
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a31333a3a2f34382d3634203d3e203536303431.roa
File: 323430323a396238303a31333a3a2f34382d3634203d3e203536303431.roa (raw, json)
Hash identifier: e7vPamFkDPzvjTjZqURASNlGMSg9hSBjSviri8ZBU+E=
Subject key identifier: 9F:B5:9C:F7:66:99:85:09:F8:9C:5A:FF:F7:A8:98:56:0C:CA:26:6B
Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Certificate serial: 29DB5A675F4171652AF1DD8D0F2E052F41FD3A1F
Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a31333a3a2f34382d3634203d3e203536303431.roa
Signing time: Fri 29 May 2026 07:14:09 +0000
ROA not before: Fri 29 May 2026 07:09:09 +0000
ROA not after: Fri 28 May 2027 07:14:09 +0000
asID: 56041
IP address blocks: 2402:9b80:13::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 23:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:db:5a:67:5f:41:71:65:2a:f1:dd:8d:0f:2e:05:2f:41:fd:3a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Validity
Not Before: May 29 07:09:09 2026 GMT
Not After : May 28 07:14:09 2027 GMT
Subject: CN=9FB59CF766998509F89C5AFFF7A898560CCA266B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1d:1f:e5:eb:57:4c:16:aa:c6:95:94:1a:98:
4f:c7:64:1c:d4:5f:1e:5f:12:6c:08:41:e0:a9:67:
10:a0:6a:65:1f:74:83:36:7b:80:c8:19:8f:da:d3:
cc:f2:a2:f9:4c:36:b1:20:52:10:ea:b6:55:dd:e0:
93:6a:5a:ee:0d:aa:7d:ef:30:4d:5a:4d:e8:ad:91:
5e:2c:8e:97:91:4b:1d:14:df:ba:07:af:71:0e:f4:
d9:f7:f6:c2:8c:54:96:e8:83:aa:c0:0b:10:dc:8d:
a6:72:95:39:2b:4b:00:fd:d7:aa:6d:52:d0:b4:7f:
80:02:b3:0f:1e:56:e9:33:ea:b2:5d:27:c6:56:9b:
19:7a:f0:db:7a:b3:b7:77:be:c8:69:2a:25:92:89:
61:ab:51:d8:0a:7a:ef:88:2b:13:52:23:6c:df:42:
15:b5:fb:2c:8a:23:f5:c4:ce:4c:3d:34:86:5f:3f:
32:ba:b8:54:77:9d:a6:99:21:b1:8b:24:10:d6:39:
3a:09:63:a9:09:28:d4:e1:56:d3:80:49:81:c3:b3:
fa:e5:b8:6f:25:11:9e:39:9d:cc:c3:c0:23:73:ae:
ff:16:23:fc:5d:9a:16:34:3d:ff:c0:fa:ee:72:5e:
09:16:39:0e:59:3d:cd:40:7c:a9:df:97:3b:59:6b:
31:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B5:9C:F7:66:99:85:09:F8:9C:5A:FF:F7:A8:98:56:0C:CA:26:6B
X509v3 Authority Key Identifier:
keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a31333a3a2f34382d3634203d3e203536303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:9b80:13::/48
Signature Algorithm: sha256WithRSAEncryption
ca:61:92:89:47:26:ec:0e:af:4c:f7:3e:e2:d2:83:2f:63:18:
d7:09:37:1c:cd:a4:56:79:2b:5c:ff:cf:12:da:d7:f9:54:f4:
db:31:ff:90:e4:56:75:34:92:f0:58:4f:77:00:dc:39:9d:03:
65:58:ec:48:1d:94:ed:07:1b:e7:4e:31:e6:0d:ea:6e:fe:69:
ca:37:41:aa:21:70:b1:65:f1:e2:25:18:83:c4:e6:e4:eb:87:
58:5a:3c:93:3c:16:f4:4a:ac:1f:66:a2:21:4b:bf:5b:f2:be:
ab:53:0a:89:06:99:a2:4f:e1:90:8b:0c:51:f0:6b:7b:a1:34:
fe:82:c3:a9:ba:c6:d7:f4:b7:89:51:51:23:c6:0c:b8:ca:1a:
7d:f2:2e:65:2f:f1:c2:93:af:13:14:03:8a:92:b4:7b:ba:7d:
61:75:59:39:83:d4:ef:41:37:18:0d:75:40:f5:04:c9:e2:20:
5b:c7:3e:e1:d5:98:c5:4c:83:62:e3:03:11:fa:c5:3a:62:7a:
ca:f7:5c:f0:5c:26:e7:ea:24:ac:89:4c:91:81:b8:93:7a:99:
ae:a6:07:58:cf:0c:ec:c5:6f:67:41:5b:7f:c0:c6:2e:f4:ba:
8a:f3:63:80:1d:9f:82:d9:fd:d1:12:f6:be:6e:d8:1e:d3:5f:
d1:12:5f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:49:12 2026 by rpki-client