
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a373737373a3a2f34382d3438203d3e203234313431.roa
File: 323430303a393630303a373737373a3a2f34382d3438203d3e203234313431.roa (raw, json)
Hash identifier: +rRxnz04mnlEx++ptGu1dmmdKHiZqQK2TI7cVktI2uU=
Subject key identifier: E6:FF:69:CF:9D:ED:77:80:E6:F6:D9:18:0C:6E:52:CB:B0:89:5D:BC
Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F
Certificate serial: 166D258DE8F7F576FF6B110044352A89149FCB87
Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a373737373a3a2f34382d3438203d3e203234313431.roa
Signing time: Mon 13 Apr 2026 03:08:51 +0000
ROA not before: Mon 13 Apr 2026 03:03:51 +0000
ROA not after: Mon 12 Apr 2027 03:08:51 +0000
asID: 24141
IP address blocks: 2400:9600:7777::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl
rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:58:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:6d:25:8d:e8:f7:f5:76:ff:6b:11:00:44:35:2a:89:14:9f:cb:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F
Validity
Not Before: Apr 13 03:03:51 2026 GMT
Not After : Apr 12 03:08:51 2027 GMT
Subject: CN=E6FF69CF9DED7780E6F6D9180C6E52CBB0895DBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:29:fb:a8:db:b4:94:a8:57:ae:2d:00:32:73:
5c:42:c9:a4:7d:8f:eb:9a:f6:a2:d4:1d:3d:d7:3c:
b0:5f:8a:a8:62:a6:6e:c1:fd:12:01:67:82:28:dd:
9a:86:29:fb:12:2f:cc:04:1c:71:db:2f:47:3a:16:
c7:ac:b3:81:d5:a3:50:64:a7:e8:4f:1e:be:a0:4c:
99:70:5f:6c:1f:81:55:48:15:b8:77:f4:5b:be:01:
f0:5b:37:3f:cc:b8:8d:ba:e1:20:7e:50:51:eb:b9:
8c:52:eb:da:4d:e1:04:15:d8:0b:3f:2d:f2:0d:ff:
c7:ed:d7:66:21:f8:fb:17:a4:4e:68:a4:30:af:44:
6b:46:ae:ce:51:b2:3e:5d:e0:94:35:41:d3:67:a5:
99:6e:46:e7:cf:49:ef:2c:e4:33:27:55:a0:2c:aa:
0d:06:cf:bc:d6:a2:ad:59:6e:0e:38:7e:5d:92:8d:
44:39:02:d9:19:d5:e0:b5:af:d9:25:6d:76:04:17:
10:18:0b:af:9f:e2:52:76:f3:cd:f3:e0:58:e0:61:
3c:f3:d4:4e:0a:b3:16:be:ff:8b:2f:d4:ae:b5:f8:
0e:ce:95:08:6d:6f:4d:f4:37:de:4b:8e:8f:8c:49:
99:a9:32:7e:aa:bf:fb:13:98:be:8b:c3:8f:5f:2b:
19:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FF:69:CF:9D:ED:77:80:E6:F6:D9:18:0C:6E:52:CB:B0:89:5D:BC
X509v3 Authority Key Identifier:
keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a373737373a3a2f34382d3438203d3e203234313431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:9600:7777::/48
Signature Algorithm: sha256WithRSAEncryption
08:a2:15:17:8f:b8:18:6f:5b:9d:d8:81:a0:53:ac:03:b5:91:
94:2e:ff:f6:73:9b:14:80:67:2d:14:8d:0c:3b:61:25:3f:fc:
0e:7e:2d:e6:be:fc:97:42:59:8f:0b:a6:23:cd:88:e5:8a:80:
4f:96:aa:62:6b:95:95:00:03:52:2f:8e:c7:0c:9e:1c:88:18:
cb:77:12:25:5c:d9:6f:16:20:dd:f4:e9:8d:85:72:9b:41:29:
40:32:13:d4:1b:dc:ea:bc:df:b7:e3:78:1f:e4:b3:66:4d:16:
33:24:f8:19:e9:aa:fa:10:e1:93:84:b1:1f:6a:d3:10:fe:44:
a3:fa:d8:1b:9e:28:59:4a:59:ef:9c:39:2c:0f:f4:7b:33:13:
5d:67:1f:3e:48:c2:6a:f5:96:03:6c:41:af:ca:4c:43:b5:e3:
89:67:0e:32:3c:fa:c3:b4:41:e8:91:25:ae:ab:e8:0a:03:e6:
1e:e4:cf:84:36:00:7d:91:03:b1:b4:3f:5f:bf:06:09:56:34:
e8:0f:fb:e6:c4:a3:55:e9:55:ff:a7:5e:ea:55:59:4d:ae:d6:
29:fa:04:c5:02:b4:b6:24:c8:b8:14:82:4b:88:1d:1d:c8:3d:
9f:c8:15:51:b9:6f:1f:2c:cc:99:9b:28:58:41:55:26:8b:13:
d7:3c:6e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:26:15 2026 by rpki-client