
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1118728720266362907/0/323430373a383838303a3a2f33322d3332203d3e2030.roa
File: 323430373a383838303a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier: xQENf1adNMYSG70l6LP4CsgYjWDbEv8Mt7TMAnvJgDQ=
Subject key identifier: 8B:9A:06:E4:EE:9D:D6:F5:29:03:0C:73:A6:F9:5B:64:B5:91:13:1F
Certificate issuer: /CN=9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A
Certificate serial: 57E05E75CB8EB6515F97736CC4D2A953E245E2A7
Authority key identifier: 9D:FA:5D:44:CF:50:ED:F5:6E:93:BB:7F:AF:86:3E:B6:0B:60:D0:4A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/323430373a383838303a3a2f33322d3332203d3e2030.roa
Signing time: Mon 15 Jun 2026 06:53:51 +0000
ROA not before: Mon 15 Jun 2026 06:48:51 +0000
ROA not after: Mon 14 Jun 2027 06:53:51 +0000
asID: 0
IP address blocks: 2407:8880::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl
rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Jun 2026 09:48:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:e0:5e:75:cb:8e:b6:51:5f:97:73:6c:c4:d2:a9:53:e2:45:e2:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A
Validity
Not Before: Jun 15 06:48:51 2026 GMT
Not After : Jun 14 06:53:51 2027 GMT
Subject: CN=8B9A06E4EE9DD6F529030C73A6F95B64B591131F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e7:25:a4:4c:b5:69:68:6e:4e:c8:ad:b8:68:
d9:a8:72:31:07:02:0b:c4:b3:7e:50:b3:de:02:06:
7d:0d:3c:9a:18:97:fd:6a:86:93:f8:a8:0d:da:c9:
67:0f:17:95:66:34:c6:83:d8:fc:42:33:5c:6d:e9:
72:81:e4:a6:9c:3b:26:ef:a3:f2:ad:f7:70:be:02:
d5:85:12:e1:98:28:02:53:41:59:9b:82:e2:d8:2a:
12:dc:8f:ba:67:d3:68:2b:54:1b:ef:d2:28:8b:9e:
34:87:98:a8:3b:73:f6:2a:e0:a4:33:e8:bb:bf:9c:
7f:49:b7:40:fb:4e:91:cc:99:9f:62:c5:8b:70:58:
fc:3f:3a:32:22:f9:5a:13:20:77:ed:18:f9:c6:1e:
58:ba:58:2a:93:8b:90:cc:d0:8f:f1:a5:94:00:0b:
a1:79:2a:40:82:0a:e5:18:2b:41:e7:60:41:06:c3:
6f:00:5b:67:a8:3a:d7:ea:73:ef:23:7e:34:80:4e:
a3:0d:90:4f:b8:65:1e:92:b2:5c:a7:e5:df:90:61:
c7:da:4e:97:c3:59:0d:dc:7d:0e:e2:61:96:3a:9b:
17:ca:1e:85:2b:4c:ff:fb:0b:37:64:64:85:16:a2:
d6:6f:5f:db:cb:67:7d:67:61:1d:cf:a4:39:3e:8f:
64:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9A:06:E4:EE:9D:D6:F5:29:03:0C:73:A6:F9:5B:64:B5:91:13:1F
X509v3 Authority Key Identifier:
keyid:9D:FA:5D:44:CF:50:ED:F5:6E:93:BB:7F:AF:86:3E:B6:0B:60:D0:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/323430373a383838303a3a2f33322d3332203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2407:8880::/32
Signature Algorithm: sha256WithRSAEncryption
8a:65:91:d4:38:cc:a0:a4:17:cd:b4:50:1b:98:25:89:d0:80:
05:91:31:5b:e5:e7:7d:f1:84:26:dd:6b:69:61:e0:80:75:69:
b6:a1:72:c4:a3:e8:54:08:cd:64:32:70:27:9f:28:5c:3d:0d:
f1:74:49:8c:6d:44:64:a1:d8:ae:a7:16:3d:ed:ef:ee:6d:2f:
ac:29:ac:66:ee:72:af:fc:a0:38:d0:bb:e2:b8:52:95:19:b5:
eb:8f:fa:39:33:77:4c:2b:fe:b7:af:f4:7d:46:b8:39:b0:ac:
ad:10:e9:c7:5b:9c:8a:23:40:19:7b:89:ce:1c:32:54:56:af:
c9:5a:b6:21:1f:d2:34:3b:5f:e4:de:9c:3d:28:c4:6e:9c:59:
a3:d6:56:66:87:a2:ba:8e:a9:ef:6b:e9:7c:29:0d:19:a6:64:
0a:92:1a:bd:c7:4e:aa:9d:42:07:6d:4b:04:fe:4d:e8:9b:12:
fa:f6:c0:f2:12:3a:d1:1b:43:e0:e1:35:04:1b:16:bb:6e:f0:
37:fb:dd:07:15:80:dc:9a:a6:d8:ac:6a:b6:71:b9:2d:b7:fb:
eb:70:34:8b:fa:44:5e:4e:28:b4:d1:65:a8:f2:89:68:63:da:
f4:c8:c8:03:e2:d3:85:a0:a1:6e:d8:3b:7e:0c:39:1a:db:40:
cc:5a:a9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 16:02:07 2026 by rpki-client