
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a353a3a2f34382d3634203d3e203536303431.roa
File: 323430323a396238303a353a3a2f34382d3634203d3e203536303431.roa (raw, json)
Hash identifier: Wge5zRsFG/tZPSlnOmOwOT9uStC8E4fLoSksTcu8cFU=
Subject key identifier: 83:8F:EF:43:32:CE:60:D2:41:4D:BC:2C:C0:80:F7:C0:65:46:97:FB
Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Certificate serial: 1AB3048D6613167E3DC41C3F4751EBF04CCC5CFB
Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a353a3a2f34382d3634203d3e203536303431.roa
Signing time: Fri 29 May 2026 07:14:10 +0000
ROA not before: Fri 29 May 2026 07:09:10 +0000
ROA not after: Fri 28 May 2027 07:14:10 +0000
asID: 56041
IP address blocks: 2402:9b80:5::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 23:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:b3:04:8d:66:13:16:7e:3d:c4:1c:3f:47:51:eb:f0:4c:cc:5c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Validity
Not Before: May 29 07:09:10 2026 GMT
Not After : May 28 07:14:10 2027 GMT
Subject: CN=838FEF4332CE60D2414DBC2CC080F7C0654697FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d4:f5:90:09:9e:f4:0f:e7:68:1b:86:5f:79:
6e:77:0f:9e:b5:f0:ec:f2:bb:05:88:11:ae:fe:f1:
f7:91:25:cd:71:41:e3:38:4f:52:11:69:a1:8d:31:
7d:91:e8:f1:5f:38:fa:25:af:97:22:51:b7:f7:ec:
52:1f:3e:4b:85:1d:c8:41:56:28:cb:04:95:d2:14:
c0:19:d5:77:cd:a8:62:06:31:55:5c:f7:3e:4d:96:
c9:7f:04:8f:99:b1:9e:59:0d:d3:21:1e:0c:66:18:
3f:f8:9f:e3:49:c8:7f:a3:d3:12:52:4f:03:d7:1b:
5b:ef:e9:86:4d:c6:e4:c4:cf:a0:c1:2c:78:d7:95:
42:72:02:74:6b:23:3c:6b:e5:b7:15:6e:74:ca:e9:
2b:80:28:aa:37:d2:43:93:c2:4f:f3:9d:c0:f2:1e:
81:32:05:a0:73:7b:7c:24:ac:9d:18:cf:30:c4:e0:
c7:75:30:b0:26:ad:0c:50:ba:d1:3d:83:6f:31:36:
f8:bf:98:9d:b1:81:19:13:50:58:af:ec:f0:15:b7:
0e:8f:5b:8d:c8:98:6a:6b:fb:0d:85:b7:dc:12:6d:
24:92:c8:c7:18:bf:33:66:f3:97:5e:3a:4c:ec:b8:
6f:d7:f2:33:94:37:f9:c8:9c:12:4b:72:d1:35:dc:
12:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8F:EF:43:32:CE:60:D2:41:4D:BC:2C:C0:80:F7:C0:65:46:97:FB
X509v3 Authority Key Identifier:
keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a353a3a2f34382d3634203d3e203536303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:9b80:5::/48
Signature Algorithm: sha256WithRSAEncryption
72:39:f7:85:db:4b:45:41:9d:65:55:56:b4:03:0d:3e:09:a0:
47:2a:8b:5b:c1:0c:0d:23:fb:04:2f:81:83:09:1d:c5:c8:c6:
4b:c3:f0:54:78:96:b0:5b:58:88:ce:71:e1:0f:2f:0e:a6:03:
39:ff:8b:06:65:a5:56:a7:19:89:92:29:84:8f:26:3c:21:a5:
b1:f3:fe:78:ed:cc:00:b0:74:d5:bd:78:59:1a:8f:22:f5:f0:
ed:b5:77:e7:e5:26:ca:96:f3:b1:25:39:84:75:87:3d:56:2f:
b4:10:bf:17:ce:1b:3b:15:65:36:d5:8d:54:9f:f4:5c:cf:c8:
7d:cf:7e:c8:d0:5b:16:7e:44:be:24:c0:b1:83:f4:5d:6f:ac:
20:84:d8:ee:1a:21:26:ec:15:67:58:c8:3e:f1:3b:07:3a:11:
c3:4d:06:43:94:4f:17:96:2d:48:b1:5b:a0:e6:24:bb:76:e5:
79:82:92:39:bf:e0:99:b6:1e:68:94:66:6a:3f:3e:ea:5a:37:
cb:a1:55:c0:d5:29:ca:c4:7f:d5:9d:7f:dd:6f:f1:19:df:f1:
11:5c:59:44:1c:8e:40:4a:bd:89:82:20:e2:a0:d3:61:15:47:
d2:a4:7a:e9:ce:39:2f:6b:c7:0a:bc:bd:40:7b:c8:7a:6f:93:
00:39:36:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:49:13 2026 by rpki-client