39:7a:2d:be:95:22:0b:7e:3e:db:
89:67:11:0d:70:87:b8:01:7c:7d:06:36:1f:a8:58:
f1:37:42:de:15:4f:9e:cc:cb:03:c5:95:da:60:94:
2a:24:bb:d7:8f:d0:93:60:82:b5:b1:61:48:d1:61:
2e:36:49:2e:58:49:59:7a:52:7c:ae:87:4e:2f:79:
37:05:ac:82:8f:2f:b6:bd:c3:98:e0:10:2a:25:d0:
fd:f2:d3:f0:b5:0d:9d:17:b9:27:21:a5:bb:25:a2:
2a:b5:87:3c:12:76:09:20:6a:a3:7f:87:f8:89:e1:
08:a4:f6:a2:5e:b7:05:ac:9e:cf:45:1d:55:bd:4c:
72:e7:73:35:93:2b:40:f2:6c:75:09:b3:37:98:b2:
40:ed:40:24:e6:e4:78:f0:21:e2:0b:9f:cc:ee:24:
78:62:54:1f:28:d7:25:e5:fa:ea:10:20:65:d4:57:
68:53:37:83:bd:73:b6:93:a2:f6:49:77:09:45:af:
05:8c:40:d6:e4:8e:70:b2:b5:1b:22:51:38:c9:08:
b0:b7:12:03:ea:e4:0c:a2:47:8b:7b:ee:7c:6d:76:
f0:91:b9:5b:94:06:e8:b3:2f:5f:97:17:a2:51:19:
da:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:38:D9:8A:8C:88:23:3E:C8:E1:D8:54:71:5D:8C:D6:83:FE:6F:AE
X509v3 Authority Key Identifier:
keyid:F3:60:D5:4A:D1:0E:3C:89:DA:06:AC:0A:F4:E8:3E:76:9B:23:E9:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094515575008264194/0/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094515575008264194/0/323430303a663665303a3a2f33322d3332203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:f6e0::/32
Signature Algorithm: sha256WithRSAEncryption
6f:17:95:86:7f:74:90:4b:d4:a6:b1:30:03:3e:04:1d:35:3c:
37:f7:a6:f3:d4:bf:88:cb:a5:0e:f0:70:20:4c:b8:d2:72:a2:
4b:57:b2:da:21:a8:dc:50:eb:50:00:f5:60:57:48:eb:47:6d:
0a:ae:7e:8c:c0:71:74:27:28:41:fc:6b:c3:32:fe:8f:8c:64:
03:27:c5:99:5d:b7:df:2e:52:08:7f:a5:f9:c1:df:b3:7e:64:
81:6e:b2:26:55:ba:84:aa:2b:4b:e0:7e:82:15:e5:a0:b5:21:
db:a7:c6:2d:9a:95:8d:a9:39:f6:a8:08:25:2c:d4:9e:f7:ad:
52:df:ac:73:0f:a8:6f:06:01:84:02:20:14:92:ba:15:a4:03:
8f:9d:6c:17:0d:56:2e:db:0c:a2:56:62:ed:bb:ba:a4:c6:b2:
17:f3:3b:ac:62:42:bf:54:13:8b:c4:9b:b6:6b:38:5a:7d:85:
51:69:69:6c:ec:69:ca:ca:62:ce:f9:e2:2b:32:e1:1b:b0:fd:
a9:b3:4f:77:a1:ca:0c:98:67:4b:14:aa:97:dc:e8:bf:6c:55:
9a:7b:0e:9b:a7:41:82:cd:dd:76:95:0c:dd:01:9d:3e:1e:a1:
55:56:e5:34:72:06:b4:62:d2:8b:53:75:d7:46:ed:41:8a:5a:
e2:22:a0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:29 2026 by rpki-client