
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109004796452405267/0/323030313a6463373a613a3a2f34382d3438203d3e203234343036.roa
File: 323030313a6463373a613a3a2f34382d3438203d3e203234343036.roa (raw, json)
Hash identifier: MHF1orAgbSzr2lYpuf4TyJeKpdLdg/LCD5tzMXxVZ6E=
Subject key identifier: 51:6C:A4:C0:2D:1D:7E:E4:B0:AF:13:5D:A4:2A:40:AA:25:2F:5B:86
Certificate issuer: /CN=CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4
Certificate serial: 1E5C00AF33CD37CBBFAB8513EC13CBA290C019FC
Authority key identifier: CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/323030313a6463373a613a3a2f34382d3438203d3e203234343036.roa
Signing time: Thu 06 Aug 2026 08:32:45 +0000
ROA not before: Thu 06 Aug 2026 08:27:45 +0000
ROA not after: Thu 05 Aug 2027 08:32:45 +0000
asID: 24406
IP address blocks: 2001:dc7:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl
rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 15:20:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:5c:00:af:33:cd:37:cb:bf:ab:85:13:ec:13:cb:a2:90:c0:19:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4
Validity
Not Before: Aug 6 08:27:45 2026 GMT
Not After : Aug 5 08:32:45 2027 GMT
Subject: CN=516CA4C02D1D7EE4B0AF135DA42A40AA252F5B86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:37:22:45:64:8a:01:3f:97:57:5f:3f:ac:85:
d3:f1:62:83:d6:4a:35:8f:63:94:f9:f0:1d:c2:29:
d7:0a:cf:8d:94:6b:0d:2c:60:3a:4e:da:b4:cd:94:
5f:97:f8:0a:ea:8f:4b:14:86:c5:19:b1:14:1c:13:
24:08:fc:4a:e6:d1:6b:fc:d1:c6:15:4b:7e:bf:3d:
b8:29:d0:cc:28:d8:9a:79:23:92:61:67:9a:6e:56:
37:46:38:2b:5a:39:36:b4:7e:2f:65:e2:c3:18:30:
92:98:6e:88:1b:a3:e3:49:f0:f8:0f:c0:67:7a:41:
7f:c6:0d:5d:0e:ee:03:6b:fe:6d:bb:11:d0:50:74:
c4:2d:61:d0:a0:05:4b:19:5c:92:59:0e:84:38:e5:
ab:59:e1:36:70:97:f7:c4:91:03:a2:4f:3d:4b:1d:
f3:69:c0:7c:f9:31:5b:c4:5e:62:b0:f4:9b:92:c7:
33:1e:ae:38:fb:32:9e:34:53:37:58:76:26:56:2a:
d8:54:cc:0a:8a:1f:68:ec:71:a7:3b:2c:95:9f:ef:
28:7d:ad:c1:a4:63:d8:7f:88:30:62:2a:03:ce:1f:
ac:fc:a3:fa:a3:33:d6:18:2d:be:6b:f0:7c:8b:dd:
3e:8b:5d:2b:e1:f0:a1:2a:e6:64:7e:0b:fb:2a:ae:
00:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6C:A4:C0:2D:1D:7E:E4:B0:AF:13:5D:A4:2A:40:AA:25:2F:5B:86
X509v3 Authority Key Identifier:
keyid:CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/323030313a6463373a613a3a2f34382d3438203d3e203234343036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:dc7:a::/48
Signature Algorithm: sha256WithRSAEncryption
32:68:f9:d3:70:8b:6b:5f:6d:ae:99:4e:c4:50:d5:22:aa:54:
95:d1:e9:23:6f:08:d0:7d:0c:28:91:cd:3f:4a:ff:2c:24:4c:
1a:ac:e0:89:6f:6e:44:aa:a3:0b:87:28:b9:d9:d9:8e:85:e8:
d4:95:2a:86:8d:6b:4e:f2:5b:f3:35:39:cc:e2:f2:44:47:17:
55:80:28:cc:1b:d3:79:81:de:e1:ee:e8:01:6f:4e:3a:2e:34:
91:02:6b:d4:4f:4f:f8:d4:23:06:08:2b:5b:a2:96:c1:3e:d2:
59:1e:ad:b2:82:97:7f:33:bf:1b:04:76:a6:f4:36:fd:44:a1:
02:9c:e1:43:33:8c:45:46:44:02:45:ba:76:e1:f6:7c:8e:77:
aa:91:92:7f:6b:0a:75:d7:87:f6:57:15:47:e8:5f:29:f6:a6:
6c:22:cc:ef:b4:5c:25:52:57:58:bf:b9:d7:d3:3f:f7:74:0f:
d0:dc:8e:28:9d:f2:27:11:5a:45:57:49:b2:8d:6f:1c:92:81:
6e:b8:fa:82:38:78:46:57:1a:04:47:7c:21:f8:8a:60:30:11:
33:81:00:e9:ab:48:e1:63:f3:b7:35:71:c3:1b:01:ea:59:2a:
f1:35:f2:dd:9f:33:fa:b2:b5:f1:1e:fb:9b:20:c4:96:0b:4e:
45:e9:f8:70
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUHlwArzPNN8u/q4UT7BPLopDAGfwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VBQ0U2N0I4QzZGMjQ1NUJGRUI5NUNBOTdGNEVGQ0Uw
RDEwREFDNDAeFw0yNjA4MDYwODI3NDVaFw0yNzA4MDUwODMyNDVaMDMxMTAvBgNV
BAMTKDUxNkNBNEMwMkQxRDdFRTRCMEFGMTM1REE0MkE0MEFBMjUyRjVCODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqNyJFZIoBP5dXXz+shdPxYoPW
SjWPY5T58B3CKdcKz42Uaw0sYDpO2rTNlF+X+Arqj0sUhsUZsRQcEyQI/Erm0Wv8
0cYVS36/Pbgp0Mwo2Jp5I5JhZ5puVjdGOCtaOTa0fi9l4sMYMJKYbogbo+NJ8PgP
wGd6QX/GDV0O7gNr/m27EdBQdMQtYdCgBUsZXJJZDoQ45atZ4TZwl/fEkQOiTz1L
HfNpwHz5MVvEXmKw9JuSxzMerjj7Mp40UzdYdiZWKthUzAqKH2jscac7LJWf7yh9
rcGkY9h/iDBiKgPOH6z8o/qjM9YYLb5r8HyL3T6LXSvh8KEq5mR+C/sqrgChAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUUWykwC0dfuSwrxNdpCpAqiUvW4YwHwYDVR0j
BBgwFoAUzqzme4xvJFW/65XKl/Tvzg0Q2sQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
OTAwNDc5NjQ1MjQwNTI2Ny8wL0NFQUNFNjdCOEM2RjI0NTVCRkVCOTVDQTk3RjRF
RkNFMEQxMERBQzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQ0VBQ0U2N0I4QzZGMjQ1NUJGRUI5NUNBOTdGNEVGQ0UwRDEwREFDNC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwOTAwNDc5NjQ1MjQwNTI2Ny8wLzMyMzAzMDMxM2E2
NDYzMzczYTYxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNDM0MzAzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQC
AAIwCQMHACABDccACjANBgkqhkiG9w0BAQsFAAOCAQEAMmj503CLa19trplOxFDV
IqpUldHpI28I0H0MKJHNP0r/LCRMGqzgiW9uRKqjC4coudnZjoXo1JUqho1rTvJb
8zU5zOLyREcXVYAozBvTeYHe4e7oAW9OOi40kQJr1E9P+NQjBggrW6KWwT7SWR6t
soKXfzO/GwR2pvQ2/UShApzhQzOMRUZEAkW6duH2fI53qpGSf2sKddeH9lcVR+hf
KfambCLM77RcJVJXWL+519M/93QP0NyOKJ3yJxFaRVdJso1vHJKBbrj6gjh4Rlca
BEd8IfiKYDARM4EA6atI4WPztzVxwxsB6lkq8TXy3Z8z+rK18R77myDElgtORen4
cA==
-----END CERTIFICATE-----
Generated at Sat Aug 29 07:05:17 2026 by rpki-client