
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a3a2f34382d3438203d3e203536303430.roa
File: 323430313a373163303a3a2f34382d3438203d3e203536303430.roa (raw, json)
Hash identifier: DYSt7LcrpRcGKWtNUILrZZhd+UK60HHboULaA3yow5o=
Subject key identifier: CD:6E:E9:04:BB:60:1C:78:EB:13:CB:FD:AC:88:AF:ED:A9:53:1F:84
Certificate issuer: /CN=3D426BEA44C56109707602923668D40F4458FBEF
Certificate serial: 1A2D746C5880C2C0980BDDE1CBE1C59629F3F9F2
Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a3a2f34382d3438203d3e203536303430.roa
Signing time: Fri 10 Apr 2026 03:00:33 +0000
ROA not before: Fri 10 Apr 2026 02:55:33 +0000
ROA not after: Fri 09 Apr 2027 03:00:33 +0000
asID: 56040
IP address blocks: 2401:71c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 10:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:2d:74:6c:58:80:c2:c0:98:0b:dd:e1:cb:e1:c5:96:29:f3:f9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF
Validity
Not Before: Apr 10 02:55:33 2026 GMT
Not After : Apr 9 03:00:33 2027 GMT
Subject: CN=CD6EE904BB601C78EB13CBFDAC88AFEDA9531F84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:31:61:3f:b8:f7:6e:b5:82:68:cd:67:fa:f8:
64:4d:b5:8f:bb:68:91:95:1f:47:19:2d:bd:5f:0e:
61:9c:ef:1c:53:f2:10:27:10:92:61:3f:54:4a:47:
e2:5e:e8:b6:f9:8e:50:a9:7c:27:a7:6d:dc:71:b2:
21:c5:92:cf:8f:66:df:62:22:8e:54:c0:c4:41:d2:
10:5a:86:8c:ff:0b:5a:fb:08:75:78:db:fe:0e:c6:
12:29:bd:c1:00:68:1c:11:6d:9e:c8:27:70:76:94:
d8:ef:07:d5:4c:c8:cd:6c:5d:64:7b:ec:da:d8:59:
e2:91:75:3a:b8:14:20:7e:94:d9:fb:a0:3c:5a:62:
75:21:d3:30:50:f4:1d:a8:49:2e:fd:32:c1:93:af:
31:3e:ee:24:e8:e7:bf:62:e0:b5:c2:17:7c:23:fc:
67:8b:8d:c0:79:bd:2c:c1:3a:5c:ec:64:b1:51:ff:
25:c5:d8:88:04:33:29:f3:bd:7a:4d:9f:b0:6d:f9:
ab:ab:44:40:e6:09:51:03:1d:4c:c9:90:ab:c9:56:
28:eb:68:e4:77:61:69:d6:d3:a8:6e:db:3a:7a:e4:
68:e5:f4:db:e5:ab:ff:f9:59:1c:c0:7a:36:dc:4d:
ce:4d:cc:e1:5a:5d:55:3f:20:25:89:8c:b9:ae:8e:
6f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6E:E9:04:BB:60:1C:78:EB:13:CB:FD:AC:88:AF:ED:A9:53:1F:84
X509v3 Authority Key Identifier:
keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a3a2f34382d3438203d3e203536303430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:71c0::/48
Signature Algorithm: sha256WithRSAEncryption
33:a5:7a:ab:f8:c2:a8:c2:15:9e:30:16:c2:f4:62:be:b9:16:
fd:ea:ea:f6:cd:19:82:a9:eb:75:5b:42:7e:03:50:c6:ce:10:
76:68:02:ee:80:03:12:10:1c:29:3f:28:32:4e:48:2e:17:8a:
9b:09:35:2d:80:1d:07:0a:90:9a:e7:41:9e:54:43:f2:f7:cb:
04:a7:55:78:8a:20:f0:a4:b8:93:de:50:8c:8b:e0:e4:ec:8c:
0f:27:21:a6:75:43:ab:ed:7f:76:43:21:e3:e4:be:36:61:df:
c3:b3:cf:3e:82:7c:1c:76:53:2e:42:7a:f5:dd:16:b4:d6:ee:
ea:f8:bb:84:84:26:46:37:c5:0a:77:44:23:8e:0a:63:a5:76:
e5:2a:31:74:bc:73:92:b4:cb:fa:8c:ff:04:1f:3a:b4:68:3e:
cb:ed:8e:67:07:df:f1:de:8c:e7:e1:61:98:95:a3:e7:fe:a0:
1e:73:a2:83:61:cd:70:30:29:17:e1:76:45:59:52:d1:ef:28:
ab:65:db:dd:a0:d1:15:59:03:0f:e2:98:6d:6c:ac:fd:a7:0f:
9f:a4:e7:47:dd:86:79:88:48:78:9a:d9:5f:d9:92:96:79:a4:
91:64:81:3d:a3:90:3f:96:93:59:d0:5e:e7:e3:8e:0d:c1:60:
47:ea:ef:cf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:26:24 2026 by rpki-client