
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100948885649555457/0/323430323a653734303a3a2f33322d3332203d3e20313331343930.roa
File: 323430323a653734303a3a2f33322d3332203d3e20313331343930.roa (raw, json)
Hash identifier: DEEgmSg+O7gl+RVm4t7MTe4v/o6dKWcbJAlI4KqZGJs=
Subject key identifier: F7:9B:10:0E:F2:58:04:25:86:72:66:1B:6C:93:C5:A3:8B:8E:E0:C2
Certificate issuer: /CN=C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145
Certificate serial: 080F7F51C667206524326FBFCB100D5D23B02C19
Authority key identifier: C5:F7:3D:AC:C5:F6:56:C0:8D:8D:2C:5D:EC:72:56:CF:A6:F4:11:45
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/323430323a653734303a3a2f33322d3332203d3e20313331343930.roa
Signing time: Fri 29 May 2026 06:41:26 +0000
ROA not before: Fri 29 May 2026 06:36:26 +0000
ROA not after: Fri 28 May 2027 06:41:26 +0000
asID: 131490
IP address blocks: 2402:e740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl
rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 10:40:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:0f:7f:51:c6:67:20:65:24:32:6f:bf:cb:10:0d:5d:23:b0:2c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145
Validity
Not Before: May 29 06:36:26 2026 GMT
Not After : May 28 06:41:26 2027 GMT
Subject: CN=F79B100EF25804258672661B6C93C5A38B8EE0C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1a:76:14:01:0c:75:4a:82:71:06:ad:19:91:
f6:35:48:43:87:c2:fc:f4:c4:7b:20:06:89:a7:cd:
4c:bb:2f:7e:b4:15:95:26:88:e4:40:90:b8:87:c0:
4e:d5:6d:6e:db:94:7c:ab:82:dc:51:c6:d8:c3:76:
8b:77:94:20:66:5f:45:c6:de:84:ea:29:12:22:1e:
f7:5a:2a:0a:da:56:17:20:be:70:85:7c:0a:f3:72:
65:79:7b:b1:a2:93:bc:88:df:d4:dd:82:f5:c4:0c:
16:27:fa:87:a0:40:6d:56:95:fc:32:f0:71:2d:7d:
bf:aa:9b:fa:e5:31:de:0d:4e:7e:c6:bc:aa:11:5b:
13:96:b0:7b:bf:bb:e8:03:4b:27:f1:20:3e:1a:af:
2e:01:fc:54:0b:58:4b:0d:05:8d:df:ea:7e:b1:8a:
69:8e:39:52:a9:b4:1b:73:c7:b9:06:4f:f3:bf:9f:
44:3f:e8:32:40:ed:09:2a:b8:a6:8c:73:35:68:00:
cf:0f:fc:36:fb:d7:b3:2a:fe:3f:13:da:6f:e6:36:
20:2d:32:bc:f8:c9:5e:e7:1d:3d:5a:04:d7:1c:dd:
83:54:66:77:29:b3:7c:c6:a6:f6:ca:ac:ed:f8:21:
c0:99:bf:3f:06:e7:62:80:07:78:d8:d8:80:3f:b4:
58:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9B:10:0E:F2:58:04:25:86:72:66:1B:6C:93:C5:A3:8B:8E:E0:C2
X509v3 Authority Key Identifier:
keyid:C5:F7:3D:AC:C5:F6:56:C0:8D:8D:2C:5D:EC:72:56:CF:A6:F4:11:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/323430323a653734303a3a2f33322d3332203d3e20313331343930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:e740::/32
Signature Algorithm: sha256WithRSAEncryption
96:59:86:ad:a8:d6:0f:5d:ee:e1:3a:28:78:ba:f0:b1:16:a4:
6b:76:19:f8:75:92:05:c1:eb:32:fd:97:21:16:a7:d4:56:98:
da:f4:d9:93:d1:b6:98:9b:34:77:59:0f:4a:74:7a:3b:22:c4:
82:33:75:bd:d9:1c:93:7e:e3:40:47:77:ab:d2:82:00:68:65:
a7:eb:6a:80:c1:d0:40:8d:49:65:15:5b:b6:29:f7:8b:8b:9a:
3a:3d:19:07:8b:ad:5b:64:32:32:68:3e:59:38:7d:41:97:4f:
0d:27:ab:05:dc:fe:74:40:f7:86:a5:59:20:bd:a7:70:a4:49:
f6:52:99:ba:ea:f6:7d:6e:a1:a8:c1:fd:75:a7:49:14:b3:a4:
d3:81:1f:9c:1c:cc:1c:c1:68:23:91:f1:46:74:e2:cd:71:a4:
44:8e:45:6e:da:9d:6e:d3:45:2d:0c:87:07:a5:c9:4a:ac:7d:
0b:d8:ad:82:f1:81:60:e2:9c:39:cd:04:37:df:02:7f:3e:ea:
86:93:a6:e5:62:ed:c5:b8:6f:f4:53:fc:0f:2d:f0:e3:72:1f:
d9:95:19:d3:62:fa:88:d8:39:84:67:62:bf:a8:8e:cd:34:45:
41:d5:89:75:69:5e:6c:77:eb:af:93:fb:34:c9:e8:6b:44:c5:
cd:ea:b5:e1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri May 29 22:58:49 2026 by rpki-client