
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114108580660772883/0/323430323a356634303a3a2f33322d3430203d3e203435313135.roa
File: 323430323a356634303a3a2f33322d3430203d3e203435313135.roa (raw, json)
Hash identifier: ZN27c9UzjJ3wdK64dTmHf5rjrWHM5T8TdThVNyywHCg=
Subject key identifier: CA:D0:29:99:F3:FD:15:3C:54:6E:49:1B:84:B3:51:EB:C5:30:00:0C
Certificate issuer: /CN=AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5
Certificate serial: 4466C08A2DDDDAD03B042A69D26179590C221AE0
Authority key identifier: AB:70:D3:6D:CE:87:17:D2:38:9F:FF:B9:BA:DC:C6:0E:CD:C1:17:B5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/323430323a356634303a3a2f33322d3430203d3e203435313135.roa
Signing time: Wed 10 Jun 2026 02:45:29 +0000
ROA not before: Wed 10 Jun 2026 02:40:29 +0000
ROA not after: Wed 09 Jun 2027 02:45:29 +0000
asID: 45115
IP address blocks: 2402:5f40::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl
rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 12:16:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:66:c0:8a:2d:dd:da:d0:3b:04:2a:69:d2:61:79:59:0c:22:1a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5
Validity
Not Before: Jun 10 02:40:29 2026 GMT
Not After : Jun 9 02:45:29 2027 GMT
Subject: CN=CAD02999F3FD153C546E491B84B351EBC530000C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1a:24:56:31:49:b2:35:b0:e1:bb:f1:2a:c4:
83:4b:54:b0:b7:69:14:5c:58:ce:8a:4c:ab:27:d4:
f5:1c:0c:cb:ea:8b:40:a0:d7:11:f7:ae:d4:2d:6c:
74:c9:f1:b9:fb:ac:69:fe:f5:1a:75:4c:55:c3:7d:
c6:2c:93:e2:f7:06:7b:ca:9a:05:fe:0b:5f:46:d7:
56:e5:07:e5:ac:a8:72:1e:6b:ac:44:6b:ce:52:bb:
aa:1f:70:1e:5e:59:9a:11:4b:70:a8:1c:21:34:6c:
09:9e:eb:ef:19:dc:c2:0d:68:ac:24:9c:ef:42:2a:
9f:09:92:12:54:b5:7e:1b:60:f9:ce:e7:54:99:08:
a3:15:fd:7a:60:31:4c:6b:25:ab:35:be:f2:ff:36:
72:a6:7e:06:22:34:80:ca:6f:42:99:dd:83:2e:c6:
53:77:04:44:69:29:98:44:fc:bd:a8:89:42:d4:93:
e7:63:88:ef:ea:56:2b:71:e6:93:11:38:d1:bd:1d:
38:ac:1e:e0:0f:8d:b7:67:48:ff:ce:cb:a4:74:ae:
16:a8:83:ff:d2:f3:c9:22:eb:c2:81:01:d4:36:43:
c2:ae:87:c2:c7:00:7a:ee:58:7f:64:ff:89:83:6a:
d7:e4:6e:14:ef:33:bc:ce:a8:ee:03:fb:35:c1:cb:
09:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D0:29:99:F3:FD:15:3C:54:6E:49:1B:84:B3:51:EB:C5:30:00:0C
X509v3 Authority Key Identifier:
keyid:AB:70:D3:6D:CE:87:17:D2:38:9F:FF:B9:BA:DC:C6:0E:CD:C1:17:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/323430323a356634303a3a2f33322d3430203d3e203435313135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5f40::/32
Signature Algorithm: sha256WithRSAEncryption
66:81:68:ec:9f:df:dc:b6:11:39:95:ca:3a:8e:f8:00:8e:d1:
af:e6:ed:e0:cc:9e:da:b2:23:c8:f1:6b:92:56:b2:36:9f:bb:
a8:2e:11:91:af:6c:2a:fe:fb:8c:ad:13:b5:21:ee:d0:3f:d0:
94:fb:7f:84:a3:4a:d3:b5:12:9c:f7:3b:1f:e0:7c:e2:f8:c9:
e6:c2:70:e6:d8:de:24:03:63:45:64:e8:fa:f5:dd:54:f6:d9:
58:74:fd:81:52:44:e9:00:01:b8:71:97:c8:f2:f6:3f:cc:f8:
28:2c:92:3a:9d:38:d4:1c:db:c8:ab:5f:b2:cf:26:96:37:a5:
09:64:f1:11:dd:af:c0:f9:9a:58:aa:9e:73:52:ed:fe:e7:95:
f9:d8:12:54:eb:ce:3b:71:7a:00:53:c1:b4:2d:39:fa:9d:63:
3c:c1:8a:d3:ca:ac:5f:96:8d:51:b1:c5:be:9f:11:f5:c4:1f:
13:a7:98:7f:5c:df:92:f9:13:c6:44:21:2b:02:c2:f7:9b:b6:
99:9c:47:4c:8d:ed:54:46:92:0f:11:60:1c:eb:5b:ee:69:45:
7c:ed:cb:17:fe:ac:b0:b2:0d:c6:05:97:2d:b1:99:9b:08:77:
39:0d:30:fb:a6:42:75:e1:8d:17:37:8f:4c:20:ba:68:5d:d8:
1c:58:b8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:55 2026 by rpki-client