
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a653a3a2f34382d3634203d3e203536303431.roa
File: 323430323a396238303a653a3a2f34382d3634203d3e203536303431.roa (raw, json)
Hash identifier: OqkFB7K+ExoMltb7v0kqVxawJdgv6SC5L1yyhv5/CY4=
Subject key identifier: BA:38:F4:44:3F:84:55:D9:29:1E:44:6E:02:7D:74:37:75:8D:29:11
Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Certificate serial: 6119B710CFF57D5F9A45C0E2707067EE46EA2C09
Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a653a3a2f34382d3634203d3e203536303431.roa
Signing time: Fri 29 May 2026 07:14:09 +0000
ROA not before: Fri 29 May 2026 07:09:09 +0000
ROA not after: Fri 28 May 2027 07:14:09 +0000
asID: 56041
IP address blocks: 2402:9b80:e::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 23:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:19:b7:10:cf:f5:7d:5f:9a:45:c0:e2:70:70:67:ee:46:ea:2c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Validity
Not Before: May 29 07:09:09 2026 GMT
Not After : May 28 07:14:09 2027 GMT
Subject: CN=BA38F4443F8455D9291E446E027D7437758D2911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:08:94:80:2a:cc:1c:2f:8c:6d:47:1a:c0:d5:
08:cf:5c:0c:ae:86:e4:ba:c9:6d:06:50:3f:aa:aa:
d9:c5:95:92:52:82:bc:1a:d2:f9:d8:e1:b2:f6:63:
9a:08:cf:20:bb:18:ba:d3:fd:43:e2:c9:fe:c5:22:
89:b2:3d:f9:e4:9f:e2:3b:17:8e:9e:72:78:21:8d:
a2:65:35:84:09:e1:20:e0:39:8b:5a:4e:9c:3c:58:
f2:34:e0:ca:3f:2d:b6:cd:04:ac:35:46:8a:73:27:
45:ad:69:3b:aa:3e:22:eb:e4:37:48:3b:e2:6e:8b:
e8:2f:0d:22:f6:54:14:ec:47:f3:6b:5a:a6:1d:c0:
f3:22:12:fc:cb:36:0d:ae:93:3e:dd:b9:f3:07:ae:
aa:7f:fb:d7:bd:98:df:4e:6a:1e:e6:99:db:19:28:
b7:1e:e8:20:5b:e3:1e:d0:32:29:73:78:a0:59:0f:
5a:ac:f9:23:fe:f0:0e:28:3b:a0:59:cd:25:69:7a:
81:4b:58:a8:2c:0d:ea:fc:56:be:eb:ef:21:cb:4e:
8e:50:d5:d1:22:e7:0b:e9:d1:0a:8c:e5:cf:23:dc:
55:bc:cd:cd:37:39:b4:fb:7a:3c:be:4c:7c:21:14:
cb:64:49:72:a0:37:89:7c:15:44:43:f0:0f:c3:83:
62:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:38:F4:44:3F:84:55:D9:29:1E:44:6E:02:7D:74:37:75:8D:29:11
X509v3 Authority Key Identifier:
keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a653a3a2f34382d3634203d3e203536303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:9b80:e::/48
Signature Algorithm: sha256WithRSAEncryption
9c:04:0e:98:75:95:07:2b:b8:ab:8f:6e:b7:ba:8f:c2:c5:18:
6d:68:95:e5:96:13:96:68:c8:20:62:7e:8b:0d:ac:95:c5:33:
0b:f1:f4:db:f1:a3:18:42:d0:6b:19:86:4f:07:91:b8:fa:4b:
b0:b9:a7:87:c9:26:86:ca:c8:df:5b:21:21:98:ea:54:bc:0f:
29:3b:d3:74:e8:e1:ec:33:00:93:70:93:dc:b4:eb:7c:f7:5b:
97:e0:14:34:d0:96:26:cf:7e:70:cd:0b:a2:bd:a3:1e:f2:e2:
2b:17:c9:37:c2:dd:64:77:b4:ac:01:ef:50:aa:85:46:30:f6:
dd:23:0a:2a:28:6d:a8:72:f8:4a:61:0e:20:5a:b3:bc:55:76:
22:15:51:80:e0:86:49:79:f2:e7:8a:7d:c9:13:1c:f5:cf:22:
37:96:24:b1:3e:81:b8:0b:32:66:62:66:12:2a:fd:4d:ca:a6:
63:1a:c0:08:c4:ee:5a:db:73:63:64:00:f3:8c:0a:ca:76:87:
9e:8a:ee:ec:3f:63:c4:c6:e9:53:85:87:83:9f:6f:20:36:c4:
d9:5b:58:0c:b7:82:a0:0f:5e:62:7e:6a:6d:e4:e2:32:c3:d8:
5e:8d:d2:38:fb:16:a4:a4:8b:d9:05:b8:79:b1:6b:c7:a2:25:
3b:a2:2a:51
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUYRm3EM/1fV+aRcDicHBn7kbqLAkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2
RUZERDAwRjAeFw0yNjA1MjkwNzA5MDlaFw0yNzA1MjgwNzE0MDlaMDMxMTAvBgNV
BAMTKEJBMzhGNDQ0M0Y4NDU1RDkyOTFFNDQ2RTAyN0Q3NDM3NzU4RDI5MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkCJSAKswcL4xtRxrA1QjPXAyu
huS6yW0GUD+qqtnFlZJSgrwa0vnY4bL2Y5oIzyC7GLrT/UPiyf7FIomyPfnkn+I7
F46ecnghjaJlNYQJ4SDgOYtaTpw8WPI04Mo/LbbNBKw1RopzJ0WtaTuqPiLr5DdI
O+Jui+gvDSL2VBTsR/NrWqYdwPMiEvzLNg2ukz7dufMHrqp/+9e9mN9Oah7mmdsZ
KLce6CBb4x7QMilzeKBZD1qs+SP+8A4oO6BZzSVpeoFLWKgsDer8Vr7r7yHLTo5Q
1dEi5wvp0QqM5c8j3FW8zc03ObT7ejy+THwhFMtkSXKgN4l8FURD8A/Dg2JfAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUujj0RD+EVdkpHkRuAn10N3WNKREwHwYDVR0j
BBgwFoAUEGXp5U0cFTfONLXuRFuTR2790A8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjcyNzc1MjM1MTk0MDYwOS8wLzEwNjVFOUU1NEQxQzE1MzdDRTM0QjVFRTQ0NUI5
MzQ3NkVGREQwMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2RUZERDAwRi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwOTY3Mjc3NTIzNTE5NDA2MDkvMC8zMjM0MzAzMjNh
Mzk2MjM4MzAzYTY1M2EzYTJmMzQzODJkMzYzNDIwM2QzZTIwMzUzNjMwMzQzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACQCm4AADjANBgkqhkiG9w0BAQsFAAOCAQEAnAQOmHWVByu4q49u
t7qPwsUYbWiV5ZYTlmjIIGJ+iw2slcUzC/H02/GjGELQaxmGTweRuPpLsLmnh8km
hsrI31shIZjqVLwPKTvTdOjh7DMAk3CT3LTrfPdbl+AUNNCWJs9+cM0Lor2jHvLi
KxfJN8LdZHe0rAHvUKqFRjD23SMKKihtqHL4SmEOIFqzvFV2IhVRgOCGSXny54p9
yRMc9c8iN5YksT6BuAsyZmJmEir9TcqmYxrACMTuWttzY2QA84wKynaHnoru7D9j
xMbpU4WHg59vIDbE2VtYDLeCoA9eYn5qbeTiMsPYXo3SOPsWpKSL2QW4ebFrx6Il
O6IqUQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:49:12 2026 by rpki-client