
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a336338303a3a2f33322d3332203d3e203539303136.roa
File: 323430313a336338303a3a2f33322d3332203d3e203539303136.roa (raw, json)
Hash identifier: bilHjyNG8k1Ew4Jg5iP3JCfreUTY5fsiIjRCV50N4d4=
Subject key identifier: 9F:B9:76:67:3C:02:80:70:C2:6B:C7:1D:C1:3C:41:5C:C1:60:CD:96
Certificate issuer: /CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3
Certificate serial: 5AA3D9EDB074AFE12C713B1EA9408236BB320843
Authority key identifier: 95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a336338303a3a2f33322d3332203d3e203539303136.roa
Signing time: Thu 21 May 2026 02:42:10 +0000
ROA not before: Thu 21 May 2026 02:37:10 +0000
ROA not after: Thu 20 May 2027 02:42:10 +0000
asID: 59016
IP address blocks: 2401:3c80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl
rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 08:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:a3:d9:ed:b0:74:af:e1:2c:71:3b:1e:a9:40:82:36:bb:32:08:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3
Validity
Not Before: May 21 02:37:10 2026 GMT
Not After : May 20 02:42:10 2027 GMT
Subject: CN=9FB976673C028070C26BC71DC13C415CC160CD96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:92:67:5f:1f:4e:4d:43:7c:4f:5f:be:fc:73:
2b:91:a2:62:2c:4a:7c:3b:21:66:41:f4:50:6e:eb:
d3:8e:ff:0b:1b:c8:d2:fa:1d:86:8d:56:74:91:15:
b3:86:eb:47:41:f6:60:69:4c:e8:af:d4:b4:30:ec:
43:e1:1c:4e:59:e5:3f:24:83:48:2c:c5:d8:54:2b:
a4:62:cd:10:06:9d:34:71:d3:c5:2a:67:0f:07:d1:
a5:a4:7f:82:2a:a0:a3:e3:00:8b:b5:3a:28:bc:12:
7b:b7:83:ad:f9:55:11:5b:60:4e:31:c3:39:fb:ad:
e8:1b:75:e5:e1:ea:dd:66:cd:b6:0a:93:5c:c7:ad:
d7:a9:78:72:b7:00:9a:9a:15:0f:48:aa:94:e4:15:
9e:fb:91:27:29:ab:1f:7e:72:72:4f:c8:7a:37:36:
e5:be:03:a3:0c:97:2e:72:41:c4:6c:7e:2e:b3:99:
fa:31:59:52:20:5b:4b:4b:5d:a5:7c:b7:97:39:47:
1f:c8:45:5b:74:db:53:89:da:f7:a9:bb:33:ba:35:
3c:a4:2d:0d:d1:a6:d3:a0:cf:ef:8d:3b:d2:0d:5d:
d8:fd:59:c9:6d:c9:fc:67:bb:5e:2e:32:fd:c8:53:
71:f9:52:a3:aa:a4:21:a5:3e:a0:07:cb:a7:e9:ee:
ef:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B9:76:67:3C:02:80:70:C2:6B:C7:1D:C1:3C:41:5C:C1:60:CD:96
X509v3 Authority Key Identifier:
keyid:95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a336338303a3a2f33322d3332203d3e203539303136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:3c80::/32
Signature Algorithm: sha256WithRSAEncryption
85:65:e2:0a:64:4f:09:ce:8b:f4:a8:b1:dd:5e:15:1b:d5:15:
cd:2c:6e:d9:39:b5:5f:b6:8b:c2:f3:54:d8:10:50:e8:d0:cd:
e2:81:05:3b:c1:43:8d:5f:f1:99:77:7b:ec:b0:85:da:f3:8b:
9f:5a:55:bd:13:d2:2e:3a:1d:fa:15:85:2d:8b:74:09:48:ea:
60:e3:7b:11:f4:66:a4:3e:12:bd:42:a4:08:09:43:f7:f5:34:
5a:36:73:fd:8e:40:df:9b:52:36:7a:a3:af:fb:54:29:b4:e7:
5d:d5:77:14:d6:76:0a:12:34:23:b8:7e:6a:75:83:50:98:26:
12:c8:5d:68:bd:4b:d9:89:39:c2:c0:35:dc:2e:bb:0c:25:bd:
be:84:df:3c:fd:64:fa:e0:dd:66:e8:aa:50:2e:37:b3:5f:33:
b7:d6:23:dd:39:16:94:d5:eb:74:c1:33:54:b3:c6:f6:9a:f5:
3a:52:a4:62:40:07:15:c4:3b:a5:56:e4:8d:f8:29:60:29:92:
22:e4:fd:00:69:b4:2a:9c:e4:40:f9:54:66:6c:7e:af:aa:c8:
fe:7d:8a:5a:2b:21:39:3a:8a:fc:f2:60:68:f8:c5:eb:27:fc:
69:c1:31:26:02:56:09:50:46:28:2c:42:b9:76:49:bc:f5:33:
32:18:5b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:59:18 2026 by rpki-client