
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a3a2f34382d3634203d3e203536303431.roa
File: 323430323a396238303a3a2f34382d3634203d3e203536303431.roa (raw, json)
Hash identifier: svUGsHeITkEajaZy4sBFQ2E+r9m4oB/h5rGSSUYF2VU=
Subject key identifier: 59:0C:9B:5B:3E:EA:7C:89:F3:C1:D4:41:F7:07:2B:5C:6C:BF:E0:AC
Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Certificate serial: 32B8129E3F7B5A0C29065AFB090AFB96659DE861
Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a3a2f34382d3634203d3e203536303431.roa
Signing time: Fri 29 May 2026 07:14:10 +0000
ROA not before: Fri 29 May 2026 07:09:10 +0000
ROA not after: Fri 28 May 2027 07:14:10 +0000
asID: 56041
IP address blocks: 2402:9b80::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 23:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:b8:12:9e:3f:7b:5a:0c:29:06:5a:fb:09:0a:fb:96:65:9d:e8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Validity
Not Before: May 29 07:09:10 2026 GMT
Not After : May 28 07:14:10 2027 GMT
Subject: CN=590C9B5B3EEA7C89F3C1D441F7072B5C6CBFE0AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:67:56:52:3a:b5:52:f3:37:14:b7:d8:8b:73:
32:97:64:95:72:37:e5:5e:9e:95:ca:3a:7f:fc:14:
c8:35:5a:91:41:b9:b8:59:4b:d0:d8:9f:c3:a9:08:
89:55:88:12:35:64:fc:52:f2:6c:80:a6:f8:35:bf:
7c:df:6c:aa:f8:3c:fe:22:88:0c:70:2f:a5:ff:41:
89:f4:c9:e5:fc:68:3c:a4:0e:79:9b:be:1a:41:7e:
b7:f3:2a:b8:f8:3d:12:33:60:1e:45:5c:1d:a7:ec:
e9:34:e6:c4:27:8c:4d:9f:fd:fc:b7:fa:a1:85:1f:
9b:20:5e:b5:58:46:16:9e:5b:a1:bc:60:b6:58:88:
b1:53:d8:07:8f:f9:96:05:6e:ed:c6:c8:93:2d:73:
f2:ef:cd:e9:e5:77:1a:8e:f7:a7:88:d6:09:88:f5:
1b:75:65:21:d7:4f:49:b6:78:4a:e6:34:57:41:64:
2b:74:1b:a5:f8:54:5f:2f:33:aa:8f:09:ac:09:24:
16:b0:fe:23:dc:bd:20:33:2b:a3:f1:73:02:9f:2a:
b2:4a:61:7c:4e:a4:a2:e5:f1:6c:dd:61:cc:8d:26:
fc:cf:d9:50:ce:92:12:5b:1f:6e:e7:44:25:18:e1:
51:2e:8b:2a:c5:bd:bc:5a:3e:cc:38:1d:6a:92:1e:
aa:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0C:9B:5B:3E:EA:7C:89:F3:C1:D4:41:F7:07:2B:5C:6C:BF:E0:AC
X509v3 Authority Key Identifier:
keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a3a2f34382d3634203d3e203536303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:9b80::/48
Signature Algorithm: sha256WithRSAEncryption
96:b3:46:8e:3c:56:d9:20:4e:28:26:94:93:d9:aa:ce:23:87:
29:37:92:50:e7:5a:d2:72:31:d0:d8:d9:1c:fc:57:ac:bb:91:
82:ea:57:a5:61:b5:3d:35:d4:83:d5:d4:d4:4d:00:0a:59:7f:
12:c8:a5:2a:46:84:be:42:d9:15:56:ed:75:bf:d1:ae:f0:75:
ed:39:20:0a:34:6a:b9:a3:97:66:1f:c4:21:d4:cd:6c:e7:f4:
19:d9:16:b1:67:80:93:57:7a:ce:88:4a:ca:3f:0e:50:e7:46:
7a:68:a3:b8:84:90:0b:e8:ab:d6:96:82:07:86:9f:85:25:54:
64:4e:0a:66:27:aa:6d:50:d8:83:0a:16:b5:9a:75:20:d8:e1:
26:4d:1c:20:ac:0e:1d:8e:c4:c9:3e:8e:cd:c4:1d:e6:18:ae:
42:66:39:86:9b:8e:e0:31:21:47:fb:d4:d2:c0:f7:97:47:37:
18:2f:72:1d:26:9b:6c:2a:64:4a:5b:05:8a:d6:0b:0d:85:35:
2f:85:c0:eb:70:66:10:38:c1:9e:a1:df:ff:d4:d3:de:45:9e:
25:71:9f:6c:55:81:17:df:b8:a4:e1:fb:5b:17:ed:ad:c0:9a:
ce:12:0b:f4:2b:f0:49:b2:9d:43:e1:4d:0a:31:65:64:a6:b6:
da:74:db:82
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:48:58 2026 by rpki-client