
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a323a3a2f34382d3438203d3e20313531333131.roa
File: 323430313a373163303a323a3a2f34382d3438203d3e20313531333131.roa (raw, json)
Hash identifier: uDlBzjn3L0cklFhv6hm/LcPAhzJ3kKICyF4GIhe3oS0=
Subject key identifier: C3:F2:0A:32:D3:ED:2B:7F:89:BA:A1:08:8F:3B:5A:E1:D3:07:6D:D9
Certificate issuer: /CN=3D426BEA44C56109707602923668D40F4458FBEF
Certificate serial: 2E8C8004A179A6BCB6075C88D9EFD46CADC71080
Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a323a3a2f34382d3438203d3e20313531333131.roa
Signing time: Thu 04 Jun 2026 02:22:32 +0000
ROA not before: Thu 04 Jun 2026 02:17:32 +0000
ROA not after: Thu 03 Jun 2027 02:22:32 +0000
asID: 151311
IP address blocks: 2401:71c0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 02:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:8c:80:04:a1:79:a6:bc:b6:07:5c:88:d9:ef:d4:6c:ad:c7:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF
Validity
Not Before: Jun 4 02:17:32 2026 GMT
Not After : Jun 3 02:22:32 2027 GMT
Subject: CN=C3F20A32D3ED2B7F89BAA1088F3B5AE1D3076DD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7e:c3:30:3d:10:d7:cc:ab:88:46:7f:43:99:
5e:c8:c8:6a:21:2f:86:b5:1e:49:d6:5b:af:7e:f2:
97:74:41:8c:b3:a9:37:9c:d1:7d:3f:34:91:43:58:
9e:57:4f:b5:9a:50:87:ef:5b:ec:a0:3c:28:ca:18:
41:fe:85:3e:23:25:5c:e9:b9:91:14:0d:c7:ee:1b:
56:47:ca:0a:f4:b1:b0:ee:1b:00:bf:9b:65:70:1d:
44:ea:0b:ac:6b:f0:1e:08:1d:3d:00:8f:5e:f1:05:
10:5f:61:2c:b9:a7:97:94:fe:9f:84:51:76:47:de:
d7:08:fd:29:76:d2:8b:7f:49:ef:2f:63:69:b0:5f:
0e:99:ef:8b:46:7f:bc:83:f9:9b:7a:28:14:9b:9e:
2e:18:32:28:b8:fe:e1:c5:17:e9:f0:bf:e6:44:ab:
c3:40:70:92:c7:6a:c4:cf:b5:dc:48:44:74:fe:c7:
af:25:af:ac:35:63:ec:4b:c4:12:2d:7f:56:cd:9d:
5c:18:a8:46:9d:86:ea:dc:d5:82:cd:9b:2d:3b:9e:
99:7e:dd:67:76:96:28:73:93:66:50:78:b4:b8:ba:
1e:e4:60:fb:73:dd:27:52:72:1a:de:2f:f5:42:50:
4a:4e:df:6f:7a:a9:80:1d:de:4b:a9:ac:fd:cf:94:
15:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F2:0A:32:D3:ED:2B:7F:89:BA:A1:08:8F:3B:5A:E1:D3:07:6D:D9
X509v3 Authority Key Identifier:
keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a323a3a2f34382d3438203d3e20313531333131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:71c0:2::/48
Signature Algorithm: sha256WithRSAEncryption
3f:a1:dd:8a:92:0e:29:67:34:59:f4:46:6b:60:89:85:23:23:
75:92:9a:d3:e8:fc:6a:36:9b:e1:93:e9:55:af:98:3f:b6:44:
9e:8b:db:58:33:7b:41:5c:22:18:02:c7:3f:c0:fe:a6:da:d2:
92:e5:d9:6e:1a:47:91:e3:19:a3:04:78:2f:41:d0:64:9e:98:
55:74:52:35:32:de:ba:5c:77:21:3e:a2:ba:07:0c:c4:34:02:
f5:22:d7:25:84:38:2c:60:cb:55:4b:40:20:2b:e4:d8:fb:89:
56:f1:65:2e:88:b1:b3:d6:b1:b7:47:35:d2:82:3a:99:6a:0a:
4a:f3:24:6a:db:7d:36:3a:c0:82:c1:49:98:57:1b:c9:91:7e:
c1:7d:60:67:7b:82:8e:c6:8b:60:8a:dd:b0:11:02:67:8d:2c:
a4:da:64:f3:7b:32:c9:bc:63:5a:f8:8b:b5:1b:5b:82:53:bb:
7b:3a:f9:04:44:7e:16:49:1f:e6:98:72:6c:eb:f3:bd:b8:73:
f9:75:71:41:43:d0:1e:66:c7:d5:4f:56:8f:e4:14:0e:cc:3d:
ac:20:f0:63:b8:0e:18:f6:94:08:03:b7:15:66:88:d4:1e:ac:
1c:84:f6:91:bc:aa:a6:4e:82:22:23:78:90:c2:75:b0:89:93:
58:93:72:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:45:16 2026 by rpki-client