
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a343238303a3a2f33322d3332203d3e203539303136.roa
File: 323430313a343238303a3a2f33322d3332203d3e203539303136.roa (raw, json)
Hash identifier: wvGE2b5TSnKIY0jATltop2J3jnvexdzdvqHvS8nfqoc=
Subject key identifier: 6C:9B:0D:44:30:D8:EB:1C:44:25:9B:CC:B9:86:49:45:5D:05:EB:04
Certificate issuer: /CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3
Certificate serial: 10E32CA5ADCBC0884C310B4B8C8E4E10BF59A04C
Authority key identifier: 95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a343238303a3a2f33322d3332203d3e203539303136.roa
Signing time: Thu 21 May 2026 02:42:09 +0000
ROA not before: Thu 21 May 2026 02:37:09 +0000
ROA not after: Thu 20 May 2027 02:42:09 +0000
asID: 59016
IP address blocks: 2401:4280::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl
rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 08:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:e3:2c:a5:ad:cb:c0:88:4c:31:0b:4b:8c:8e:4e:10:bf:59:a0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3
Validity
Not Before: May 21 02:37:09 2026 GMT
Not After : May 20 02:42:09 2027 GMT
Subject: CN=6C9B0D4430D8EB1C44259BCCB98649455D05EB04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:0e:d2:d7:64:ae:ce:66:90:f8:1c:0d:94:
5c:20:18:04:b6:4b:02:6e:12:b4:dc:2b:51:3c:7f:
01:1a:36:2c:6c:d0:58:55:74:79:a2:44:1b:f2:55:
3a:f1:f6:02:6c:47:ef:5e:87:33:bf:5a:b9:ec:6d:
94:4c:7b:6b:7a:2d:30:83:1e:0a:7c:76:a8:48:16:
84:bc:ce:55:3f:6d:e1:d2:c1:97:d4:5a:ca:19:c8:
1c:11:9b:48:47:c6:ef:b7:9e:1c:99:35:69:31:67:
ad:5e:8d:f1:5c:b1:06:62:99:cd:cf:eb:6a:b5:93:
43:57:4c:2c:6a:68:43:d5:59:ff:0e:be:bc:46:03:
63:1b:c6:da:50:0d:dd:f1:71:ab:3e:d7:4f:87:6c:
bf:f3:5d:17:1a:b5:6d:cc:4d:b8:3b:08:cf:1b:03:
d7:ad:de:6d:bd:c4:3c:c9:cd:c5:ed:87:75:0d:a1:
2c:05:a0:c7:0e:80:36:13:4b:92:85:e0:f6:e1:a9:
4e:a9:65:cf:b2:0f:5d:d0:d0:dd:83:34:5e:e0:fa:
ec:58:31:86:9e:cf:a5:ae:91:38:8e:64:80:70:6f:
6e:c3:9d:13:e7:5a:5b:0d:ea:f8:df:c1:7f:f6:a1:
d7:a1:4f:7f:47:98:ee:1b:4d:af:99:02:1e:31:dc:
37:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9B:0D:44:30:D8:EB:1C:44:25:9B:CC:B9:86:49:45:5D:05:EB:04
X509v3 Authority Key Identifier:
keyid:95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a343238303a3a2f33322d3332203d3e203539303136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:4280::/32
Signature Algorithm: sha256WithRSAEncryption
9e:17:0f:e6:c0:d3:d1:ef:6c:a8:f7:31:8b:8d:4f:22:cc:a9:
b0:45:c7:b0:b4:08:89:11:15:ff:d0:47:e8:74:cf:66:56:ba:
d7:bb:13:3c:4e:ff:b3:d9:33:52:97:37:df:f8:7f:18:31:14:
97:b6:f6:07:6b:13:43:2f:96:ee:83:2b:46:83:4a:ff:37:f0:
79:97:6b:56:57:4f:44:2b:68:83:64:cd:b7:f8:ca:35:da:4a:
64:64:1c:30:c0:a1:ac:76:ef:46:85:b1:6b:fd:9a:78:91:81:
0d:c6:cd:c1:f6:34:e1:f3:ac:da:95:1b:7b:7e:ff:24:c7:2f:
ec:99:06:40:81:7d:b9:43:6b:f8:85:96:3f:cc:8f:ad:16:39:
5c:0f:bf:44:1d:b0:36:ab:ba:2d:98:81:bb:98:b5:06:6e:b8:
16:4d:e3:f6:9e:ba:de:da:03:97:50:e7:05:2f:31:f0:32:6f:
63:3f:9b:5a:22:8e:6c:bb:99:2e:25:d6:ab:b1:80:73:02:bb:
5a:89:99:9a:ec:0e:1e:0a:72:66:f0:02:51:58:3f:d1:2a:0d:
6b:c8:16:ed:41:04:75:03:41:a7:7b:d0:66:5b:79:6b:48:98:
ad:da:7d:1c:24:38:03:4a:f6:b9:cc:79:6f:e4:ae:2a:d0:2f:
d8:29:c3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:57:04 2026 by rpki-client