
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/323430333a346563303a3a2f33322d313238203d3e2034383337.roa
File: 323430333a346563303a3a2f33322d313238203d3e2034383337.roa (raw, json)
Hash identifier: 2oOC4IREjOvTvxPuiyC1tXBVBVkt+KsdaPeWwbtwVq0=
Subject key identifier: 69:8F:00:92:6B:F0:DB:CA:23:24:46:80:58:42:58:D1:DA:A4:BC:3A
Certificate issuer: /CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Certificate serial: 0D7709C630D110DE6E87C80840BFC3A342FE6550
Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/323430333a346563303a3a2f33322d313238203d3e2034383337.roa
Signing time: Mon 20 Apr 2026 05:51:46 +0000
ROA not before: Mon 20 Apr 2026 05:46:46 +0000
ROA not after: Mon 19 Apr 2027 05:51:46 +0000
asID: 4837
IP address blocks: 2403:4ec0::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:77:09:c6:30:d1:10:de:6e:87:c8:08:40:bf:c3:a3:42:fe:65:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Validity
Not Before: Apr 20 05:46:46 2026 GMT
Not After : Apr 19 05:51:46 2027 GMT
Subject: CN=698F00926BF0DBCA23244680584258D1DAA4BC3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:75:40:41:a7:97:98:3a:a4:54:f1:eb:93:35:
1e:29:75:7a:4c:67:45:e8:aa:93:87:1c:b9:c1:ad:
85:ec:ff:77:2b:41:00:f4:f7:f0:ce:39:c3:98:27:
10:4c:96:b8:4c:89:b9:85:84:2c:dc:21:96:f8:94:
cb:77:76:c6:6d:b2:a8:57:1c:b3:c3:e9:45:eb:c5:
c5:8d:bc:cd:db:ed:9a:69:98:72:63:e2:7f:fd:0b:
05:b4:6f:56:f7:27:26:19:d8:5b:3e:15:7f:2c:77:
85:7f:89:3d:67:0d:5b:6c:a2:10:dc:81:e4:5f:ff:
07:58:e8:a5:d3:65:45:e7:89:3e:eb:ac:43:09:19:
6e:60:ce:36:f5:9d:5d:57:21:6d:bd:58:6a:63:ca:
a6:81:37:71:2f:ea:d1:74:fc:3f:54:5d:c4:ab:66:
9b:5c:1f:2e:63:7b:d3:17:44:09:58:1b:e3:6c:b4:
7e:d5:5f:71:3e:f0:70:34:65:5b:bf:c7:cd:dc:55:
a2:75:60:2c:7f:d3:e3:f8:aa:cd:8f:cb:f9:49:6c:
8a:12:c2:c7:b1:9a:9c:c1:5f:9e:ce:61:a6:59:7b:
33:72:2b:96:5e:70:15:8a:d2:d4:2b:9c:c1:56:b3:
22:a6:8b:37:56:d4:da:70:a5:73:9e:a6:a0:26:c5:
95:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8F:00:92:6B:F0:DB:CA:23:24:46:80:58:42:58:D1:DA:A4:BC:3A
X509v3 Authority Key Identifier:
keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/323430333a346563303a3a2f33322d313238203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:4ec0::/32
Signature Algorithm: sha256WithRSAEncryption
93:46:c8:ec:9d:bf:c7:91:e9:c5:f1:9c:0c:93:70:ef:3e:c3:
d1:1f:37:f1:c2:01:c8:a1:47:cc:6b:6c:d5:46:3c:70:82:a3:
6e:50:15:0b:18:cb:2b:c7:97:72:b6:17:b9:4a:c3:fe:e0:7d:
47:fb:f5:45:1b:40:a1:91:8a:95:31:cc:0b:a7:b7:58:12:41:
20:f5:cc:f5:f2:4e:69:8a:22:a7:4c:d5:2f:7a:63:66:04:40:
68:1b:23:c5:79:50:ce:1a:e1:7f:ed:8d:cb:57:74:ed:9d:36:
f4:4b:d2:8b:a0:d5:4a:77:7f:7d:eb:54:a1:a4:7c:b8:c6:79:
1c:2c:de:c2:7a:1c:02:b9:9c:d1:9e:67:b0:e1:95:98:f1:91:
35:e4:82:af:97:79:69:f4:bb:4e:80:c3:19:9c:32:a8:47:ed:
24:6b:1e:a7:a8:05:90:23:74:5b:9b:af:db:1e:31:d8:02:7d:
7e:9f:0d:b2:8b:c9:c8:9a:0f:ae:49:85:43:7d:82:dc:bc:78:
1e:90:f8:a9:92:e9:81:03:88:82:85:05:42:47:8b:70:cc:d1:
af:bc:49:71:cd:c6:af:9c:3c:75:4b:ad:37:62:28:d9:c5:1b:
a6:c5:97:d1:d6:d3:c9:ff:44:1a:a2:fd:28:af:84:bb:8e:86:
c3:04:48:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 02:54:48 2026 by rpki-client