
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/323430313a386430303a313a3a2f34382d3438203d3e203338333435.roa
File: 323430313a386430303a313a3a2f34382d3438203d3e203338333435.roa (raw, json)
Hash identifier: EOqIgmLMi5HDORB9diJnUI149x46H+n98psVu9gIVik=
Subject key identifier: 82:F7:0F:80:FF:B5:CC:52:14:48:36:82:69:39:68:D0:2E:FE:5C:35
Certificate issuer: /CN=A48290B7B4443542D0460FD49BDF1B444360AE86
Certificate serial: 7E8C337E9D4F4BFB41F118FB4805CFD63452C981
Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/323430313a386430303a313a3a2f34382d3438203d3e203338333435.roa
Signing time: Fri 10 Apr 2026 08:13:08 +0000
ROA not before: Fri 10 Apr 2026 08:08:08 +0000
ROA not after: Fri 09 Apr 2027 08:13:08 +0000
asID: 38345
IP address blocks: 2401:8d00:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl
rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 12:09:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:8c:33:7e:9d:4f:4b:fb:41:f1:18:fb:48:05:cf:d6:34:52:c9:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86
Validity
Not Before: Apr 10 08:08:08 2026 GMT
Not After : Apr 9 08:13:08 2027 GMT
Subject: CN=82F70F80FFB5CC5214483682693968D02EFE5C35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f7:09:5d:b8:07:ad:6e:af:95:bd:47:b7:8f:
80:12:c7:e6:63:a6:c9:31:76:e4:5d:ec:af:35:11:
f3:ba:5f:70:1f:48:d1:95:8b:be:c4:5c:2d:e2:70:
3b:c7:76:b0:eb:2f:cd:1a:6b:67:2e:d6:69:50:5f:
d9:75:77:ba:3e:89:be:3d:ea:dc:36:8b:68:cf:1d:
b7:b8:73:78:5a:f0:f6:f1:f5:04:a2:1b:77:0f:c2:
f3:41:95:f5:33:0e:21:d2:9e:29:dc:67:70:d2:e5:
61:85:60:75:0e:c0:b3:0b:01:2b:40:76:7a:22:ec:
e1:86:7c:b2:ab:43:b1:fd:7b:3f:85:36:29:24:74:
6d:01:85:1f:1c:ef:45:8b:b8:89:fd:17:0b:d1:7d:
00:82:26:14:31:dd:89:e9:51:9b:7d:c3:c8:1d:0b:
6e:e9:ed:d6:b4:07:40:c0:ef:33:81:b7:ca:4b:dc:
21:cf:a9:b3:9e:b6:9b:4f:52:0a:ec:66:f4:ab:d9:
40:25:9f:cf:1f:8d:7f:05:d4:dd:5a:c6:a9:7c:45:
18:cc:c4:17:73:bd:66:1f:ea:1e:d7:25:e8:eb:52:
63:32:a6:9a:20:4d:28:c8:93:2a:45:1a:9a:72:a4:
8e:74:99:5d:31:a5:5b:b3:57:00:60:e3:2d:f9:72:
a4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F7:0F:80:FF:B5:CC:52:14:48:36:82:69:39:68:D0:2E:FE:5C:35
X509v3 Authority Key Identifier:
keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/323430313a386430303a313a3a2f34382d3438203d3e203338333435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:8d00:1::/48
Signature Algorithm: sha256WithRSAEncryption
55:48:63:40:78:a3:1f:dc:86:86:a2:11:5c:5c:7f:40:6e:3e:
1b:f4:c9:ef:32:ed:29:c0:01:0e:69:44:a0:f8:13:0f:39:24:
40:5f:ee:2d:8b:35:af:f3:7b:dd:28:08:32:a9:b0:26:76:be:
43:3b:eb:44:5e:cf:ec:b7:29:e1:ce:05:40:ec:04:03:74:75:
64:c3:b6:2f:0a:16:72:d2:17:83:8d:96:33:3c:80:b5:3d:ff:
f7:30:3f:3b:e1:29:29:79:33:fa:fd:15:36:e8:9e:aa:b7:31:
33:c4:7b:45:44:ce:15:e9:a4:7e:65:74:a8:a7:d8:0d:0e:73:
00:e0:20:c2:a4:96:fd:80:8d:12:c7:1c:ea:f7:e9:93:31:11:
bc:76:8d:13:b5:08:b3:2b:88:04:4d:85:5c:e5:96:70:71:b9:
44:07:4d:27:47:5a:ab:11:fd:c1:34:ab:e5:dd:ae:1b:0e:a5:
a4:33:b2:d0:ca:df:d1:43:3f:f1:22:b6:c3:e6:2d:e1:e9:62:
c9:88:62:77:8c:1a:1f:59:f7:d0:f4:40:85:13:3e:37:79:fb:
31:33:51:23:bc:b2:3e:c0:54:67:3b:bf:b8:ff:9d:7a:dc:53:
cf:ab:8b:b2:39:5d:c7:20:d9:fa:67:50:aa:a4:7a:b6:44:70:
b8:61:5c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:26:38 2026 by rpki-client