
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094553714812780546/0/323430613a633063303a3a2f33322d3332203d3e20313337373236.roa
File: 323430613a633063303a3a2f33322d3332203d3e20313337373236.roa (raw, json)
Hash identifier: 1at51nd0IGgOA4YH54G2tz7k8cmIIn93vu2nRO3kz4M=
Subject key identifier: 49:7A:7C:60:E3:15:BC:92:E0:6C:10:C7:C3:70:95:21:98:12:69:09
Certificate issuer: /CN=5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C
Certificate serial: 1849378B58827D6FCD62833C89BD81A5F563DFAE
Authority key identifier: 5B:AF:D5:2D:9F:B4:A3:7C:7A:13:82:A8:EF:CC:19:AC:1A:C8:F4:8C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/323430613a633063303a3a2f33322d3332203d3e20313337373236.roa
Signing time: Thu 09 Apr 2026 09:32:20 +0000
ROA not before: Thu 09 Apr 2026 09:27:20 +0000
ROA not after: Thu 08 Apr 2027 09:32:20 +0000
asID: 137726
IP address blocks: 240a:c0c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl
rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 05:43:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:49:37:8b:58:82:7d:6f:cd:62:83:3c:89:bd:81:a5:f5:63:df:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C
Validity
Not Before: Apr 9 09:27:20 2026 GMT
Not After : Apr 8 09:32:20 2027 GMT
Subject: CN=497A7C60E315BC92E06C10C7C370952198126909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:3c:52:ae:ad:c8:ff:4b:2a:ac:25:d9:19:
74:67:79:a6:9c:c3:0d:14:e2:7e:ce:8c:f5:d4:7a:
d3:2b:59:92:a8:23:18:64:28:3f:25:a7:3a:56:fe:
3e:4d:99:99:2f:85:37:0b:22:e7:93:84:5b:ed:5d:
f9:d3:a1:db:a7:e3:d2:0e:2f:55:c4:03:d9:81:3a:
ba:af:8e:49:5f:95:d2:4f:4d:d7:ec:fa:82:4d:bc:
11:52:d7:e1:f7:cf:54:b3:d9:55:e0:10:6c:ac:69:
7e:76:c8:0f:39:c7:6f:1e:76:62:3f:85:f0:d5:16:
e7:49:0a:45:9f:62:a5:29:8e:fe:c8:f4:dd:b3:35:
4c:00:56:01:07:ce:7d:0a:c0:f4:4d:30:67:c2:57:
be:94:af:c6:78:48:73:af:0d:d4:57:3a:a6:60:3f:
98:69:57:ff:fa:ae:1e:59:e5:25:52:dd:8e:ab:fb:
cc:38:81:4e:01:e5:24:c3:bd:48:50:84:eb:75:c5:
34:82:6f:22:d1:f0:d8:c9:fd:c2:4d:e2:1b:2a:0f:
ca:f6:fd:9b:63:c1:63:2e:36:1d:68:aa:f8:d1:71:
83:94:fe:d9:70:83:af:80:12:81:e0:6a:63:5e:54:
dc:72:1f:d2:9f:2e:c6:c8:13:c4:ff:f5:51:2c:ec:
51:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7A:7C:60:E3:15:BC:92:E0:6C:10:C7:C3:70:95:21:98:12:69:09
X509v3 Authority Key Identifier:
keyid:5B:AF:D5:2D:9F:B4:A3:7C:7A:13:82:A8:EF:CC:19:AC:1A:C8:F4:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/323430613a633063303a3a2f33322d3332203d3e20313337373236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:c0c0::/32
Signature Algorithm: sha256WithRSAEncryption
09:4b:dc:33:cf:cd:e5:36:e0:5b:96:48:a0:67:e4:32:0d:46:
cb:5e:68:cf:b4:a4:cf:85:e4:9c:86:df:fc:29:1e:eb:40:6e:
24:59:51:e4:60:3e:37:9b:d1:89:fd:ff:e4:53:56:3a:30:4e:
63:ec:45:f2:02:8d:ed:6d:cc:56:47:bf:47:82:9f:32:d5:e6:
bb:3f:e7:e0:38:53:ed:44:c2:ca:80:1b:e4:2d:54:d8:49:f2:
5e:b9:6d:54:e2:30:61:93:bf:e3:db:8e:9f:72:e7:2f:8a:16:
01:5d:ed:b9:c0:c2:3a:04:a9:b5:a7:19:d9:bf:3f:0b:ad:94:
ab:07:1f:53:ae:de:dd:48:0a:b5:26:85:7b:7a:61:9f:fd:af:
74:03:2f:96:8b:59:fa:c6:b8:9e:26:14:51:a5:94:67:aa:76:
3d:ca:18:09:2e:13:b8:f4:1b:70:eb:a9:10:8f:4f:70:30:43:
a1:45:2e:5c:3d:b2:e2:80:9b:be:f8:77:c2:11:3a:f6:0a:f0:
17:78:01:d0:47:07:4a:ca:75:34:ab:f9:e2:4c:08:34:c4:21:
c8:14:50:b9:9a:a0:a0:1c:c3:64:83:92:8e:1b:de:12:22:af:
c0:4f:55:3f:85:5f:e1:26:e6:11:33:53:a3:c2:cf:32:9a:c5:
5a:e3:08:1f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:26:14 2026 by rpki-client