
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a31333a3a2f34382d3438203d3e20313531333131.roa
File: 323430313a373163303a31333a3a2f34382d3438203d3e20313531333131.roa (raw, json)
Hash identifier: WiMcM3bKuhsyBK0L1R0gZGsnrkG9ox3Z4wW87SIq1uQ=
Subject key identifier: CD:6A:F1:D2:27:C5:B4:9D:68:0C:E9:8C:D9:27:DC:8F:0E:64:74:90
Certificate issuer: /CN=3D426BEA44C56109707602923668D40F4458FBEF
Certificate serial: 4573648EDE7A29C534080E87BEB9E6A7C33BCAB9
Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a31333a3a2f34382d3438203d3e20313531333131.roa
Signing time: Thu 04 Jun 2026 02:24:54 +0000
ROA not before: Thu 04 Jun 2026 02:19:54 +0000
ROA not after: Thu 03 Jun 2027 02:24:54 +0000
asID: 151311
IP address blocks: 2401:71c0:13::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 02:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:73:64:8e:de:7a:29:c5:34:08:0e:87:be:b9:e6:a7:c3:3b:ca:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF
Validity
Not Before: Jun 4 02:19:54 2026 GMT
Not After : Jun 3 02:24:54 2027 GMT
Subject: CN=CD6AF1D227C5B49D680CE98CD927DC8F0E647490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4c:20:c8:d3:04:5a:3c:cf:34:40:e4:49:b0:
44:55:be:1a:6d:aa:09:03:55:d9:7e:f3:f3:b3:b6:
89:9b:85:51:c2:17:be:ed:8b:f5:c1:bc:29:34:bf:
ec:2c:54:80:89:4f:6d:1e:e4:37:11:7a:80:ad:51:
d3:b5:0f:84:a1:bd:a5:00:63:84:dc:75:09:06:b8:
e1:64:f5:0e:33:15:a1:2e:1f:3e:77:15:20:ee:4c:
9e:49:5c:c3:38:05:1c:e8:7e:3a:76:b0:45:39:43:
78:8b:e6:90:67:db:48:23:7e:b3:ef:c1:7b:35:9d:
49:d1:f4:de:4c:16:07:db:5e:35:54:33:62:f7:bd:
ef:74:bc:ea:55:fe:3d:ee:36:d0:2c:40:9b:ac:36:
f4:64:05:65:33:b6:82:97:52:73:83:0b:66:33:e9:
04:5a:ff:3d:1e:a7:ed:19:38:12:a7:ad:d1:ba:d0:
01:f0:73:26:5e:8a:8f:a9:40:95:b0:89:98:57:0e:
7d:bd:e5:c6:1f:1f:b5:bd:9f:23:33:2d:40:ee:ef:
54:c3:46:b0:9b:90:1f:c7:7d:cf:a1:fe:96:aa:d7:
66:11:55:65:2e:80:b4:9b:2d:3c:42:4d:fa:bb:51:
8f:4f:11:0f:b4:70:7c:fb:cd:86:ce:fd:e6:d6:ad:
ca:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6A:F1:D2:27:C5:B4:9D:68:0C:E9:8C:D9:27:DC:8F:0E:64:74:90
X509v3 Authority Key Identifier:
keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a31333a3a2f34382d3438203d3e20313531333131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:71c0:13::/48
Signature Algorithm: sha256WithRSAEncryption
76:0c:5f:c6:1c:fa:97:22:3c:09:9b:8d:ce:5f:42:c6:86:f2:
03:17:b8:89:48:47:b0:0c:fe:b5:d5:e0:e7:07:48:c9:88:ca:
7a:30:e7:69:4e:1f:b8:2e:56:9b:6f:42:08:f7:74:e6:9e:81:
56:79:bc:0b:0a:d5:66:7e:0b:20:fc:a8:37:93:dd:6c:7d:99:
ac:ce:16:fc:1e:04:9d:2b:47:8d:d2:45:99:61:0e:2b:68:66:
27:18:31:26:c3:e4:86:4a:1d:c7:8b:bc:90:6d:ee:4d:b6:9e:
6c:52:a8:33:87:1c:84:4b:c3:2e:21:53:7d:7e:66:85:ba:42:
a6:04:c2:19:ee:e7:f4:a6:60:17:b7:c9:72:ac:da:49:33:dd:
d7:03:35:55:15:2d:7b:f9:58:78:69:4d:54:01:6d:b2:30:64:
dd:9d:12:1d:6e:58:70:81:8c:ac:fa:a8:10:f0:b6:ba:0d:66:
47:94:2b:80:14:96:e6:23:16:9b:a9:83:62:7b:fb:04:aa:4b:
c7:e9:99:3b:86:f8:19:82:2d:f1:37:70:b2:17:a4:c3:e1:f0:
9c:b6:df:9f:81:89:7c:c6:88:03:df:d5:b1:f2:d2:c7:ed:2f:
a0:7c:9c:cc:e8:50:b2:ea:a1:66:11:67:21:a1:16:5d:08:ee:
ef:82:e3:2d
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgIURXNkjt56KcU0CA6Hvrnmp8M7yrkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0
NDU4RkJFRjAeFw0yNjA2MDQwMjE5NTRaFw0yNzA2MDMwMjI0NTRaMDMxMTAvBgNV
BAMTKENENkFGMUQyMjdDNUI0OUQ2ODBDRTk4Q0Q5MjdEQzhGMEU2NDc0OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdTCDI0wRaPM80QORJsERVvhpt
qgkDVdl+8/OztombhVHCF77ti/XBvCk0v+wsVICJT20e5DcReoCtUdO1D4ShvaUA
Y4TcdQkGuOFk9Q4zFaEuHz53FSDuTJ5JXMM4BRzofjp2sEU5Q3iL5pBn20gjfrPv
wXs1nUnR9N5MFgfbXjVUM2L3ve90vOpV/j3uNtAsQJusNvRkBWUztoKXUnODC2Yz
6QRa/z0ep+0ZOBKnrdG60AHwcyZeio+pQJWwiZhXDn295cYfH7W9nyMzLUDu71TD
RrCbkB/Hfc+h/paq12YRVWUugLSbLTxCTfq7UY9PEQ+0cHz7zYbO/ebWrco/AgMB
AAGjggIfMIICGzAdBgNVHQ4EFgQUzWrx0ifFtJ1oDOmM2Sfcjw5kdJAwHwYDVR0j
BBgwFoAUPUJr6kTFYQlwdgKSNmjUD0RY++8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDgwODQwOTQ0Nzg1ODE3OS8wLzNENDI2QkVBNDRDNTYxMDk3MDc2MDI5MjM2NjhE
NDBGNDQ1OEZCRUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0NDU4RkJFRi5jZXIw
gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDk0ODA4NDA5NDQ3ODU4MTc5LzAvMzIzNDMwMzEz
YTM3MzE2MzMwM2EzMTMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMxMzMz
MTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcAJAFxwAATMA0GCSqGSIb3DQEBCwUAA4IBAQB2DF/GHPqX
IjwJm43OX0LGhvIDF7iJSEewDP611eDnB0jJiMp6MOdpTh+4Llabb0II93TmnoFW
ebwLCtVmfgsg/Kg3k91sfZmszhb8HgSdK0eN0kWZYQ4raGYnGDEmw+SGSh3Hi7yQ
be5Ntp5sUqgzhxyES8MuIVN9fmaFukKmBMIZ7uf0pmAXt8lyrNpJM93XAzVVFS17
+Vh4aU1UAW2yMGTdnRIdblhwgYys+qgQ8La6DWZHlCuAFJbmIxabqYNie/sEqkvH
6Zk7hvgZgi3xN3CyF6TD4fCctt+fgYl8xogD39Wx8tLH7S+gfJzM6FCy6qFmEWch
oRZdCO7vguMt
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:45:15 2026 by rpki-client