
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a383a3a2f34382d3634203d3e203536303431.roa
File: 323430323a396238303a383a3a2f34382d3634203d3e203536303431.roa (raw, json)
Hash identifier: B4XWacZFek2fKDG4UyZ+ZTq6FPtxYakPted8KzW+iOA=
Subject key identifier: F4:C9:29:51:82:36:DD:73:80:88:39:BD:68:09:D7:37:28:0E:2C:7E
Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Certificate serial: 01CD3666C042A0F5AA19E75EC88232FF4D5FD8D4
Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a383a3a2f34382d3634203d3e203536303431.roa
Signing time: Fri 29 May 2026 07:14:09 +0000
ROA not before: Fri 29 May 2026 07:09:09 +0000
ROA not after: Fri 28 May 2027 07:14:09 +0000
asID: 56041
IP address blocks: 2402:9b80:8::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 23:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:cd:36:66:c0:42:a0:f5:aa:19:e7:5e:c8:82:32:ff:4d:5f:d8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Validity
Not Before: May 29 07:09:09 2026 GMT
Not After : May 28 07:14:09 2027 GMT
Subject: CN=F4C929518236DD73808839BD6809D737280E2C7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1d:ff:71:e1:b7:7b:8f:6b:6d:6a:65:08:de:
49:db:df:bb:e5:46:73:a7:09:a8:8c:6d:8c:41:c2:
49:a7:30:82:36:01:ed:8b:b8:6e:1c:6b:63:c1:2d:
ab:72:fd:da:c6:d5:1f:7f:3a:bd:df:18:14:06:65:
6b:70:1b:9d:78:d2:54:78:4b:c2:d4:90:73:92:c0:
98:bd:60:10:d1:2e:bf:3d:cd:55:b7:77:fd:02:b1:
86:0e:90:87:8a:02:42:ce:9f:90:fb:82:b5:a9:48:
55:9c:7c:d5:47:fb:de:e2:54:2e:a4:29:c7:ee:2c:
a1:70:51:93:63:cf:73:b1:86:1d:f7:67:9d:9f:f0:
be:50:03:c3:48:44:0a:fe:e9:6f:64:bd:d2:b3:98:
f2:fd:23:90:1a:05:22:76:a4:ad:66:d6:2c:d2:d9:
ac:9f:31:32:35:1e:c0:97:36:ab:a9:d9:2e:fb:db:
c3:c9:e4:d8:78:25:02:ba:69:b7:2c:cf:b0:b3:bb:
9c:78:93:a9:77:5e:7e:f0:81:35:37:e4:fd:b0:b6:
a1:1d:79:cd:f1:af:4c:68:ab:c4:d5:1b:1b:30:53:
62:8a:c7:61:7b:f7:6b:07:46:fb:15:b0:1d:2a:e4:
8d:ce:b4:bd:b8:dc:9f:7b:09:19:06:ab:33:d3:42:
0a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C9:29:51:82:36:DD:73:80:88:39:BD:68:09:D7:37:28:0E:2C:7E
X509v3 Authority Key Identifier:
keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a383a3a2f34382d3634203d3e203536303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:9b80:8::/48
Signature Algorithm: sha256WithRSAEncryption
8e:d4:8d:87:29:b5:83:56:9c:ae:c1:66:d3:89:c6:d1:04:ba:
0b:88:c5:ad:eb:ef:87:ea:1e:15:69:25:9c:f0:5a:3e:db:b0:
59:bc:8e:9a:ce:39:ce:d3:33:58:99:c8:cd:bf:ae:07:b8:fb:
2f:2d:27:6c:40:7e:32:7c:01:4c:e9:2e:be:3d:fb:55:b3:79:
92:43:32:d0:57:e3:90:34:16:76:74:4e:97:ce:17:69:8a:68:
d5:b3:70:cd:6b:f4:b3:83:69:22:85:ca:72:ef:00:16:d3:57:
0d:67:0f:59:b3:33:89:03:a1:81:f5:2a:86:5f:81:79:c1:40:
0a:87:5f:ac:d3:02:2c:2c:15:2a:e3:a4:09:ee:d1:9b:d9:95:
1f:4d:47:85:9a:4a:fa:63:c8:64:f6:5d:c9:b2:7f:e4:e7:ae:
b0:70:06:43:fd:0e:b3:9c:30:6a:95:2b:fe:7d:95:77:c1:75:
dd:e8:28:e8:6d:09:85:82:46:4d:de:65:1a:22:e0:3b:63:cb:
84:8e:14:59:46:d9:34:77:3b:2b:c4:92:a0:41:ea:5c:89:48:
77:61:1c:91:07:57:3d:d6:3f:28:7d:25:58:92:b1:3f:1e:56:
f2:a2:20:63:b5:75:37:e4:2e:33:a6:b6:a6:45:e5:b9:59:e8:
37:54:bc:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:49:13 2026 by rpki-client