
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a313a3a2f34382d3438203d3e20313531333131.roa
File: 323430313a373163303a313a3a2f34382d3438203d3e20313531333131.roa (raw, json)
Hash identifier: SSqDe0AC4+heOi7kHl6pPBV6bxfcceXbNquEmO/sYXw=
Subject key identifier: 32:DC:D9:8D:F4:69:BE:97:2C:A9:C6:F0:39:59:93:39:A0:B6:93:B6
Certificate issuer: /CN=3D426BEA44C56109707602923668D40F4458FBEF
Certificate serial: 5E615168CC7732CDB13237393F570067BE24D446
Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a313a3a2f34382d3438203d3e20313531333131.roa
Signing time: Thu 04 Jun 2026 02:22:21 +0000
ROA not before: Thu 04 Jun 2026 02:17:21 +0000
ROA not after: Thu 03 Jun 2027 02:22:21 +0000
asID: 151311
IP address blocks: 2401:71c0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 02:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:61:51:68:cc:77:32:cd:b1:32:37:39:3f:57:00:67:be:24:d4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF
Validity
Not Before: Jun 4 02:17:21 2026 GMT
Not After : Jun 3 02:22:21 2027 GMT
Subject: CN=32DCD98DF469BE972CA9C6F039599339A0B693B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:55:9a:1c:e7:dc:f1:89:06:eb:4a:8f:ee:2c:
90:ab:ef:8b:a4:58:4f:1b:34:16:d5:e6:41:fa:e8:
af:65:06:69:11:6b:ee:d9:45:e1:85:77:fa:6f:45:
a6:c3:b1:2a:e1:05:52:f8:56:bf:ba:29:9c:36:27:
35:65:5b:20:38:22:a8:b1:b1:3c:26:be:1c:54:4e:
26:44:b3:d6:9d:6a:fc:55:7c:23:b5:fd:8f:38:8a:
55:bb:3a:fa:86:41:a4:b0:53:f2:2a:1b:c5:07:fa:
44:e7:66:c4:02:2f:d9:4b:a9:73:43:de:ef:06:71:
c8:6e:dd:ca:b5:c2:04:af:ca:7c:bc:dc:a0:63:df:
e9:4b:e4:48:96:42:17:85:75:cd:d6:30:9f:27:1f:
25:81:e2:09:6e:96:58:ed:ba:6b:c1:30:e5:ab:76:
7e:e3:30:c4:77:3d:02:6e:52:36:c1:5c:a9:f7:d5:
3f:e9:6e:8d:3c:ef:29:ac:80:d6:ef:37:6c:13:a9:
4f:15:a9:da:14:80:21:0b:dc:39:71:07:d4:90:f8:
0b:e7:74:77:a3:2a:32:5f:c3:b3:1f:49:32:ab:39:
ee:17:e4:7e:e3:e1:f8:7d:76:47:fc:03:3c:55:2e:
5e:69:44:26:3f:47:de:6e:05:bb:ee:4d:84:ef:94:
53:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DC:D9:8D:F4:69:BE:97:2C:A9:C6:F0:39:59:93:39:A0:B6:93:B6
X509v3 Authority Key Identifier:
keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a313a3a2f34382d3438203d3e20313531333131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:71c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
80:50:d6:26:ab:d1:25:99:bb:9e:f9:05:04:97:09:ad:cd:47:
d9:e3:04:6c:ba:7f:c8:11:ec:4b:fb:16:a9:8a:e9:7b:8f:7f:
6e:ba:e6:a2:a7:10:4b:f4:29:47:e7:ac:f7:e3:c1:a0:83:f9:
b9:2c:84:89:7a:e6:d3:5d:fb:bc:71:17:ca:3f:3b:8f:fa:a7:
60:50:1e:4f:f9:35:fd:43:fa:b5:f7:1e:64:d8:d3:51:66:2e:
32:60:46:f9:f1:a8:b2:10:2b:15:88:12:fa:67:87:a9:19:63:
97:9a:4f:dd:e4:1b:47:04:ae:7e:f3:0a:f9:53:e1:a6:d7:ef:
20:e4:b4:7f:79:eb:15:8d:86:a0:2e:6e:c5:8a:5e:0b:ba:b4:
34:d3:41:c2:fa:e4:05:9d:7c:df:84:dc:bd:7e:78:58:65:1a:
e0:57:7c:56:51:99:64:06:7c:0e:cd:f1:cd:5c:8c:63:92:1c:
38:a0:52:85:b2:0c:dd:54:d7:2d:1e:ad:7c:73:b6:96:cd:08:
ed:88:e3:ab:9e:e9:d4:2c:be:a4:39:8c:29:48:11:a4:a4:c5:
2b:9a:85:53:bd:e1:2a:45:af:de:17:32:03:34:0b:41:09:bf:
3e:53:5b:bb:4f:e2:49:bd:f7:0c:28:29:f6:0f:2e:80:96:66:
6e:0b:17:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:45:15 2026 by rpki-client