
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a31323a3a2f34382d3634203d3e203536303431.roa
File: 323430323a396238303a31323a3a2f34382d3634203d3e203536303431.roa (raw, json)
Hash identifier: TKu8uWxhHWwxQ7YOxUB+9HM5NYpUuUMjqVtTbhB/SUU=
Subject key identifier: 5B:BD:D5:6F:64:C7:93:6E:1A:4E:93:11:50:B4:67:53:1B:E7:E2:49
Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Certificate serial: 605B85B6E311A8F78DE8DCAF96C7AC8E15104F55
Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a31323a3a2f34382d3634203d3e203536303431.roa
Signing time: Fri 29 May 2026 07:14:09 +0000
ROA not before: Fri 29 May 2026 07:09:09 +0000
ROA not after: Fri 28 May 2027 07:14:09 +0000
asID: 56041
IP address blocks: 2402:9b80:12::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 23:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:5b:85:b6:e3:11:a8:f7:8d:e8:dc:af:96:c7:ac:8e:15:10:4f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Validity
Not Before: May 29 07:09:09 2026 GMT
Not After : May 28 07:14:09 2027 GMT
Subject: CN=5BBDD56F64C7936E1A4E931150B467531BE7E249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d8:0f:69:c7:61:ac:d2:fa:3a:01:d7:a6:6d:
eb:a8:40:e7:44:46:36:09:4c:b8:78:73:a9:cc:e2:
2e:28:8c:f9:d6:93:f1:ad:47:68:21:b6:7f:aa:a0:
29:b2:82:b6:9e:e0:ea:ff:e1:b5:5d:74:69:74:f5:
05:db:14:66:da:2f:0c:c9:36:db:e9:50:f6:1f:5a:
10:3d:a3:12:85:40:00:6a:e7:17:77:28:f3:12:12:
94:73:c4:77:fd:46:de:aa:b8:b5:50:cd:4c:c6:a0:
c4:e9:17:01:60:d6:a8:9d:d2:ad:76:93:2a:99:a6:
7a:ed:16:d3:7b:c6:cf:5f:c2:46:b2:76:c8:b9:a4:
6f:ad:78:20:59:7b:cb:58:ec:9f:e6:06:1f:b7:79:
6f:37:02:32:f2:29:80:ec:5e:10:cd:68:03:fb:d8:
1f:cb:b6:ec:84:2e:03:b6:dd:ac:a2:c0:2a:6e:58:
fd:39:4d:4e:62:ee:37:6c:21:8f:ae:30:5a:66:9c:
4a:05:8c:f8:e6:39:e1:2c:39:a3:54:9e:9a:0b:2a:
3a:32:08:80:82:17:40:27:18:fb:13:b6:f0:17:db:
79:e5:7e:51:3c:3f:21:b8:60:9e:47:54:4c:72:7c:
64:ff:a7:97:a1:c6:fb:b3:0f:1a:6f:4a:c0:da:4f:
74:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BD:D5:6F:64:C7:93:6E:1A:4E:93:11:50:B4:67:53:1B:E7:E2:49
X509v3 Authority Key Identifier:
keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a31323a3a2f34382d3634203d3e203536303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:9b80:12::/48
Signature Algorithm: sha256WithRSAEncryption
7f:63:fc:a0:3f:a0:28:f1:2c:2f:25:d1:75:bf:5b:b0:dd:eb:
a3:34:d1:35:ce:f1:f8:eb:00:9a:cf:12:34:8d:a1:d9:50:e8:
d5:25:3c:23:0c:c4:4d:3c:3f:c1:3c:2d:56:97:ab:a2:f2:fe:
83:10:0b:12:16:00:83:cb:84:13:04:e9:d2:2a:3a:2e:3b:79:
4f:35:ee:70:bb:8e:b6:af:1b:33:65:36:00:ed:e8:7d:35:95:
e3:75:46:3d:16:a3:79:b0:bc:91:36:f3:1b:69:ff:a9:e7:0e:
c5:ec:20:82:bc:ad:d5:35:41:b6:ab:2e:f9:fc:99:f5:5d:1e:
10:37:22:83:e7:98:5c:80:e8:bc:f1:43:2f:64:64:5a:da:45:
09:01:eb:13:90:bd:69:21:ae:70:80:a3:ae:fe:a2:fc:ea:72:
df:12:ac:d3:33:bd:32:cf:c2:d3:28:11:c8:54:53:cd:2f:71:
e5:1e:1b:aa:4d:fd:2c:e1:ef:ac:f0:dd:44:00:cf:41:e6:a9:
40:53:84:6e:e3:69:4d:5e:1d:59:46:2b:f0:d9:85:f4:30:16:
a7:f8:f7:d8:25:30:2a:a1:ec:f8:5e:b9:ab:a8:16:d2:cd:51:
33:cc:15:36:93:89:90:3c:fa:c4:50:cb:9c:3d:8f:4d:ff:25:
1c:75:19:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:49:13 2026 by rpki-client