
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121693257609248803/0/323430313a653863303a3a2f33322d3332203d3e203535393632.roa
File: 323430313a653863303a3a2f33322d3332203d3e203535393632.roa (raw, json)
Hash identifier: Uzqp2qS3WNfWamooG/PJu5GW6P5+HJ+DmabsgSMIPa0=
Subject key identifier: 62:87:0D:65:FA:F7:9B:21:D3:75:68:94:CF:38:34:8C:32:70:22:3F
Certificate issuer: /CN=F354F915FD6A0C20C9E625C28D36C4BC552B6A04
Certificate serial: 1FDDF55F694EFF0428022C345DA251404ADEECCB
Authority key identifier: F3:54:F9:15:FD:6A:0C:20:C9:E6:25:C2:8D:36:C4:BC:55:2B:6A:04
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/323430313a653863303a3a2f33322d3332203d3e203535393632.roa
Signing time: Tue 23 Jun 2026 06:53:45 +0000
ROA not before: Tue 23 Jun 2026 06:48:45 +0000
ROA not after: Tue 22 Jun 2027 06:53:45 +0000
asID: 55962
IP address blocks: 2401:e8c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl
rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 10:43:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:dd:f5:5f:69:4e:ff:04:28:02:2c:34:5d:a2:51:40:4a:de:ec:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F354F915FD6A0C20C9E625C28D36C4BC552B6A04
Validity
Not Before: Jun 23 06:48:45 2026 GMT
Not After : Jun 22 06:53:45 2027 GMT
Subject: CN=62870D65FAF79B21D3756894CF38348C3270223F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:88:82:81:c1:af:10:d3:51:25:64:eb:e5:59:
3f:6e:be:2f:be:20:59:b5:fe:5f:e2:f7:66:e1:7a:
60:43:9f:8c:93:c4:7a:f5:82:b3:ed:1c:ef:c4:93:
ef:5e:d8:49:92:02:00:c0:97:5f:6a:11:ea:9d:be:
66:f0:47:a2:f9:04:fb:0c:4b:5f:1e:5a:b9:42:b3:
25:38:d1:b7:54:dd:77:12:f3:81:90:b0:a8:d3:f3:
c6:c4:82:05:58:06:59:0a:82:3e:f7:17:6a:90:15:
f8:23:17:8c:db:3c:63:90:c3:ac:e2:5d:e6:61:56:
0e:28:0f:ca:c4:6e:2b:5c:4e:fe:85:5b:4e:1c:bf:
e7:8a:c7:4d:78:19:e3:f9:c0:bb:33:18:f3:be:f5:
f4:1e:87:c8:bc:59:32:4c:36:30:de:cf:24:f5:0c:
1b:d1:4f:f7:6b:cf:84:cb:2c:01:a8:e1:6d:69:fe:
b4:83:4e:c5:4d:84:82:61:e7:73:b1:a0:90:4b:43:
b1:d8:88:9f:0d:8f:00:47:fd:6b:8c:94:92:86:a4:
a5:a7:5f:06:c3:c2:48:61:28:3f:28:82:5a:50:36:
da:fc:d6:0e:96:ba:38:de:fb:85:41:ef:6f:f0:ae:
fe:e2:a7:cb:2a:d0:55:5b:52:7c:31:82:64:29:b7:
89:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:87:0D:65:FA:F7:9B:21:D3:75:68:94:CF:38:34:8C:32:70:22:3F
X509v3 Authority Key Identifier:
keyid:F3:54:F9:15:FD:6A:0C:20:C9:E6:25:C2:8D:36:C4:BC:55:2B:6A:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/323430313a653863303a3a2f33322d3332203d3e203535393632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:e8c0::/32
Signature Algorithm: sha256WithRSAEncryption
4d:3d:8b:ec:1b:95:f3:07:56:9a:6c:a9:68:b3:4b:ab:27:f7:
13:1e:0b:1b:75:14:2d:4b:6b:2d:06:37:0b:4d:fc:b2:77:44:
ab:27:cd:59:1e:8f:6f:06:88:11:75:00:69:5f:90:22:82:49:
25:5f:f8:39:30:49:25:f4:9d:fc:c3:06:02:fb:57:6d:a5:08:
2f:b1:fe:6c:98:2e:4c:f3:a1:5e:8e:e2:49:47:bc:fe:31:67:
dd:dd:10:ad:c5:31:2d:dd:fa:d7:86:cb:00:f6:46:29:9b:bc:
02:a6:3c:d5:27:39:09:20:bf:b9:17:d1:8f:65:f7:00:eb:db:
44:22:c8:84:f9:81:6e:da:e3:74:92:e1:2e:5a:1a:ba:1d:63:
71:a7:89:56:47:c2:ac:25:1e:ca:2d:b9:1f:33:8a:f0:59:e6:
5b:0a:45:27:3f:57:fc:5b:75:73:df:3e:16:b1:5b:24:f1:de:
a8:a5:65:2d:d1:89:a3:c7:5c:fe:fb:13:6c:c9:97:23:81:7d:
ae:69:f6:5d:d6:f5:2d:8c:2c:1e:95:1f:ec:0a:e7:f7:2c:34:
ea:f0:ba:00:f8:3b:6e:cc:c6:9f:36:14:e3:2c:3f:6c:75:c8:
4c:37:af:af:c3:31:40:a4:20:dc:7b:9d:c5:eb:7b:37:e8:63:
0a:04:a4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:27 2026 by rpki-client