
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109004796452405267/0/323030313a6463373a623a3a2f34382d3438203d3e203234343039.roa
File: 323030313a6463373a623a3a2f34382d3438203d3e203234343039.roa (raw, json)
Hash identifier: /6Mi1zeF4ltbdKY1eXD8hfkFp0KVXJkt8j+oPAfEWj4=
Subject key identifier: 16:D3:58:D0:A7:25:12:E7:05:39:99:B9:C1:6D:B6:49:F1:F9:78:8A
Certificate issuer: /CN=CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4
Certificate serial: 14D05F984DFEA2A57F15FF531C5AE5373312F5B9
Authority key identifier: CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/323030313a6463373a623a3a2f34382d3438203d3e203234343039.roa
Signing time: Thu 06 Aug 2026 08:43:33 +0000
ROA not before: Thu 06 Aug 2026 08:38:33 +0000
ROA not after: Thu 05 Aug 2027 08:43:33 +0000
asID: 24409
IP address blocks: 2001:dc7:b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl
rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 15:20:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:d0:5f:98:4d:fe:a2:a5:7f:15:ff:53:1c:5a:e5:37:33:12:f5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4
Validity
Not Before: Aug 6 08:38:33 2026 GMT
Not After : Aug 5 08:43:33 2027 GMT
Subject: CN=16D358D0A72512E7053999B9C16DB649F1F9788A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6f:65:36:03:67:27:1b:70:42:1a:b9:0a:89:
85:e2:67:d1:d2:4a:97:f0:82:9d:61:f7:e6:a8:b9:
61:53:1f:c6:e2:43:99:5f:7f:bb:3e:d0:25:eb:46:
d1:d4:01:bd:6a:08:44:25:98:da:dd:49:9f:75:47:
d0:30:87:b3:ea:18:c7:82:7f:26:60:5f:b5:b2:22:
e1:c1:60:20:53:74:4e:76:0f:83:a8:65:8f:c9:c2:
de:1e:56:05:19:3f:ba:d9:81:f5:48:d1:5b:7b:7c:
b3:38:1f:61:dd:61:48:ca:fc:54:96:9d:78:cd:19:
80:f6:0a:87:55:6f:d6:56:cc:79:82:f9:d6:0e:f6:
75:ae:8d:00:de:4b:78:1b:d9:d2:93:25:a0:3a:82:
c8:68:01:6c:da:2a:20:da:df:bf:d0:17:b3:1a:b4:
ca:ce:45:9f:0d:a0:01:5e:88:77:2e:f5:5a:1f:19:
c1:84:94:aa:f5:f1:4b:5a:48:0f:3b:a8:3b:af:27:
88:1f:cb:34:df:dc:b0:65:45:1f:36:95:b8:aa:f7:
49:a9:46:c1:69:1c:59:49:6d:ca:a9:f0:37:9a:38:
7a:fd:61:9d:18:d5:fc:8d:93:1d:b7:40:60:f4:8c:
e1:21:5d:df:a9:5a:e4:e8:a7:cc:2b:61:c0:b1:e9:
e8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D3:58:D0:A7:25:12:E7:05:39:99:B9:C1:6D:B6:49:F1:F9:78:8A
X509v3 Authority Key Identifier:
keyid:CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/323030313a6463373a623a3a2f34382d3438203d3e203234343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:dc7:b::/48
Signature Algorithm: sha256WithRSAEncryption
5f:88:c4:f3:b9:79:7f:17:78:91:ef:53:75:ab:8e:2c:53:0a:
dc:5f:9b:7f:47:65:51:58:6c:f4:3a:2c:9f:ee:76:a1:08:fc:
2e:d2:01:8d:fb:7c:bb:2e:44:ce:a6:e9:5b:54:41:55:69:11:
37:08:22:93:10:f8:12:5b:f5:8d:8a:0d:5e:a7:86:82:33:8d:
7c:e9:3d:c3:23:9c:27:92:65:6d:df:41:eb:9c:08:e9:e4:c3:
33:4c:5f:d5:e6:57:54:be:5f:aa:ea:fd:85:4f:b8:e8:2a:c4:
9b:57:da:1a:9b:9f:e3:b0:79:e0:f4:4d:e3:de:50:0b:ee:90:
fd:ef:48:33:5a:25:ea:00:d8:a8:3d:2e:c3:12:05:c1:5f:de:
7c:45:9d:db:98:6d:ea:e8:db:ed:ea:46:be:7e:d4:d2:d3:5c:
cd:ed:dd:11:6b:15:a3:95:50:a1:36:69:ca:38:c7:94:2c:45:
83:59:a5:9e:d5:45:3d:8d:fb:59:c0:3c:07:20:75:98:9a:d7:
cb:e6:53:f0:0a:e6:cb:27:a3:c8:6b:92:66:10:41:b4:f6:74:
3d:6c:4e:98:0d:cf:55:b3:de:d4:14:1e:ac:a3:6b:55:59:58:
f7:9f:7d:40:91:18:78:81:7e:25:b1:6c:03:e0:48:94:23:af:
a7:66:85:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 07:05:17 2026 by rpki-client