
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100948885649555457/0/323430323a653734303a3a2f33322d3332203d3e2039343035.roa
File: 323430323a653734303a3a2f33322d3332203d3e2039343035.roa (raw, json)
Hash identifier: AhaqnryXWgJbqZIuoHdvwVLm5yGOjOFLv/poRen0t38=
Subject key identifier: 2C:C7:98:32:BD:8A:FD:52:84:1C:6A:71:EE:7D:78:6E:78:D7:63:DC
Certificate issuer: /CN=C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145
Certificate serial: 6809FEABE60FFC3F8FFB8B6AE0EBD4C03ABE3289
Authority key identifier: C5:F7:3D:AC:C5:F6:56:C0:8D:8D:2C:5D:EC:72:56:CF:A6:F4:11:45
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/323430323a653734303a3a2f33322d3332203d3e2039343035.roa
Signing time: Fri 29 May 2026 06:41:02 +0000
ROA not before: Fri 29 May 2026 06:36:02 +0000
ROA not after: Fri 28 May 2027 06:41:02 +0000
asID: 9405
IP address blocks: 2402:e740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl
rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 10:40:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:09:fe:ab:e6:0f:fc:3f:8f:fb:8b:6a:e0:eb:d4:c0:3a:be:32:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145
Validity
Not Before: May 29 06:36:02 2026 GMT
Not After : May 28 06:41:02 2027 GMT
Subject: CN=2CC79832BD8AFD52841C6A71EE7D786E78D763DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8a:f5:da:09:c5:52:61:0e:40:d0:04:48:cf:
1f:a5:6c:20:a8:ff:71:ba:39:e1:ef:1c:81:f7:63:
cb:04:70:e0:f5:f7:8b:a9:c2:94:b9:9b:60:9b:ea:
25:9e:fd:95:14:6a:a8:fb:63:71:e2:60:6f:19:f1:
12:2b:08:58:cb:0b:04:31:c9:c1:26:dc:a7:1f:36:
75:ae:a9:01:63:b6:e6:a6:89:fe:ff:e5:a5:de:e4:
46:1a:97:0a:8a:34:ab:81:58:8c:fc:b8:b9:ef:eb:
a6:82:f3:74:93:e0:93:04:fc:b6:da:37:61:56:45:
c0:3c:dc:66:9a:0a:8b:28:80:a5:00:a7:bb:ab:41:
b6:e1:70:32:a5:b3:4e:99:6a:2e:13:13:97:0c:71:
fd:b9:44:eb:6e:c8:94:67:a3:f9:f3:51:fc:5e:5c:
f8:03:a1:a6:1d:e7:1d:f1:21:c2:93:08:6e:bb:ed:
59:08:7c:ab:2c:5d:11:39:d4:05:28:d0:7f:01:b8:
04:6a:cb:ae:e9:7b:61:a3:8c:76:ea:5e:c2:4c:3d:
f5:9f:d6:39:1b:87:5e:06:98:6d:0e:75:9a:72:9a:
c0:fe:70:30:59:16:4f:ea:77:68:8b:be:d6:48:c2:
12:77:5e:86:c9:70:f8:50:43:5a:e9:19:ba:26:d6:
42:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C7:98:32:BD:8A:FD:52:84:1C:6A:71:EE:7D:78:6E:78:D7:63:DC
X509v3 Authority Key Identifier:
keyid:C5:F7:3D:AC:C5:F6:56:C0:8D:8D:2C:5D:EC:72:56:CF:A6:F4:11:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/323430323a653734303a3a2f33322d3332203d3e2039343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:e740::/32
Signature Algorithm: sha256WithRSAEncryption
4d:42:28:99:5b:b5:12:57:bf:99:1a:b8:fb:6a:48:35:d7:1e:
ac:90:9d:92:3f:77:83:93:89:a0:25:d9:13:b6:69:4a:b9:e4:
a4:30:8d:fd:99:24:5a:28:37:09:16:06:e2:9a:c9:96:c6:ed:
16:90:6b:4d:3f:1d:54:89:ed:2f:0a:22:77:ad:35:92:01:b9:
b8:a0:98:b0:fd:cf:37:3b:c2:bb:6b:c1:32:e0:57:b6:5e:5a:
a9:a2:70:ee:68:56:d3:f1:19:d2:80:27:c1:7e:73:9f:56:f3:
13:65:d8:42:2d:c7:68:7c:9b:5e:11:ff:8a:77:73:ab:ac:78:
43:b9:22:f5:dd:79:23:a4:a1:62:32:b7:04:96:10:02:a9:32:
34:f7:c4:7c:55:d4:37:a9:70:5c:d1:5c:69:15:e0:2b:bb:e2:
1f:a4:49:05:24:9c:5a:7b:aa:08:e6:7a:33:9f:be:9a:2b:d8:
dc:70:97:6d:40:5a:35:9f:98:71:31:78:7a:75:64:e2:ad:37:
07:d1:ef:a3:23:8b:e3:c7:01:8d:f6:7f:b3:c4:e8:c0:2b:68:
b3:6c:ad:22:33:ec:b1:d1:6e:73:17:d2:6f:7c:82:a2:39:94:
70:df:1b:36:a3:80:38:e5:33:2f:02:7b:a9:3f:c0:95:dc:c4:
19:7f:66:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:58:02 2026 by rpki-client