
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/323430313a386430303a393a3a2f34382d3438203d3e203338333435.roa
File: 323430313a386430303a393a3a2f34382d3438203d3e203338333435.roa (raw, json)
Hash identifier: o/aD06isMMxZYE7ukQKV5oXHu6QqSPq1LIbCDbkSbwo=
Subject key identifier: B1:9F:2D:EB:11:D8:3A:49:56:F8:62:55:AF:29:98:AC:1A:EE:9C:8C
Certificate issuer: /CN=A48290B7B4443542D0460FD49BDF1B444360AE86
Certificate serial: 65FCAC09AE7D83D37234A8291F097400571E3ED1
Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/323430313a386430303a393a3a2f34382d3438203d3e203338333435.roa
Signing time: Fri 10 Apr 2026 08:13:07 +0000
ROA not before: Fri 10 Apr 2026 08:08:07 +0000
ROA not after: Fri 09 Apr 2027 08:13:07 +0000
asID: 38345
IP address blocks: 2401:8d00:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl
rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 12:09:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:fc:ac:09:ae:7d:83:d3:72:34:a8:29:1f:09:74:00:57:1e:3e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86
Validity
Not Before: Apr 10 08:08:07 2026 GMT
Not After : Apr 9 08:13:07 2027 GMT
Subject: CN=B19F2DEB11D83A4956F86255AF2998AC1AEE9C8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ac:de:c0:f8:85:01:78:90:93:46:d4:8e:a4:
40:90:37:ca:bb:a4:0f:4b:67:03:78:77:03:99:a4:
fa:77:d8:c3:c4:f6:58:0a:38:d4:30:e4:23:03:e8:
3b:f9:8a:3e:c1:5c:5b:6e:10:86:93:16:8e:f1:46:
dd:06:e4:ae:ad:44:75:26:7c:44:04:a6:2c:bf:72:
15:ae:3c:9b:db:c3:fc:25:12:d0:5f:0c:fe:a0:55:
3e:86:c8:b9:72:c8:cf:d4:4d:2c:3e:a3:40:29:dd:
0e:de:4e:12:4d:45:37:b1:7e:06:bc:7b:80:de:00:
65:5d:b4:9f:fc:aa:a7:34:81:62:bf:c0:bb:71:7d:
59:79:ed:57:c7:21:cc:9c:cd:97:aa:7c:4f:59:bf:
ea:26:42:82:b5:28:94:83:7d:43:fa:58:62:20:43:
f0:d0:fa:16:1e:a5:d5:8c:0e:bc:ca:37:ce:96:ed:
d2:b7:74:be:d8:a1:42:0f:7d:bb:a0:a1:01:b6:de:
cb:64:f8:bd:45:7f:1e:f2:7f:da:0a:94:48:fb:9a:
b9:c4:d3:f6:08:a6:de:5c:24:91:c2:c9:83:5c:cd:
f9:0b:bc:13:6c:e5:07:38:7f:2e:ca:dd:6d:99:30:
fb:b9:c3:44:d5:0d:ca:fb:c2:75:3d:dc:41:f7:58:
5a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9F:2D:EB:11:D8:3A:49:56:F8:62:55:AF:29:98:AC:1A:EE:9C:8C
X509v3 Authority Key Identifier:
keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/323430313a386430303a393a3a2f34382d3438203d3e203338333435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:8d00:9::/48
Signature Algorithm: sha256WithRSAEncryption
13:10:d1:e4:23:1f:9b:d0:04:00:35:ad:8a:d3:b7:f8:f7:5f:
e6:b6:ae:57:81:b4:6b:93:6b:7e:31:d3:86:84:9f:01:4d:44:
58:9e:76:7d:17:2a:c5:dd:fa:37:3e:ec:7f:6f:29:c6:fe:24:
87:db:07:88:c5:49:d5:3c:13:4f:93:72:36:9a:61:c3:4c:18:
b5:76:3b:ef:35:b1:17:76:3e:e3:42:3e:05:a5:3f:34:1f:27:
ee:e7:14:1b:22:9e:18:87:4f:86:6c:c2:a9:02:31:42:ed:1b:
91:42:50:0e:51:cb:ce:d8:4b:78:40:f7:fb:b3:6e:22:e3:9e:
54:73:bf:e0:d6:a4:f7:16:aa:42:bc:9f:5e:9e:e2:93:cc:a2:
3c:6a:c1:63:c9:2b:c4:a5:c7:4e:0b:17:24:a7:66:1f:79:ee:
f1:30:ee:b4:90:5c:5f:b3:d2:08:9c:48:b4:9b:65:7c:67:a2:
c6:be:e0:58:84:9e:24:23:79:80:ec:0b:29:52:a0:ba:aa:dd:
2d:ed:8b:a5:5d:42:3d:bd:1e:10:c5:fe:7e:cd:f5:75:18:ea:
da:f9:d5:85:2a:9a:b6:17:75:3e:cf:0b:1f:de:54:56:d5:51:
4c:5c:de:9f:f7:08:6a:b5:06:fb:83:94:0c:9b:98:db:4d:0b:
d4:05:1a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:26:38 2026 by rpki-client