
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a343434343a3a2f34382d3438203d3e203234313431.roa
File: 323430303a393630303a343434343a3a2f34382d3438203d3e203234313431.roa (raw, json)
Hash identifier: OL1EH8Hotq4ZS9oiKF1DWYlRRtvLpzN5lXhQGlmGfOc=
Subject key identifier: 54:7F:AB:2B:5E:5E:D5:A7:5F:E0:FE:FB:A0:6E:FB:2A:12:4D:8F:E2
Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F
Certificate serial: 1ED0F4C5C05231453A8BB97537656CE2C62B3A16
Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a343434343a3a2f34382d3438203d3e203234313431.roa
Signing time: Mon 13 Apr 2026 03:08:51 +0000
ROA not before: Mon 13 Apr 2026 03:03:51 +0000
ROA not after: Mon 12 Apr 2027 03:08:51 +0000
asID: 24141
IP address blocks: 2400:9600:4444::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl
rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:58:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:d0:f4:c5:c0:52:31:45:3a:8b:b9:75:37:65:6c:e2:c6:2b:3a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F
Validity
Not Before: Apr 13 03:03:51 2026 GMT
Not After : Apr 12 03:08:51 2027 GMT
Subject: CN=547FAB2B5E5ED5A75FE0FEFBA06EFB2A124D8FE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:45:90:c7:f9:8d:d1:ef:cf:db:93:98:e7:25:
64:49:25:b0:25:c2:06:5d:a9:98:d0:17:ac:75:e3:
df:cd:d1:af:a8:60:f5:d1:3e:36:e4:1a:28:8b:59:
3d:60:de:a7:db:31:5b:be:e9:19:87:b9:7b:6e:52:
0d:ab:9e:0d:86:82:48:e7:30:51:02:93:0e:bd:a3:
39:a5:da:19:e3:b4:c0:26:98:2b:52:8f:a7:e4:55:
35:3f:e1:42:31:9c:50:4b:18:ce:5e:da:3c:91:a9:
fc:7c:e2:55:32:f1:13:92:d0:f3:85:a9:02:e5:c2:
ae:3f:fd:08:fb:98:27:aa:8f:fe:0c:05:45:fc:0f:
e6:91:a0:17:19:2a:28:21:a1:db:cd:80:b3:87:80:
87:23:0e:97:21:81:b8:83:d6:70:bd:4a:98:c9:8a:
7f:c5:34:b5:e0:8d:f7:db:6c:e3:1a:53:c1:03:65:
ef:7f:57:9f:4c:75:df:43:e7:90:d1:7e:f7:92:c7:
72:df:4a:96:6c:20:62:fb:f7:78:33:7e:79:04:fb:
1e:a9:bd:96:98:63:91:9c:38:a1:da:a3:84:d4:17:
39:18:d8:15:7b:de:5d:12:94:92:a5:7d:88:ea:62:
fc:1e:42:2a:89:48:95:72:65:e0:90:4a:c9:ac:c6:
d9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7F:AB:2B:5E:5E:D5:A7:5F:E0:FE:FB:A0:6E:FB:2A:12:4D:8F:E2
X509v3 Authority Key Identifier:
keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a343434343a3a2f34382d3438203d3e203234313431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:9600:4444::/48
Signature Algorithm: sha256WithRSAEncryption
9c:89:93:97:36:e8:0e:bd:05:bf:16:31:38:25:92:7b:97:02:
8c:a4:d8:e2:58:21:20:8d:b8:ca:29:66:07:7c:f4:cb:cc:46:
ff:8e:76:f7:de:69:c9:91:d2:d4:36:ac:70:74:54:3a:63:6e:
ba:9d:64:b7:48:c1:bc:f6:46:01:54:79:6c:16:6d:ba:a2:b6:
6d:b8:8b:b2:cf:c4:f5:60:8b:67:8b:79:2a:de:cc:37:b0:07:
3e:ce:79:46:5d:a7:09:bb:13:e2:43:2b:a2:0f:5b:06:b5:b7:
70:1c:e1:45:da:0b:8c:90:13:c4:4c:bd:46:cc:65:c6:28:c5:
81:d4:14:a5:ab:9e:a1:44:97:1c:f7:b1:33:e8:5a:e0:d5:4e:
19:91:cd:bc:72:ae:91:f3:fe:43:ca:1c:a0:99:7f:dd:4d:dd:
c9:d4:10:7c:59:fc:99:6a:22:7d:b8:3f:d6:5d:3a:f6:46:e4:
db:08:78:14:e7:4f:75:81:1e:b9:59:82:e2:f4:0c:0a:e7:4b:
ec:56:80:37:76:0d:53:54:df:26:7d:54:e1:7b:0d:45:93:d5:
4c:7d:46:0a:9e:20:d7:8b:71:dc:4c:69:b5:10:3b:f5:51:70:
e7:5f:f0:02:03:c1:73:7d:b2:f3:24:80:c0:24:5d:eb:fb:d2:
3c:f0:5c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:26:11 2026 by rpki-client