
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a343038303a3a2f33322d3332203d3e203539303136.roa
File: 323430313a343038303a3a2f33322d3332203d3e203539303136.roa (raw, json)
Hash identifier: iDdse9Ls6yfGVdjhkQRk57LbL20OKYaIkbT6DLWWFss=
Subject key identifier: 73:BC:C1:9A:80:44:32:0F:81:52:D8:FB:51:0A:F0:D9:42:16:9E:7F
Certificate issuer: /CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3
Certificate serial: 2E8BF2838EC784DCD30731EA902A4CB2A22487EF
Authority key identifier: 95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a343038303a3a2f33322d3332203d3e203539303136.roa
Signing time: Thu 21 May 2026 02:42:09 +0000
ROA not before: Thu 21 May 2026 02:37:09 +0000
ROA not after: Thu 20 May 2027 02:42:09 +0000
asID: 59016
IP address blocks: 2401:4080::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl
rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 08:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:8b:f2:83:8e:c7:84:dc:d3:07:31:ea:90:2a:4c:b2:a2:24:87:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3
Validity
Not Before: May 21 02:37:09 2026 GMT
Not After : May 20 02:42:09 2027 GMT
Subject: CN=73BCC19A8044320F8152D8FB510AF0D942169E7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5a:37:7e:9a:ac:b5:81:02:f5:51:72:9a:6d:
ee:c8:43:45:1c:19:78:52:a0:d8:d0:4c:99:d2:50:
f2:1e:9f:6c:d4:36:01:e1:71:c1:fd:c7:1b:3f:43:
82:a2:da:45:ed:c0:8e:55:ba:92:f4:01:e0:79:ef:
54:a3:4e:79:6c:f7:0a:28:35:1f:3a:f2:15:56:2e:
2f:e1:d4:7a:f2:90:38:05:3d:de:67:40:3a:51:46:
13:b0:ea:bd:ce:57:49:f8:2b:23:b4:7d:3d:45:30:
ca:6b:83:a0:8d:23:bf:fe:6c:ba:d5:39:ae:71:07:
59:6f:3c:7e:cb:12:43:e1:6b:25:5f:0e:12:87:21:
9a:9f:50:35:8c:ef:e1:06:5f:13:02:0a:74:0a:46:
7d:9f:2c:0e:62:e4:cc:08:cb:f7:5d:31:0e:d8:ff:
50:ad:0b:fb:ed:9e:b6:fc:bf:6e:ed:47:1a:94:f5:
37:0a:9a:b1:08:1b:2c:3f:ee:dc:6a:54:c4:28:22:
e1:1f:c7:2f:69:9b:50:bd:67:d9:8e:a9:d3:ff:88:
9f:c6:72:ff:ad:32:7b:93:ea:f6:00:74:1a:7f:31:
69:bc:37:49:b2:1f:d1:13:12:00:88:9d:7b:ee:cb:
5a:d2:11:cb:d7:48:97:d1:d8:1e:bb:82:b3:db:10:
b5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BC:C1:9A:80:44:32:0F:81:52:D8:FB:51:0A:F0:D9:42:16:9E:7F
X509v3 Authority Key Identifier:
keyid:95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a343038303a3a2f33322d3332203d3e203539303136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:4080::/32
Signature Algorithm: sha256WithRSAEncryption
9a:4a:aa:96:07:52:20:bb:a8:67:7f:9a:9c:dd:89:2e:50:ac:
bb:26:52:0e:8a:87:11:23:4a:90:26:12:6e:50:43:f5:77:28:
ef:e9:d0:e4:e3:71:94:fb:6d:93:1a:93:4d:a0:62:23:2c:39:
ad:bd:46:3a:d3:84:f5:87:07:bf:9c:a7:16:9b:2a:49:98:72:
47:9e:59:79:4f:94:29:7c:6d:e5:ec:a4:86:09:39:ec:08:60:
1f:db:58:37:24:8b:1e:20:82:b7:08:cd:72:b1:e7:b9:dc:52:
a5:c4:22:8f:7a:4c:e4:8a:03:64:0c:f4:34:c6:dc:93:56:89:
e7:b0:11:e0:a2:3b:04:7b:65:58:f7:68:26:1c:3c:66:fb:37:
90:28:45:a1:97:c0:95:47:1c:d2:c2:00:55:5f:c2:b8:b3:26:
58:de:79:5c:f7:92:86:3f:f5:af:56:42:97:87:a8:8a:d9:fa:
27:ed:0b:21:42:48:ac:b1:e2:69:4e:b1:e5:c1:64:cf:fd:c5:
7c:28:9e:04:db:22:74:09:ff:78:c2:71:ba:6a:4a:62:47:46:
7d:f6:82:46:a5:a1:93:89:1f:9f:f4:a7:c3:11:b8:6e:8d:99:
e1:0c:a8:40:13:95:cc:62:ac:1e:8c:f4:cb:01:92:1c:c2:ba:
cb:e2:23:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:56:49 2026 by rpki-client