
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096301149373399041/1/323430333a316638303a3a2f33322d3332203d3e2030.roa
File: 323430333a316638303a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier: C3n5OWMLpoak4RJkrmKLGOTFE9VB8zAehVX31CssZ0Y=
Subject key identifier: F0:25:0B:FB:34:DE:D0:A5:8D:39:80:87:E5:22:22:8F:C1:F0:69:3E
Certificate issuer: /CN=5ACF72DA32919503D15480832BA57EB063AE113B
Certificate serial: 5C6A0B40DD1F4E91C8C9C476A3086C905DE6AC29
Authority key identifier: 5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/323430333a316638303a3a2f33322d3332203d3e2030.roa
Signing time: Wed 27 May 2026 06:59:18 +0000
ROA not before: Wed 27 May 2026 06:54:18 +0000
ROA not after: Wed 26 May 2027 06:59:18 +0000
asID: 0
IP address blocks: 2403:1f80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl
rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 12:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:6a:0b:40:dd:1f:4e:91:c8:c9:c4:76:a3:08:6c:90:5d:e6:ac:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ACF72DA32919503D15480832BA57EB063AE113B
Validity
Not Before: May 27 06:54:18 2026 GMT
Not After : May 26 06:59:18 2027 GMT
Subject: CN=F0250BFB34DED0A58D398087E522228FC1F0693E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:eb:79:05:cf:87:62:b8:68:75:f1:4e:aa:3f:
b3:ff:2d:93:b2:0f:e5:6e:61:93:65:9b:fc:56:58:
a1:c5:f5:95:1b:da:16:51:6a:f5:29:a0:de:b3:d4:
66:c1:40:43:e2:e9:02:17:88:fd:b4:12:a3:d8:b0:
c5:5a:a2:65:0b:00:6b:25:42:f4:1d:b6:82:c8:a5:
72:61:41:23:c9:7d:a4:d6:a7:2c:74:b7:64:28:e9:
36:fa:d1:d2:bb:95:78:86:a8:9a:94:b3:13:3a:cf:
ad:ce:6b:3d:57:64:be:7c:fd:a1:00:47:24:79:32:
b7:2e:c0:26:3c:5d:09:f7:7c:6d:4d:13:ad:9e:b7:
b8:58:ca:c5:68:02:bc:3e:5d:87:11:37:bd:f7:61:
bb:d5:54:54:91:36:c7:b0:9a:97:24:a2:9f:99:c1:
86:15:f8:dd:48:35:92:1c:0b:fe:18:de:c2:21:62:
22:30:7a:29:95:af:0f:49:38:bc:fa:42:23:f9:d2:
f5:9c:ec:98:91:d3:e1:5b:a4:05:75:76:c2:85:37:
bb:03:cb:4c:97:29:5a:5b:46:0e:6a:dd:df:2c:34:
23:5b:58:85:7e:a9:78:5a:0e:8e:13:4a:54:ff:d8:
b4:92:06:4b:a9:0a:bd:e7:05:cd:b6:13:65:ac:5c:
fc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:25:0B:FB:34:DE:D0:A5:8D:39:80:87:E5:22:22:8F:C1:F0:69:3E
X509v3 Authority Key Identifier:
keyid:5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/323430333a316638303a3a2f33322d3332203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:1f80::/32
Signature Algorithm: sha256WithRSAEncryption
a8:38:c3:2d:91:2c:f4:3d:7e:d4:38:99:35:2c:22:b8:f6:36:
00:2e:d8:9d:10:ee:69:9f:2b:1a:c1:f6:e4:f7:08:b9:ad:66:
ad:2a:68:7d:75:7f:e3:c1:e9:5f:68:94:16:b6:ca:6d:57:de:
5f:4b:0d:8b:9e:87:5d:ad:dd:06:60:39:71:7f:88:c3:3a:c5:
9e:4f:93:33:17:e4:8e:3f:e4:91:73:66:3f:8b:9a:0f:d5:4c:
a8:ec:6e:c9:78:bf:d1:2b:9d:81:49:48:8c:f2:95:79:b6:cf:
4c:5a:fa:11:2f:c6:fd:92:1d:f2:9d:33:44:e5:90:60:73:2c:
d2:2b:25:82:c8:83:d5:64:42:80:98:eb:6c:ea:f2:5b:1a:39:
2d:53:7f:1e:25:b2:ad:df:8d:f6:4e:3b:cb:11:54:31:8b:5a:
f5:4a:b7:9e:71:49:af:03:a0:e0:af:03:de:5e:95:52:ae:85:
f3:8e:c5:cd:d3:f8:67:44:a1:5d:55:97:c8:29:7c:94:44:d3:
1f:7b:95:cc:7d:be:3a:b2:0c:8c:a3:b2:62:10:76:6b:ce:26:
be:91:e7:40:91:26:93:21:2e:5a:51:f0:fb:56:0c:a6:db:91:
42:b6:71:1d:ba:75:8b:99:17:b5:8a:94:c0:d9:78:44:2f:f1:
0a:ce:e9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:23 2026 by rpki-client