
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748176387/0/323430333a343238303a3a2f34382d3438203d3e203233373234.roa
File: 323430333a343238303a3a2f34382d3438203d3e203233373234.roa (raw, json)
Hash identifier: JU3XnXtyT8UelE8ZUTUzJFF4EsTcd3qBE1P0ThkMbkc=
Subject key identifier: 37:03:7D:0E:DE:79:46:50:3B:D6:23:29:FC:59:A8:49:8B:63:A5:B7
Certificate issuer: /CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89
Certificate serial: 4498AD2EE182C5C02292D1896D37C340D9E5683D
Authority key identifier: B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/323430333a343238303a3a2f34382d3438203d3e203233373234.roa
Signing time: Wed 20 May 2026 02:54:30 +0000
ROA not before: Wed 20 May 2026 02:49:30 +0000
ROA not after: Wed 19 May 2027 02:54:30 +0000
asID: 23724
IP address blocks: 2403:4280::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl
rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 07:35:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:98:ad:2e:e1:82:c5:c0:22:92:d1:89:6d:37:c3:40:d9:e5:68:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89
Validity
Not Before: May 20 02:49:30 2026 GMT
Not After : May 19 02:54:30 2027 GMT
Subject: CN=37037D0EDE7946503BD62329FC59A8498B63A5B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:aa:a3:5e:ec:e5:0e:fe:77:b0:bb:0d:7e:
bf:55:aa:b2:62:3e:9d:de:76:92:bd:0c:4b:54:54:
a3:e9:7b:83:61:03:95:56:d1:3e:dc:64:3a:27:0d:
85:c6:15:22:a3:7c:33:d3:f1:df:ac:98:de:01:42:
97:cc:2e:1d:d0:5e:b8:ce:90:8a:1f:8b:76:44:4d:
8f:31:46:9e:88:c8:ce:ef:7b:ff:33:ec:20:85:bb:
64:a2:8d:3b:9d:04:06:5f:65:85:03:52:c3:84:9f:
4e:d6:8a:be:f4:8f:ab:af:cc:fc:8d:21:7d:d6:44:
e3:5a:7d:b6:c4:2e:32:8a:e9:bf:17:c6:82:59:b3:
ff:f4:2c:c6:a3:30:b8:b8:a7:f6:00:bd:92:e3:b6:
4d:b1:e3:ac:96:cd:4e:c2:5d:03:2d:97:d2:2a:4a:
b7:77:03:d0:12:b4:3d:8e:1e:90:49:66:8e:e7:60:
c8:7f:21:65:fa:59:c4:12:8b:b2:06:88:05:9f:e1:
4f:5b:fe:48:7c:ae:54:4f:5f:5d:cd:41:83:22:74:
35:21:c5:73:70:6f:ec:ba:ea:dd:80:df:2e:f7:15:
3a:d9:c3:41:73:14:1a:a3:d3:fe:aa:68:d6:e6:13:
22:93:d0:e9:e3:d9:39:7a:76:4e:50:4b:02:4b:07:
68:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:03:7D:0E:DE:79:46:50:3B:D6:23:29:FC:59:A8:49:8B:63:A5:B7
X509v3 Authority Key Identifier:
keyid:B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/323430333a343238303a3a2f34382d3438203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:4280::/48
Signature Algorithm: sha256WithRSAEncryption
60:85:fd:be:62:0c:3c:e8:85:35:12:59:1c:00:38:6d:de:c5:
c0:b6:bc:d0:13:fe:ed:8f:b0:30:78:bb:da:8c:ed:79:22:39:
ac:b2:a7:35:e7:6d:c9:dd:31:89:f1:f6:cd:d6:3f:0c:f9:18:
d8:d4:bd:38:07:10:38:37:88:95:a2:dc:d5:50:2b:ae:67:fa:
7f:ad:f1:02:c2:14:fb:0b:11:90:f4:d9:ca:fd:5f:c1:d2:88:
1d:fa:fa:50:b1:29:95:15:a0:c5:31:a4:d4:e1:b9:89:99:06:
59:0f:54:12:36:f2:6b:e2:60:e7:88:62:76:c7:b8:79:08:b4:
e1:4d:6b:02:ad:73:b9:5c:b7:83:68:b4:00:75:f6:5f:c7:10:
e6:e0:d3:ad:a6:23:57:e8:0a:fc:b8:3d:1b:3a:58:c8:ba:cb:
7b:34:88:e2:ef:86:7d:7b:a7:da:3b:b6:58:8d:be:aa:00:92:
cd:56:fc:56:75:74:3a:f1:86:64:ae:b4:95:67:75:cc:ed:ba:
26:d9:b8:f7:fa:cd:67:b2:c1:9a:1d:78:3e:0f:75:35:a2:0e:
51:24:a8:ba:02:29:c5:cc:47:1e:53:f7:cd:ce:a7:c5:6d:f2:
67:45:94:70:e0:b5:4a:ef:2d:2c:e0:ae:af:c0:5c:71:c7:c9:
7e:81:97:7f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 30 00:43:46 2026 by rpki-client