
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109004796452405267/0/323030313a6463373a623a3a2f34382d3438203d3e203234343036.roa
File: 323030313a6463373a623a3a2f34382d3438203d3e203234343036.roa (raw, json)
Hash identifier: fgOR+MnNJ2W83GiWVYv+7j0t8104WBZvMhJOCqCXPDU=
Subject key identifier: FC:D9:B8:A7:E1:79:CC:F4:38:4E:CF:DA:E3:A6:1E:64:E6:2A:F6:ED
Certificate issuer: /CN=CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4
Certificate serial: 2CDD06041E65B12E49CF94A65942A77D134D57E4
Authority key identifier: CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/323030313a6463373a623a3a2f34382d3438203d3e203234343036.roa
Signing time: Thu 06 Aug 2026 08:33:05 +0000
ROA not before: Thu 06 Aug 2026 08:28:05 +0000
ROA not after: Thu 05 Aug 2027 08:33:05 +0000
asID: 24406
IP address blocks: 2001:dc7:b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl
rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 15:20:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:dd:06:04:1e:65:b1:2e:49:cf:94:a6:59:42:a7:7d:13:4d:57:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4
Validity
Not Before: Aug 6 08:28:05 2026 GMT
Not After : Aug 5 08:33:05 2027 GMT
Subject: CN=FCD9B8A7E179CCF4384ECFDAE3A61E64E62AF6ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:45:96:50:77:47:5d:f3:89:63:12:2c:56:92:
bc:9d:17:f7:5a:40:93:dc:27:33:7a:41:f0:15:f4:
e6:50:94:5d:e1:ac:9b:5f:f0:34:bd:5c:82:2b:f1:
f1:18:3f:b1:26:9c:ba:83:90:ff:d0:bc:7e:a8:30:
91:b4:f7:e0:18:2c:33:dc:8f:5e:27:73:e3:2c:f3:
dc:38:33:de:34:dd:a4:22:54:2a:9a:34:4f:40:62:
84:8c:8e:da:1b:58:98:6e:20:aa:24:b8:15:38:b4:
9e:6f:7e:2c:3f:53:8f:cf:d6:f8:e9:a5:2c:19:12:
4b:6c:bb:b0:46:ff:36:7a:a0:72:bc:6b:83:33:bb:
4e:12:4d:b2:b1:93:a4:f6:35:52:b1:2d:f5:3b:52:
6a:63:3a:94:4e:8d:bd:8f:fa:7a:b0:92:72:a0:ee:
77:b8:72:7e:0f:31:86:46:36:f3:4b:25:bd:a2:a8:
ea:fb:1e:cf:b0:f7:24:e3:dc:d9:fa:9c:fe:83:95:
49:ad:fb:6e:98:61:7d:d5:d9:14:32:80:6a:82:42:
81:30:f3:b8:dc:0c:ef:f2:17:da:73:3c:63:b0:5c:
48:be:d0:51:1a:54:c9:e3:54:83:a5:77:e6:43:9a:
09:4f:cb:aa:5b:24:0f:31:e4:89:0c:5a:20:0a:87:
b4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D9:B8:A7:E1:79:CC:F4:38:4E:CF:DA:E3:A6:1E:64:E6:2A:F6:ED
X509v3 Authority Key Identifier:
keyid:CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/323030313a6463373a623a3a2f34382d3438203d3e203234343036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:dc7:b::/48
Signature Algorithm: sha256WithRSAEncryption
b8:af:bb:75:3d:70:1e:91:64:9f:92:39:5d:a5:18:b9:b4:82:
f5:b2:2a:b4:eb:64:6d:7a:70:b6:2e:ba:41:2d:a5:2f:bc:c4:
d4:8c:02:43:ac:02:d8:7a:6f:15:44:91:27:d9:27:bf:6c:d5:
4d:12:be:cf:6b:3e:bf:97:62:1c:bc:0f:b9:fe:a0:61:9d:a3:
e1:c9:ce:4b:f9:2e:5a:c6:9e:be:45:cc:c0:2a:96:e7:54:1d:
cd:90:7e:4a:70:8b:f2:18:d2:3d:4d:bb:7b:54:39:b2:a9:d2:
8e:ce:e3:9b:03:ca:ca:83:6d:50:f7:1a:2a:6d:2a:6d:01:ad:
67:ae:b4:db:40:12:44:08:80:fb:ab:0d:a8:4c:9b:e2:5c:a3:
74:a7:aa:8b:62:31:fd:85:d0:58:76:af:a4:e5:fe:b1:1f:30:
cb:b8:80:3b:53:cc:34:cc:c7:03:fd:41:f1:3d:58:6e:3e:50:
89:8e:4d:f0:af:b0:24:70:ff:ac:df:c5:fe:96:c8:33:c2:36:
99:8c:17:bc:26:11:46:a0:ab:53:76:e5:1a:c2:c6:f2:01:b9:
2b:3a:5b:0c:74:8a:c9:44:73:00:0b:86:7b:76:3b:a0:04:95:
63:3e:b7:4e:06:a1:10:36:b9:84:4a:fa:04:13:8b:dc:d9:ba:
cf:e7:34:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 07:05:14 2026 by rpki-client