
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a336538303a3a2f33322d3332203d3e203539303136.roa
File: 323430313a336538303a3a2f33322d3332203d3e203539303136.roa (raw, json)
Hash identifier: 10u8/tQ0bj2m7WAt3d3KZeYYZx3ooQ6ech4KzfSDNOQ=
Subject key identifier: 6C:62:16:C3:FE:CD:F3:04:44:F4:E1:5A:0F:91:1E:DE:8B:8A:26:30
Certificate issuer: /CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3
Certificate serial: 3BDF4E90C571B7FB95BA20A60CC3F97FBEC38BCD
Authority key identifier: 95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a336538303a3a2f33322d3332203d3e203539303136.roa
Signing time: Thu 21 May 2026 02:42:10 +0000
ROA not before: Thu 21 May 2026 02:37:10 +0000
ROA not after: Thu 20 May 2027 02:42:10 +0000
asID: 59016
IP address blocks: 2401:3e80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl
rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 08:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:df:4e:90:c5:71:b7:fb:95:ba:20:a6:0c:c3:f9:7f:be:c3:8b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3
Validity
Not Before: May 21 02:37:10 2026 GMT
Not After : May 20 02:42:10 2027 GMT
Subject: CN=6C6216C3FECDF30444F4E15A0F911EDE8B8A2630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:98:e6:ec:ba:6c:75:b7:76:79:51:87:2e:c0:
f5:9c:6c:da:26:75:1a:95:5d:3c:c1:44:e2:9e:e4:
31:0f:b3:e6:8c:95:7b:d5:8f:1d:b1:35:80:71:53:
9f:12:3a:96:57:50:84:d7:ea:e9:62:21:9e:97:45:
49:a2:e3:aa:ba:20:ff:dd:97:9d:de:07:26:e7:98:
6a:ec:b8:ea:f7:c0:b6:57:67:54:8d:fd:9c:da:68:
0c:ad:e6:db:db:8a:d3:66:de:31:9a:3e:bc:41:30:
1b:d2:5a:87:c3:91:67:f0:3b:3f:92:b7:f6:01:32:
41:fd:86:ef:69:8d:89:b7:c8:6d:27:bc:ec:1d:f6:
0a:f4:3a:e1:5c:cf:08:34:f7:dc:be:05:23:17:8d:
e3:41:a7:71:f7:b1:37:a7:79:3c:f8:43:01:ee:58:
8c:7e:f6:91:e2:7b:46:ff:37:44:84:be:6f:84:b7:
c5:f4:1c:22:75:19:7d:f1:46:b3:aa:f6:0f:e9:f3:
30:07:cf:5a:66:a4:c8:7f:2e:76:a0:50:1c:c3:27:
40:8b:78:4d:7f:9d:1e:f5:e8:51:a3:31:6f:e3:91:
f3:e1:0e:5d:67:08:b4:3c:5a:c7:5d:61:47:ef:a9:
0a:ac:a4:37:9e:a8:31:1e:c4:6a:41:43:d0:25:e4:
6f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:62:16:C3:FE:CD:F3:04:44:F4:E1:5A:0F:91:1E:DE:8B:8A:26:30
X509v3 Authority Key Identifier:
keyid:95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a336538303a3a2f33322d3332203d3e203539303136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:3e80::/32
Signature Algorithm: sha256WithRSAEncryption
99:a6:c9:67:8c:4e:d3:71:4a:3c:3a:b4:3c:47:bc:27:5c:16:
8e:ed:8e:b8:81:69:a0:9d:c2:75:01:14:ae:5a:f2:a2:ae:9a:
05:f2:51:87:ed:fc:70:06:bd:67:41:6a:81:83:af:c0:56:3d:
e9:e5:19:e0:78:02:c8:49:4b:0c:0a:fe:0f:d9:45:37:c6:34:
e2:9a:9a:70:e6:41:a3:c6:88:f0:30:d8:59:a7:76:f0:f2:bb:
95:4a:8a:22:83:28:b5:80:ae:21:25:ba:6d:97:f5:c1:65:50:
6d:06:66:bb:3d:c5:b3:07:26:9f:e8:e2:1b:15:d4:bf:81:d6:
fb:e0:40:a0:49:98:43:03:1b:59:c2:2b:c8:87:2c:65:1f:4d:
32:d5:00:5e:2f:60:05:ee:d3:4b:f3:f7:96:30:fa:7e:25:30:
05:2c:c2:c2:92:71:5d:58:e5:14:85:33:95:a9:26:56:68:6c:
be:2d:06:cd:b3:bc:32:47:26:83:fd:03:79:7d:c1:80:b0:75:
6c:7a:71:56:63:e6:31:06:7e:6b:42:b5:ac:94:52:61:9b:4a:
f1:d7:3e:b4:fe:20:63:84:75:38:7b:13:84:43:5c:78:a0:68:
f8:92:a0:3b:4a:b3:92:94:69:9f:82:2c:7a:95:65:c1:97:47:
32:21:be:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:58:08 2026 by rpki-client