
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a3a2f34382d3438203d3e2034383136.roa
File: 323430313a373163303a3a2f34382d3438203d3e2034383136.roa (raw, json)
Hash identifier: D4kGFPZzKMS1bmI+cniCH5lVdXYFA15Oob5jGCT7obw=
Subject key identifier: 06:1A:7E:25:32:A9:4B:31:64:FF:2D:7B:2F:C8:30:79:CE:7F:05:6F
Certificate issuer: /CN=3D426BEA44C56109707602923668D40F4458FBEF
Certificate serial: 35EB3529F1DF3C447CD6E47DC5E2C93E9488E64C
Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a3a2f34382d3438203d3e2034383136.roa
Signing time: Fri 10 Apr 2026 03:00:33 +0000
ROA not before: Fri 10 Apr 2026 02:55:33 +0000
ROA not after: Fri 09 Apr 2027 03:00:33 +0000
asID: 4816
IP address blocks: 2401:71c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 10:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:eb:35:29:f1:df:3c:44:7c:d6:e4:7d:c5:e2:c9:3e:94:88:e6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF
Validity
Not Before: Apr 10 02:55:33 2026 GMT
Not After : Apr 9 03:00:33 2027 GMT
Subject: CN=061A7E2532A94B3164FF2D7B2FC83079CE7F056F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c4:40:78:18:8a:0e:bb:62:3f:ab:29:b6:4a:
c7:c0:a0:e4:95:b3:28:d9:8a:da:39:3f:73:be:09:
b5:06:ae:6e:45:2c:31:56:18:6d:c9:8e:48:f8:8a:
ab:33:b8:2a:16:88:fb:02:a6:b4:cd:f5:90:7c:86:
8f:7d:af:a3:20:ff:30:7c:69:77:5d:1f:d4:4a:ff:
f0:be:92:a6:35:4b:4f:96:ae:c2:61:3a:59:71:a4:
83:4e:4a:2b:38:fb:97:fc:72:0b:fd:0e:23:f5:6e:
d5:aa:e7:f1:58:6b:7a:db:6e:07:7b:0c:8d:38:f2:
a8:92:72:4d:c1:fa:f3:45:56:fb:0c:fb:ba:dd:fe:
9d:33:e7:09:55:7d:2e:78:e3:85:1e:5f:11:71:14:
cf:b7:ac:8c:47:b7:26:4a:e1:f6:08:7f:0d:d6:3f:
67:16:54:c5:13:c4:ca:bb:18:c6:af:b3:a1:73:71:
22:79:e3:5f:4c:65:c8:f7:52:80:27:a4:c1:1e:81:
2e:fb:7e:34:cf:dc:88:96:93:8f:ce:67:bc:17:10:
ca:88:15:a0:a4:41:66:95:0f:b5:d1:02:e9:76:6b:
c0:07:3f:03:08:21:54:8d:b6:3d:29:5a:9e:3e:7c:
c3:f8:79:82:14:eb:86:a9:04:9f:66:f3:bb:86:ef:
4f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1A:7E:25:32:A9:4B:31:64:FF:2D:7B:2F:C8:30:79:CE:7F:05:6F
X509v3 Authority Key Identifier:
keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a3a2f34382d3438203d3e2034383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:71c0::/48
Signature Algorithm: sha256WithRSAEncryption
7e:1d:41:54:cb:6b:b2:d4:23:e3:65:93:3e:c2:37:13:47:e9:
8d:36:fc:26:d9:81:ff:75:57:3b:c9:d1:3f:c6:f0:a9:a2:ae:
7b:9c:d9:ca:2b:5d:68:f2:ef:82:78:10:d2:d0:6d:2a:ac:eb:
fc:1a:16:2a:da:64:2e:30:59:a5:f8:e2:f9:2f:8f:d3:f4:ef:
b6:c2:87:dd:a5:3f:7a:85:30:92:7d:da:96:4c:fb:8e:d0:95:
25:c3:2e:70:16:22:30:6f:be:59:d1:72:63:49:ff:21:74:d0:
17:e5:fa:e4:66:29:f8:e9:65:87:00:4a:af:06:56:f3:15:2f:
79:ae:23:73:86:66:c6:5e:f8:7b:6d:15:8a:ce:4e:c7:d5:2f:
f6:8b:7e:0e:12:7d:a2:ac:8a:23:77:1c:b7:c3:9c:fc:d7:15:
7f:6e:05:4e:bf:2d:bb:fa:c1:a9:3c:aa:46:79:d0:7a:fa:ed:
ef:12:87:97:52:a9:7f:b5:88:5d:77:e3:27:5c:79:d5:48:ed:
ca:43:65:0a:9f:21:2c:30:29:87:55:36:eb:7e:d0:60:87:a2:
f8:f9:c9:d2:6c:30:b9:23:27:c9:18:84:df:53:00:54:e7:9a:
14:89:ff:49:4c:8d:3f:0c:f8:e6:0c:e0:16:bc:5a:3b:33:96:
77:22:ca:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:26:21 2026 by rpki-client