
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1119152684591480863/0/323430313a646530303a3a2f33322d3332203d3e2037343937.roa
File: 323430313a646530303a3a2f33322d3332203d3e2037343937.roa (raw, json)
Hash identifier: rj+xhwjSRL8r9RnI2hIan5czVYkPPTC00QgifmSjB34=
Subject key identifier: 2F:F7:54:8D:CC:16:51:D7:38:00:FB:A0:75:99:EA:37:C6:97:A3:9A
Certificate issuer: /CN=1866933B3427D9BEFE57E3F20A7049BD1D54E7D8
Certificate serial: 551B7589E2B30BA3EEE23CCFFE89B5E0D47A1099
Authority key identifier: 18:66:93:3B:34:27:D9:BE:FE:57:E3:F2:0A:70:49:BD:1D:54:E7:D8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/323430313a646530303a3a2f33322d3332203d3e2037343937.roa
Signing time: Thu 18 Jun 2026 07:12:35 +0000
ROA not before: Thu 18 Jun 2026 07:07:35 +0000
ROA not after: Thu 17 Jun 2027 07:12:35 +0000
asID: 7497
IP address blocks: 2401:de00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.crl
rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 13:08:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:1b:75:89:e2:b3:0b:a3:ee:e2:3c:cf:fe:89:b5:e0:d4:7a:10:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1866933B3427D9BEFE57E3F20A7049BD1D54E7D8
Validity
Not Before: Jun 18 07:07:35 2026 GMT
Not After : Jun 17 07:12:35 2027 GMT
Subject: CN=2FF7548DCC1651D73800FBA07599EA37C697A39A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3e:34:0a:dd:2f:d8:5d:c1:ff:77:30:9b:ea:
d1:0c:65:e1:07:02:34:99:cb:11:19:89:29:6d:33:
f4:c4:94:f7:c0:7f:6f:d5:30:f1:e4:b9:3e:50:64:
43:73:44:8f:25:75:64:d5:30:db:38:59:f6:cc:14:
88:97:b6:44:fe:95:c4:d2:0d:e8:80:34:dc:5a:b8:
8d:3f:47:37:fd:b8:b5:49:8c:36:22:01:84:28:57:
68:c7:50:79:87:7a:4d:f6:8e:da:cc:08:ec:e6:c8:
90:51:4b:53:14:c3:1c:e4:75:ad:88:6c:d0:38:33:
f7:4d:49:71:b2:f6:ba:aa:58:1a:c8:0d:b8:83:03:
bd:b1:dd:80:f1:d6:e8:de:fc:81:47:19:e3:4d:13:
24:84:12:6d:35:d7:ad:e2:ea:16:0b:2e:22:d9:1c:
62:8a:4f:d1:1d:26:ba:95:be:9d:59:98:1c:76:b8:
62:b2:93:92:10:35:40:d3:f3:33:dc:22:7f:d9:ed:
e4:ae:d9:ec:a1:b3:94:1b:0c:d5:5b:67:dc:0b:1b:
9f:74:9b:e3:7e:fc:73:03:2c:2c:30:94:bc:4b:fa:
a9:41:24:7d:2c:f4:f7:75:af:00:42:9a:71:19:01:
74:f7:af:1c:cc:b9:25:0a:3c:2b:a5:ad:1c:c1:74:
ac:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F7:54:8D:CC:16:51:D7:38:00:FB:A0:75:99:EA:37:C6:97:A3:9A
X509v3 Authority Key Identifier:
keyid:18:66:93:3B:34:27:D9:BE:FE:57:E3:F2:0A:70:49:BD:1D:54:E7:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/323430313a646530303a3a2f33322d3332203d3e2037343937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:de00::/32
Signature Algorithm: sha256WithRSAEncryption
c4:7d:28:bd:1c:7d:fa:68:f6:76:a8:88:28:3e:82:9b:23:7a:
7a:3e:81:cd:f2:92:0c:fc:ea:35:77:d6:9b:60:f8:e7:a4:6d:
16:eb:75:76:d1:bc:26:b7:e1:b8:5c:9f:02:5d:2b:f9:3e:95:
65:8c:96:80:27:26:90:52:1f:4a:8c:69:10:7f:56:12:77:9f:
a2:cd:79:13:78:08:f4:32:3f:0c:6e:c2:61:22:9f:4e:90:ba:
d1:5f:7d:89:ed:c7:01:02:e5:de:7c:99:07:14:8d:ab:e6:8e:
8b:97:47:b5:fc:77:87:a2:53:c5:e5:53:e3:39:37:f3:96:32:
ab:13:c9:f3:d3:4a:b4:3d:22:e0:2b:40:ce:98:96:37:04:12:
4e:83:41:9f:4c:26:80:92:b1:88:43:2f:eb:b7:14:44:a7:76:
e5:d1:70:ab:98:63:d0:fa:a1:a9:14:d5:d9:d4:62:41:e4:58:
ad:f5:d2:07:ef:1a:f3:aa:4f:14:e8:d7:e6:90:6f:a2:a9:4f:
95:f7:2d:2f:70:6f:c3:ce:a4:5c:2b:a8:58:3a:5f:09:c7:a1:
f3:36:78:34:a5:4f:da:4d:a5:d2:8e:b4:e5:be:21:9b:21:cc:
87:a7:e3:28:d8:e8:8b:64:e2:f5:77:0b:44:44:b9:4c:9f:d7:
56:82:69:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:04 2026 by rpki-client