
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/323430373a616538303a3a2f33322d3634203d3e203435303632.roa
File: 323430373a616538303a3a2f33322d3634203d3e203435303632.roa (raw, json)
Hash identifier: Jnz67nkfKZqlKjY8xJFfKFmnRoQZnASqhpb7Nu6dPfU=
Subject key identifier: AD:3C:05:6A:CF:49:A0:78:7A:7A:F9:C3:67:E9:B9:13:F0:4B:40:47
Certificate issuer: /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial: 6074CE07C496F1D79B14EBE59268F5D578EDECAA
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/323430373a616538303a3a2f33322d3634203d3e203435303632.roa
Signing time: Fri 10 Apr 2026 06:04:08 +0000
ROA not before: Fri 10 Apr 2026 05:59:08 +0000
ROA not after: Fri 09 Apr 2027 06:04:08 +0000
asID: 45062
IP address blocks: 2407:ae80::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:74:ce:07:c4:96:f1:d7:9b:14:eb:e5:92:68:f5:d5:78:ed:ec:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Validity
Not Before: Apr 10 05:59:08 2026 GMT
Not After : Apr 9 06:04:08 2027 GMT
Subject: CN=AD3C056ACF49A0787A7AF9C367E9B913F04B4047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b3:4f:f8:b2:fe:e5:de:86:d1:9d:b3:35:33:
fd:eb:f3:12:9f:3b:f4:0a:33:a6:6c:83:8f:d2:0f:
8b:0e:f8:c9:5c:13:30:31:b8:f7:78:94:43:47:fc:
63:f9:d1:39:65:02:0d:0a:a1:c2:41:a8:e7:24:5b:
0c:1b:f5:f5:4a:44:56:7a:ac:71:21:7b:f6:18:d3:
27:ce:6c:0c:9e:62:f2:78:4e:6c:da:32:55:83:e5:
8e:2f:18:23:5f:d5:b2:3a:64:71:e6:78:4c:c3:d8:
0c:a7:b5:79:b4:05:01:75:eb:e5:56:76:fa:f6:f7:
69:5b:1c:3d:c8:2b:4c:c2:87:67:7e:b9:c1:08:61:
5b:2b:06:b7:de:d4:eb:7b:a7:f1:95:67:d9:cf:f5:
e5:ce:90:4a:f3:91:6e:ba:6a:54:e5:40:a9:8b:51:
54:5e:79:4e:f2:a1:49:9e:00:26:73:df:f5:fb:db:
9f:9a:dc:a9:be:69:c0:38:7d:a6:3e:26:72:61:58:
b9:bd:79:95:f0:8c:75:8c:1c:28:a0:72:05:a5:6b:
f3:bd:ec:f8:61:21:dc:ab:a9:b2:9c:72:7b:a6:ed:
ed:33:92:77:b3:6e:bd:58:f7:a9:64:61:e8:98:8c:
2d:5e:d9:1c:84:e2:33:28:ac:07:80:ec:ea:d7:44:
1b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3C:05:6A:CF:49:A0:78:7A:7A:F9:C3:67:E9:B9:13:F0:4B:40:47
X509v3 Authority Key Identifier:
keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/323430373a616538303a3a2f33322d3634203d3e203435303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2407:ae80::/32
Signature Algorithm: sha256WithRSAEncryption
82:01:fa:09:98:3f:bd:d8:a8:b7:43:0d:1f:99:d0:43:fc:d0:
5e:0b:80:e0:1b:68:87:c0:af:85:e0:4a:6b:9e:9b:18:fb:c5:
df:95:38:e6:b7:ef:ba:37:85:37:86:78:69:61:03:5d:4c:7a:
70:f1:f8:54:99:56:6e:56:21:b1:27:f5:25:0d:41:86:91:e9:
df:8d:5e:84:a7:de:ec:41:a0:97:62:b4:de:da:14:4f:55:7e:
ec:44:74:83:9a:87:6d:bd:bf:3b:a5:06:d2:7f:80:18:dc:1a:
cc:b3:49:03:1f:ee:4a:ee:6b:80:2c:cc:b3:f3:8a:bb:0a:d0:
ba:b3:9d:8e:ed:3d:4d:41:bb:c7:b7:96:db:0d:80:11:f4:65:
d1:71:cb:66:f9:5b:43:fa:81:5a:2f:99:ae:44:d5:54:73:ce:
e1:7b:31:47:51:ec:4d:8f:27:59:b7:8f:69:39:73:bb:38:37:
e6:8f:e0:42:34:6c:4b:d3:86:f4:fc:4c:d0:c2:ac:b1:63:c0:
b9:ab:36:68:01:1f:96:0b:f0:4d:2c:05:98:b1:d7:e0:77:e8:
33:52:32:f2:2f:ac:57:01:13:88:3c:e5:2e:d1:8f:55:56:11:
b8:56:98:48:20:33:d0:32:c6:25:1e:09:29:9a:bc:6c:f6:24:
a7:a9:b6:0a
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIUYHTOB8SW8debFOvlkmj11Xjt7KowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzc5NDY3RDlGOUQyREJGRUZFQjgwOTU3NTUwMDRFREQ0
MkNFMDBFNjAeFw0yNjA0MTAwNTU5MDhaFw0yNzA0MDkwNjA0MDhaMDMxMTAvBgNV
BAMTKEFEM0MwNTZBQ0Y0OUEwNzg3QTdBRjlDMzY3RTlCOTEzRjA0QjQwNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2s0/4sv7l3obRnbM1M/3r8xKf
O/QKM6Zsg4/SD4sO+MlcEzAxuPd4lENH/GP50TllAg0KocJBqOckWwwb9fVKRFZ6
rHEhe/YY0yfObAyeYvJ4TmzaMlWD5Y4vGCNf1bI6ZHHmeEzD2AyntXm0BQF16+VW
dvr292lbHD3IK0zCh2d+ucEIYVsrBrfe1Ot7p/GVZ9nP9eXOkErzkW66alTlQKmL
UVReeU7yoUmeACZz3/X725+a3Km+acA4faY+JnJhWLm9eZXwjHWMHCigcgWla/O9
7PhhIdyrqbKccnum7e0zknezbr1Y96lkYeiYjC1e2RyE4jMorAeA7OrXRBsrAgMB
AAGjggISMIICDjAdBgNVHQ4EFgQUrTwFas9JoHh6evnDZ+m5E/BLQEcwHwYDVR0j
BBgwFoAUN5Rn2fnS2/7+uAlXVQBO3ULOAOYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDgxOTUyNzkxMDIyNzk3MS8wLzM3OTQ2N0Q5RjlEMkRCRkVGRUI4MDk1NzU1MDA0
RURENDJDRTAwRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzc5NDY3RDlGOUQyREJGRUZFQjgwOTU3NTUwMDRFREQ0MkNFMDBFNi5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk0ODE5NTI3OTEwMjI3OTcxLzAvMzIzNDMwMzczYTYx
NjUzODMwM2EzYTJmMzMzMjJkMzYzNDIwM2QzZTIwMzQzNTMwMzYzMi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQHroAwDQYJKoZIhvcNAQELBQADggEBAIIB+gmYP73YqLdDDR+Z0EP80F4L
gOAbaIfAr4XgSmuemxj7xd+VOOa377o3hTeGeGlhA11MenDx+FSZVm5WIbEn9SUN
QYaR6d+NXoSn3uxBoJditN7aFE9VfuxEdIOah229vzulBtJ/gBjcGsyzSQMf7kru
a4AszLPzirsK0LqznY7tPU1Bu8e3ltsNgBH0ZdFxy2b5W0P6gVovma5E1VRzzuF7
MUdR7E2PJ1m3j2k5c7s4N+aP4EI0bEvThvT8TNDCrLFjwLmrNmgBH5YL8E0sBZix
1+B36DNSMvIvrFcBE4g85S7Rj1VWEbhWmEggM9AyxiUeCSmavGz2JKeptgo=
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:54:25 2026 by rpki-client