
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1110083775733235733/1/323430323a313861303a3a2f33322d3332203d3e20313531323239.roa
File: 323430323a313861303a3a2f33322d3332203d3e20313531323239.roa (raw, json)
Hash identifier: c8WNPZIvhrZeBjLe5wY9CC8paBg1j9yN7x/SJKYbClQ=
Subject key identifier: A2:89:C0:53:55:F9:92:DA:C6:9B:7E:E1:68:57:BF:DD:84:F5:66:67
Certificate issuer: /CN=34792F5FA94D005EB8C9704B96BE16835CB06819
Certificate serial: 4C80630F81E7CFA318165D287D46126EA5142750
Authority key identifier: 34:79:2F:5F:A9:4D:00:5E:B8:C9:70:4B:96:BE:16:83:5C:B0:68:19
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/34792F5FA94D005EB8C9704B96BE16835CB06819.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/323430323a313861303a3a2f33322d3332203d3e20313531323239.roa
Signing time: Fri 22 May 2026 06:04:13 +0000
ROA not before: Fri 22 May 2026 05:59:13 +0000
ROA not after: Fri 21 May 2027 06:04:13 +0000
asID: 151229
IP address blocks: 2402:18a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.crl
rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/34792F5FA94D005EB8C9704B96BE16835CB06819.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:80:63:0f:81:e7:cf:a3:18:16:5d:28:7d:46:12:6e:a5:14:27:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34792F5FA94D005EB8C9704B96BE16835CB06819
Validity
Not Before: May 22 05:59:13 2026 GMT
Not After : May 21 06:04:13 2027 GMT
Subject: CN=A289C05355F992DAC69B7EE16857BFDD84F56667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d7:e2:de:54:24:35:12:4a:55:59:c4:0a:ad:
28:27:51:ba:61:7e:54:87:96:04:93:60:40:44:7b:
11:0b:7f:8a:8f:89:00:47:50:df:d6:b2:19:c0:70:
4c:96:11:72:c3:04:58:fd:df:71:7f:c3:ef:f9:d6:
ef:e1:0b:73:fb:54:5f:9a:1f:f6:db:a0:ae:39:99:
f9:54:6c:e9:06:82:61:4e:1e:23:63:dd:b3:f3:17:
35:28:80:f6:02:6a:00:31:76:94:a6:fb:5e:b3:f8:
43:99:cd:f3:70:06:fa:4b:25:27:34:df:52:a3:2b:
d3:18:a1:06:7c:68:9a:4b:ee:31:92:3d:48:e0:d7:
af:4b:84:9a:f1:fd:20:61:7b:59:5b:d8:90:26:d7:
1c:e3:68:78:b5:9c:d7:1a:d0:97:34:5c:b9:8c:80:
4d:49:fd:18:52:44:24:9e:47:c1:cb:8c:d5:8e:f2:
6f:7c:e0:60:cd:4c:d5:bb:5c:5c:3c:65:b3:9d:a4:
14:69:b7:e5:df:88:eb:e5:a0:b5:8a:b5:a9:cb:37:
f7:c4:f5:89:de:66:9e:bd:a1:ca:5f:de:a6:eb:c5:
29:26:af:1d:9c:59:2b:3c:f2:93:84:ae:78:97:f2:
1b:1a:e9:18:6a:f7:2e:30:b5:fd:94:5f:1d:41:02:
04:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:89:C0:53:55:F9:92:DA:C6:9B:7E:E1:68:57:BF:DD:84:F5:66:67
X509v3 Authority Key Identifier:
keyid:34:79:2F:5F:A9:4D:00:5E:B8:C9:70:4B:96:BE:16:83:5C:B0:68:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/34792F5FA94D005EB8C9704B96BE16835CB06819.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/323430323a313861303a3a2f33322d3332203d3e20313531323239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:18a0::/32
Signature Algorithm: sha256WithRSAEncryption
5a:cf:48:27:e9:eb:cc:d3:a9:64:a9:9d:13:05:a7:de:56:36:
68:a9:ea:4c:36:00:b8:62:e4:b3:06:e0:c1:46:6f:fe:e1:a2:
e5:27:74:06:b1:06:55:f6:17:4a:48:ba:3a:2e:30:72:38:cb:
24:89:18:61:d5:c3:a2:61:0c:10:4d:fb:0f:a6:3e:a7:aa:81:
5d:40:8a:72:b4:be:60:c8:2f:e1:cb:00:de:c4:c7:0d:01:99:
ef:38:03:2d:de:8b:32:57:9f:02:b2:a1:fb:17:18:24:30:8c:
ce:f4:93:f2:0b:2a:0a:dc:fd:49:f6:0e:fe:25:68:c9:6b:06:
05:e0:1f:38:04:ae:b7:88:1a:cb:fc:69:ab:78:63:b3:7c:43:
c2:be:1b:b1:3b:de:c5:5c:4d:92:3d:97:89:1a:47:93:3e:f9:
fd:81:ec:41:47:07:43:96:57:d2:a9:23:f4:84:69:89:3c:7b:
53:6d:91:77:2e:23:59:70:3e:22:70:18:1a:63:f0:4b:67:57:
69:76:4f:bb:43:2e:ab:1f:28:3b:f3:47:f4:11:46:74:5d:5c:
8b:60:54:7b:ba:6a:7f:29:e4:4e:5f:c0:15:c6:2a:13:c0:ec:
6d:52:de:2e:2b:f1:85:a4:22:03:a9:51:c6:bd:d2:47:93:e2:
0a:07:65:e5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri May 29 23:59:13 2026 by rpki-client