
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100991880549629955/0/323430343a653738303a3a2f33322d3332203d3e2030.roa
File: 323430343a653738303a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier: jDt2YO5IfWb4E+JvZ4HL3Mb4PviL245jOkb90zp1nDg=
Subject key identifier: FA:B7:0D:E9:E4:E9:E5:60:1F:30:1A:72:FF:70:36:DA:6B:27:E3:B0
Certificate issuer: /CN=060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD
Certificate serial: 16DEC58D9786D880C892EE24267F7E14F20C3507
Authority key identifier: 06:06:77:FF:DB:8F:A3:C6:C6:DC:2F:18:ED:F7:BE:DA:06:5F:B8:AD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/323430343a653738303a3a2f33322d3332203d3e2030.roa
Signing time: Mon 27 Apr 2026 03:51:53 +0000
ROA not before: Mon 27 Apr 2026 03:46:53 +0000
ROA not after: Mon 26 Apr 2027 03:51:53 +0000
asID: 0
IP address blocks: 2404:e780::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.crl
rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 04:39:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:de:c5:8d:97:86:d8:80:c8:92:ee:24:26:7f:7e:14:f2:0c:35:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD
Validity
Not Before: Apr 27 03:46:53 2026 GMT
Not After : Apr 26 03:51:53 2027 GMT
Subject: CN=FAB70DE9E4E9E5601F301A72FF7036DA6B27E3B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:cf:d0:51:5c:b5:09:b6:09:1b:0d:e8:55:67:
fc:8f:79:5c:9a:1f:fa:1b:92:5f:9b:a6:66:09:a4:
f5:97:4a:a4:1c:0c:fd:27:ea:3b:d5:3a:53:2d:99:
b7:6f:59:42:8c:33:10:da:96:ad:04:85:08:0c:e5:
e8:2d:c3:6d:40:cf:8b:d6:da:b3:0d:ed:49:68:53:
88:f0:a0:8e:90:fb:02:0d:15:24:11:3c:e8:27:52:
ca:a8:fe:cd:45:da:d3:6e:c3:dd:09:df:6f:85:f6:
ae:28:29:bc:31:ea:e6:2d:6a:0e:1c:15:97:db:fd:
93:75:7d:f7:7a:70:42:3a:aa:05:ed:2a:54:97:d8:
61:91:5a:8c:42:7a:33:7f:3e:b4:6c:e8:8f:b4:e2:
13:73:e6:a9:46:ed:24:ca:88:9d:20:fd:dc:8e:54:
51:46:fb:06:fb:ea:9d:a7:1d:c4:c3:17:03:2e:6e:
a7:40:ed:8b:30:66:29:ef:4b:b5:4a:37:20:17:4b:
53:be:b3:25:94:4f:05:40:a4:9d:f1:e4:d0:10:c5:
20:df:02:95:79:f1:4d:33:7d:76:fa:ee:af:f4:88:
de:17:9f:48:2c:d8:fd:c0:dc:2c:0d:39:5d:49:7a:
79:a2:72:df:26:4e:bc:6d:ed:54:51:88:7f:70:cb:
00:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B7:0D:E9:E4:E9:E5:60:1F:30:1A:72:FF:70:36:DA:6B:27:E3:B0
X509v3 Authority Key Identifier:
keyid:06:06:77:FF:DB:8F:A3:C6:C6:DC:2F:18:ED:F7:BE:DA:06:5F:B8:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/323430343a653738303a3a2f33322d3332203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:e780::/32
Signature Algorithm: sha256WithRSAEncryption
b1:13:18:d8:2a:27:f8:85:a2:e0:82:86:06:ea:53:31:51:81:
14:09:94:a9:e7:eb:45:8b:65:58:91:98:b9:3c:be:7a:5c:07:
ca:86:60:54:37:fa:57:91:11:d1:56:0e:06:8f:e8:5d:e9:27:
65:71:83:c7:13:99:eb:fe:ad:b4:10:7a:b2:48:65:e9:5c:a4:
35:0a:5c:bb:41:39:04:4d:b9:3b:5f:84:a2:c4:2d:4e:1c:d1:
da:52:d8:37:e9:5d:e8:9f:25:60:63:a0:8b:b4:98:2d:3a:55:
c7:bd:93:1a:73:d9:d8:5a:7d:92:b0:0b:f8:a2:cb:64:9f:6f:
fc:21:ed:f5:e4:f9:c9:dd:28:f0:8d:4e:6c:e7:dd:d8:08:f2:
e7:0c:14:11:cf:07:ef:68:54:f6:b0:ba:24:ca:ee:5f:71:7e:
37:02:3b:12:6b:d2:5e:ce:56:3f:df:9c:1f:0a:6e:02:a6:e3:
34:f5:76:64:7b:81:ce:d7:c6:d4:96:ba:a0:33:5d:13:96:a8:
58:ee:83:7d:96:58:0f:ca:05:24:85:a0:0d:cd:0a:e2:c4:c9:
58:06:92:9e:f6:6f:68:18:59:b5:bd:be:8b:5c:14:4a:a2:7c:
ed:af:b4:59:48:e5:88:ec:70:13:16:c3:fe:a7:df:d7:b9:e7:
f1:25:64:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:10:46 2026 by rpki-client