
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109004796452405267/0/323030313a6463373a613a3a2f34382d3438203d3e203234343039.roa
File: 323030313a6463373a613a3a2f34382d3438203d3e203234343039.roa (raw, json)
Hash identifier: K5pwkGtEJxxlEpm+SnWFmuwZM/pNsVo7v2tNZ2nf31Y=
Subject key identifier: A1:A7:FA:27:6A:07:01:52:15:8E:58:71:3F:2D:CE:FC:0B:DF:3C:55
Certificate issuer: /CN=CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4
Certificate serial: 06AEB2E9AFAE1A2548A0EE49D12F7E8FFEC49C69
Authority key identifier: CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/323030313a6463373a613a3a2f34382d3438203d3e203234343039.roa
Signing time: Thu 06 Aug 2026 08:42:41 +0000
ROA not before: Thu 06 Aug 2026 08:37:41 +0000
ROA not after: Thu 05 Aug 2027 08:42:41 +0000
asID: 24409
IP address blocks: 2001:dc7:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl
rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 15:20:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:ae:b2:e9:af:ae:1a:25:48:a0:ee:49:d1:2f:7e:8f:fe:c4:9c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4
Validity
Not Before: Aug 6 08:37:41 2026 GMT
Not After : Aug 5 08:42:41 2027 GMT
Subject: CN=A1A7FA276A070152158E58713F2DCEFC0BDF3C55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:68:ff:99:b0:df:83:54:1a:b9:c0:31:8b:ba:
b2:3b:de:4a:27:91:12:2d:de:28:2e:01:50:5e:ae:
1d:9b:21:b5:d1:b6:d0:4a:ad:e1:2c:a5:20:63:b0:
d6:db:9b:1a:68:a9:8c:2c:87:d7:7f:d0:8a:74:a0:
42:5f:1a:1d:d5:a4:c3:e4:a4:cc:fa:46:42:90:75:
07:57:5e:63:ba:24:5b:48:3b:d6:ae:04:3a:39:b4:
20:7a:5c:cd:af:da:02:b3:06:e8:de:40:51:af:85:
cf:f3:16:c0:8d:5f:c6:41:eb:20:b0:8b:24:5a:a8:
8e:70:0f:e2:52:e4:2f:8a:2e:81:53:fd:13:61:95:
62:be:3c:39:81:c6:f1:4b:28:bd:79:bf:33:82:f0:
17:05:a0:a1:0d:2c:be:f9:75:28:20:bb:f5:1e:ef:
26:95:c3:e6:ef:d1:51:a1:8a:d2:bb:fc:4c:c9:91:
8a:e4:91:ee:09:27:90:01:91:2b:ef:7d:2f:6b:ac:
8a:89:6f:5e:f1:d1:98:1e:b7:da:77:2b:0c:1d:41:
c6:fd:3c:07:a4:4c:26:a7:63:e5:bd:4a:1b:f1:a5:
d0:3e:69:a8:0c:76:26:56:17:7a:46:50:d2:7c:fd:
93:40:c4:58:a3:87:a4:b9:92:b3:f4:ff:ac:4b:7c:
9d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A7:FA:27:6A:07:01:52:15:8E:58:71:3F:2D:CE:FC:0B:DF:3C:55
X509v3 Authority Key Identifier:
keyid:CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/323030313a6463373a613a3a2f34382d3438203d3e203234343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:dc7:a::/48
Signature Algorithm: sha256WithRSAEncryption
af:40:e1:e0:48:33:dd:7e:1a:49:9b:fa:ad:e1:4a:26:9d:a7:
2f:47:71:cc:4d:ce:70:6f:59:f9:e7:9d:0f:b1:fe:37:52:38:
a7:29:c5:56:35:40:f7:87:85:b5:ab:d8:eb:e6:fe:f0:bc:1b:
bf:d9:1b:83:49:7c:75:86:15:eb:74:21:dc:94:c5:13:62:d3:
0a:c8:24:92:ee:0e:2a:56:66:3b:8c:a3:6c:41:ab:96:28:5b:
36:30:5e:f3:c0:13:12:98:c6:b9:13:a3:a3:e8:e1:40:ec:fc:
a5:c7:58:12:a1:53:74:e5:8b:dc:43:24:99:a2:01:8b:9a:2b:
17:80:f5:c9:e8:86:38:a2:57:fb:f8:e2:21:d1:3a:0c:8c:17:
c1:0f:26:fa:0c:ae:ec:4b:3b:f7:dc:27:ce:28:e3:3d:cd:fd:
ac:5a:4d:0b:2b:17:bf:49:39:b6:cf:f7:c3:d5:4c:bc:f8:34:
94:5b:06:e5:0b:df:ef:d4:87:9a:96:43:ef:c6:fe:d9:43:3f:
4a:86:08:f8:32:fb:da:ef:2c:aa:5f:2e:ca:04:e0:f0:9e:89:
1b:bf:e4:e1:27:08:1d:cb:1f:96:8c:e4:b2:69:25:61:62:6f:
66:e3:80:78:ac:9c:64:1a:27:4b:70:30:7f:2a:e6:91:fe:73:
0d:ea:c0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 07:12:21 2026 by rpki-client