
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111842086300155925/1/323430313a613665303a3a2f33322d3332203d3e2030.roa
File: 323430313a613665303a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier: nOvIMdHhTRhb5sUMtQwcziF2554ZM2h0OdA2vT3YEJc=
Subject key identifier: D3:87:57:FC:6E:B7:6A:14:C4:94:B1:A3:B2:5C:97:7B:B8:21:1B:0B
Certificate issuer: /CN=9A2D314750263BD27FBA266C8599F3E64F26E3C7
Certificate serial: 1713B4D98401EF3A82284CECAA1E85228F446C11
Authority key identifier: 9A:2D:31:47:50:26:3B:D2:7F:BA:26:6C:85:99:F3:E6:4F:26:E3:C7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2D314750263BD27FBA266C8599F3E64F26E3C7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111842086300155925/1/323430313a613665303a3a2f33322d3332203d3e2030.roa
Signing time: Wed 27 May 2026 02:37:06 +0000
ROA not before: Wed 27 May 2026 02:32:06 +0000
ROA not after: Wed 26 May 2027 02:37:06 +0000
asID: 0
IP address blocks: 2401:a6e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111842086300155925/1/9A2D314750263BD27FBA266C8599F3E64F26E3C7.crl
rsync://rpki-rps.cnnic.cn/repo/A1111842086300155925/1/9A2D314750263BD27FBA266C8599F3E64F26E3C7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2D314750263BD27FBA266C8599F3E64F26E3C7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 05:49:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:13:b4:d9:84:01:ef:3a:82:28:4c:ec:aa:1e:85:22:8f:44:6c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A2D314750263BD27FBA266C8599F3E64F26E3C7
Validity
Not Before: May 27 02:32:06 2026 GMT
Not After : May 26 02:37:06 2027 GMT
Subject: CN=D38757FC6EB76A14C494B1A3B25C977BB8211B0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:31:4b:1b:03:d6:85:2e:63:8e:37:6a:95:
0e:ce:a9:ad:78:cd:39:8f:0e:22:ed:4b:d0:03:2e:
ed:1b:7c:e0:8d:62:72:eb:3e:ec:eb:c3:61:b9:19:
b9:44:f2:6a:88:5b:f4:dc:d8:ae:5d:74:3a:5c:e0:
29:23:8f:35:67:d7:15:30:72:5d:ad:db:05:05:6d:
24:7c:61:3f:20:87:97:86:82:b1:1c:16:98:23:06:
59:4f:ee:8b:19:57:9e:cd:e3:d3:75:a5:6a:ee:41:
d1:72:12:d4:0b:e0:75:20:73:39:88:6c:fc:43:84:
25:a9:00:06:e5:cf:82:7e:31:f5:9a:ff:f3:d0:b6:
26:43:11:52:ac:d8:1e:23:4d:d5:27:86:49:a6:0b:
3d:9f:58:03:13:50:8a:1e:88:20:c1:94:c6:d8:e3:
d5:ec:a3:98:0b:1b:1c:73:31:7a:0e:81:6d:ad:7b:
e5:52:3c:4d:20:c1:b8:7a:0e:18:06:fe:d8:98:30:
eb:fe:5e:be:0f:74:ef:fb:d7:f6:a8:75:8c:4d:2d:
31:68:67:43:af:5c:02:23:1e:9e:4b:f5:f7:25:74:
28:a0:a8:d6:ef:b8:07:77:ce:21:31:7b:70:ff:91:
20:ac:15:92:08:93:97:52:59:d9:cd:d2:13:0c:05:
8d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:87:57:FC:6E:B7:6A:14:C4:94:B1:A3:B2:5C:97:7B:B8:21:1B:0B
X509v3 Authority Key Identifier:
keyid:9A:2D:31:47:50:26:3B:D2:7F:BA:26:6C:85:99:F3:E6:4F:26:E3:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1111842086300155925/1/9A2D314750263BD27FBA266C8599F3E64F26E3C7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2D314750263BD27FBA266C8599F3E64F26E3C7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111842086300155925/1/323430313a613665303a3a2f33322d3332203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:a6e0::/32
Signature Algorithm: sha256WithRSAEncryption
3d:73:3e:c2:b6:1a:aa:80:c1:00:34:96:28:0b:2a:b8:a2:f3:
b1:eb:ad:f6:9d:a7:b9:eb:23:3f:86:e2:11:e6:3b:4b:19:1b:
7e:bd:aa:31:2d:db:17:e6:41:4e:78:64:8a:e3:ee:84:fc:5d:
84:1f:19:dc:1b:d0:6d:99:15:7c:d8:e0:99:a1:28:6b:a0:94:
57:62:4c:47:3d:69:a0:06:55:9a:af:8c:3b:b1:a8:98:90:05:
4b:13:37:b9:67:73:0f:40:94:da:e6:c1:78:44:5b:45:2a:57:
6e:0b:43:9a:46:1d:5b:ad:55:84:9a:5d:b8:8a:48:a9:cb:63:
45:59:36:55:a2:98:31:bb:88:f8:19:fb:59:82:02:ec:ae:d4:
05:c6:13:06:39:4f:96:88:7e:46:f3:6c:87:a8:80:f5:26:36:
bc:8d:2f:eb:ce:d4:37:88:8b:40:03:53:0a:9b:32:24:51:ee:
26:bf:40:bb:9e:73:16:8d:3f:f7:2a:83:5d:c8:6e:2d:7d:f9:
b7:22:a5:57:15:b1:1f:79:a6:c2:b0:9b:7c:4f:0b:19:56:28:
9b:b2:58:6f:90:0f:6d:f4:e7:08:7a:0a:ed:76:5d:7d:07:0e:
67:bf:a0:a1:36:84:aa:71:79:6c:4c:69:9d:7b:e8:ad:e8:ca:
fd:8a:59:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:54:50 2026 by rpki-client