
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1118728720266362907/0/323430373a373738303a3a2f33322d3332203d3e2030.roa
File: 323430373a373738303a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier: gzEc3CXXGcQWOxotohoedVP4pF9FVlgNODLpwKx8fUc=
Subject key identifier: 5C:1F:39:2C:37:CD:97:D4:6B:D5:B7:01:C8:7C:7C:DE:9E:CC:9A:95
Certificate issuer: /CN=9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A
Certificate serial: 0BAC8E9EAE8589E609B0AC893DDC3479FF7BCCE3
Authority key identifier: 9D:FA:5D:44:CF:50:ED:F5:6E:93:BB:7F:AF:86:3E:B6:0B:60:D0:4A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/323430373a373738303a3a2f33322d3332203d3e2030.roa
Signing time: Mon 15 Jun 2026 06:53:51 +0000
ROA not before: Mon 15 Jun 2026 06:48:51 +0000
ROA not after: Mon 14 Jun 2027 06:53:51 +0000
asID: 0
IP address blocks: 2407:7780::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl
rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Jun 2026 09:48:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:ac:8e:9e:ae:85:89:e6:09:b0:ac:89:3d:dc:34:79:ff:7b:cc:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A
Validity
Not Before: Jun 15 06:48:51 2026 GMT
Not After : Jun 14 06:53:51 2027 GMT
Subject: CN=5C1F392C37CD97D46BD5B701C87C7CDE9ECC9A95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:93:ed:35:55:f6:b1:2a:d6:54:c2:29:c9:50:
23:0c:b4:a7:ff:9b:36:3c:1e:e2:be:91:bd:c0:ae:
bf:67:e7:f9:5a:29:06:54:3d:10:20:d4:29:cf:15:
6d:82:e1:f8:4d:b0:33:0a:fd:28:a2:1c:cd:e2:23:
ae:e7:3e:f6:31:2e:6b:7f:0d:84:f0:71:fa:63:fb:
5b:72:2d:f1:fc:68:f3:8c:67:95:8c:83:6b:d0:2c:
6e:b0:56:65:1a:dd:f4:41:2b:3f:ef:bc:8a:14:52:
3b:06:4b:15:8b:a5:f5:47:2e:a6:c7:79:3d:6b:aa:
ff:5d:32:51:ed:ca:66:b9:d3:fc:35:1e:32:ad:f3:
ea:19:e7:3a:91:36:c0:ce:06:19:44:11:36:ff:88:
c2:c2:5e:26:47:ec:98:c0:10:9b:d7:f0:52:3b:a7:
48:bc:2a:65:d9:da:a1:af:df:2c:ce:93:52:10:68:
37:3e:c0:35:9f:9b:28:a6:7c:d5:52:f2:4d:65:c3:
30:32:55:fc:f7:30:8e:79:01:c9:82:d8:8b:39:c6:
db:9b:64:7b:26:53:71:24:07:b6:ed:5a:20:95:b3:
5a:56:1d:7c:21:9d:8d:c5:23:d3:a0:07:24:48:17:
04:b1:d0:b1:15:73:cd:b8:08:20:ce:0f:7e:fe:da:
d1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1F:39:2C:37:CD:97:D4:6B:D5:B7:01:C8:7C:7C:DE:9E:CC:9A:95
X509v3 Authority Key Identifier:
keyid:9D:FA:5D:44:CF:50:ED:F5:6E:93:BB:7F:AF:86:3E:B6:0B:60:D0:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/323430373a373738303a3a2f33322d3332203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2407:7780::/32
Signature Algorithm: sha256WithRSAEncryption
6d:ff:50:71:74:4e:9e:35:ba:0f:a6:f7:f2:eb:38:7b:68:c4:
1f:98:71:8c:ac:15:2e:ac:ad:84:41:71:90:8e:a0:aa:0c:47:
90:51:54:55:e4:67:16:ad:d1:f3:4f:cb:48:47:e0:e3:48:5a:
fa:b6:3a:f6:26:6c:b0:5e:27:09:2c:50:82:fd:a5:a5:8f:89:
e8:bb:74:d7:b4:7e:e6:9d:9e:ed:cb:80:c6:97:e3:62:8c:01:
50:cd:6a:15:3f:89:2a:81:45:bf:f9:de:21:ba:a2:c8:98:e7:
a6:90:9c:6f:10:59:9b:20:c9:76:b6:1f:28:f5:bb:dc:83:ae:
b6:1f:63:16:00:9f:1d:5e:41:ee:d2:e7:02:64:6b:4f:22:df:
93:ab:71:69:49:58:df:60:af:44:03:43:32:6a:e8:24:90:5e:
a5:eb:a1:07:c9:f1:08:f6:f5:d2:dd:3d:2c:59:3a:70:15:a7:
99:44:ef:95:6e:9c:c9:57:bf:36:c3:52:3c:d7:38:df:15:13:
0d:6c:2b:bb:31:58:7f:c2:4e:80:ff:ba:e3:b1:42:fe:6c:34:
dd:69:f7:cd:0a:cb:7b:2d:03:7e:b2:5d:06:9d:46:39:bc:ec:
9d:d1:bd:cd:b7:70:f2:c8:63:5d:78:27:ef:a5:ce:ca:63:7a:
6e:30:87:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 16:02:09 2026 by rpki-client