
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a643a3a2f34382d3634203d3e203536303431.roa
File: 323430323a396238303a643a3a2f34382d3634203d3e203536303431.roa (raw, json)
Hash identifier: JvXXguqAzdnEOLPHAAMDPl2WQu4HlfeXGwkHuoWqmMo=
Subject key identifier: 2F:85:E2:5E:38:DB:C7:B8:07:E5:46:D5:C4:AF:D0:FF:C9:83:46:B8
Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Certificate serial: 1EB0DA6BFC210148BD7B193E78268378339D9273
Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a643a3a2f34382d3634203d3e203536303431.roa
Signing time: Fri 29 May 2026 07:14:09 +0000
ROA not before: Fri 29 May 2026 07:09:09 +0000
ROA not after: Fri 28 May 2027 07:14:09 +0000
asID: 56041
IP address blocks: 2402:9b80:d::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 23:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:b0:da:6b:fc:21:01:48:bd:7b:19:3e:78:26:83:78:33:9d:92:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Validity
Not Before: May 29 07:09:09 2026 GMT
Not After : May 28 07:14:09 2027 GMT
Subject: CN=2F85E25E38DBC7B807E546D5C4AFD0FFC98346B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b8:31:ec:bb:bc:1d:b5:c2:f5:13:1b:8e:10:
fb:04:af:a4:29:4a:85:d8:96:e9:52:01:f4:ba:09:
99:14:47:05:9f:3d:66:6b:64:0d:72:6f:14:54:1e:
30:bb:93:7a:f9:39:d9:1e:88:de:44:41:a3:4a:ad:
63:a7:f2:07:90:50:eb:64:85:40:4a:70:c8:cc:eb:
fc:67:3b:f2:cc:2f:f0:fe:fb:6b:84:ac:4e:45:3a:
43:b0:97:e5:54:2c:03:51:88:4b:a1:c4:3a:3d:3d:
e1:cb:04:db:27:e6:2f:0d:c9:03:dd:a0:e4:ee:05:
55:a3:a4:ba:d2:ac:7b:46:80:68:85:7d:7c:b2:42:
0c:e0:1c:28:8c:af:dd:b9:7e:b7:76:49:71:22:a2:
f7:3c:eb:ca:51:38:65:5b:7f:72:4e:79:6a:cb:af:
10:16:53:25:97:ef:5a:5d:d3:7a:65:9b:e4:df:d0:
cf:7a:ba:69:88:0f:f5:92:97:bf:73:2a:39:ac:d7:
50:73:8e:dc:ab:d4:7e:8e:a5:21:b9:3b:aa:1e:44:
28:c6:a1:20:33:b0:e4:b9:10:dc:26:2a:7a:fd:32:
e4:96:c4:3f:09:0b:ed:58:0c:14:da:d1:99:e0:19:
39:dd:01:27:a7:85:45:e2:f9:55:81:42:98:d9:b7:
64:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:85:E2:5E:38:DB:C7:B8:07:E5:46:D5:C4:AF:D0:FF:C9:83:46:B8
X509v3 Authority Key Identifier:
keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a643a3a2f34382d3634203d3e203536303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:9b80:d::/48
Signature Algorithm: sha256WithRSAEncryption
08:bb:42:8c:12:7d:1e:bc:be:c0:b9:a2:e9:0f:47:fe:5b:32:
5e:dd:49:17:90:f2:40:4d:f8:8d:0c:ce:ad:20:ce:f2:16:7e:
d4:f9:aa:f1:c2:4a:db:01:84:e1:4c:33:e2:9c:75:db:81:b4:
5a:01:64:30:07:85:44:9e:14:36:23:f5:ae:af:fa:c6:51:e2:
43:82:0e:cb:87:b8:9d:68:3d:7c:bc:94:30:78:3d:be:75:df:
f3:8e:7a:ca:3a:36:43:92:52:9a:39:ec:24:57:7b:39:c0:78:
e1:c0:09:16:9e:8c:75:f7:db:ea:0b:85:1c:5d:91:22:72:77:
33:d9:ca:70:64:bd:eb:b7:e3:a4:ec:b9:3b:58:9e:81:59:2f:
66:7f:e6:7d:99:4c:5d:66:df:f0:84:63:15:45:61:c9:9c:e4:
05:94:c2:d4:85:a7:b3:9d:80:2c:39:16:af:14:b0:4c:3b:9e:
0f:1d:e6:72:36:2d:0f:94:50:b3:69:35:b2:90:e2:6a:9f:68:
c0:f6:84:57:fc:cf:69:10:6f:e3:3a:20:f2:14:46:83:e5:b3:
e9:bb:5f:a9:8b:f4:01:b7:5f:dc:03:b2:5b:c4:da:f9:ce:89:
0d:36:60:ab:f8:14:e3:97:ac:f3:87:40:f6:d6:1b:06:56:31:
5e:0b:9a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:48:57 2026 by rpki-client