
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/0/323430353a653630303a3a2f33322d3332203d3e203233373731.roa
File: 323430353a653630303a3a2f33322d3332203d3e203233373731.roa (raw, json)
Hash identifier: Quwo34P1yk5lnDzL2AIAnFyu/C4TVuKKwePH2w3hTbA=
Subject key identifier: 7A:76:F9:A5:53:DC:1F:25:A9:F2:A1:71:77:C6:AC:CE:95:7E:A6:28
Certificate issuer: /CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C
Certificate serial: 42CDA455FC1CFC22CDBC9C4BB27AA68523FE5B5B
Authority key identifier: FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/323430353a653630303a3a2f33322d3332203d3e203233373731.roa
Signing time: Tue 14 Apr 2026 02:17:59 +0000
ROA not before: Tue 14 Apr 2026 02:12:59 +0000
ROA not after: Tue 13 Apr 2027 02:17:59 +0000
asID: 23771
IP address blocks: 2405:e600::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:cd:a4:55:fc:1c:fc:22:cd:bc:9c:4b:b2:7a:a6:85:23:fe:5b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C
Validity
Not Before: Apr 14 02:12:59 2026 GMT
Not After : Apr 13 02:17:59 2027 GMT
Subject: CN=7A76F9A553DC1F25A9F2A17177C6ACCE957EA628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bb:3c:a3:3a:c9:c3:1c:c0:27:70:01:2a:99:
0e:8f:90:b5:02:db:cb:b4:85:ac:2a:43:60:89:b1:
a0:58:c2:6c:70:af:55:e9:4d:c1:a4:cb:b2:a9:d6:
80:cb:ca:ad:1b:95:b3:a5:59:73:71:aa:2d:1d:c6:
4b:ae:a9:fd:c9:60:56:49:a9:9c:fe:3b:7f:81:38:
a6:41:b0:81:16:d1:3e:14:e5:f6:0f:6e:9a:91:35:
f0:1a:c2:56:4e:b7:09:e1:9b:4a:28:a9:c5:3b:5d:
7a:e9:43:13:3f:7f:1a:c8:a3:39:a3:1a:b5:b4:30:
f3:d9:db:01:86:6b:07:22:af:fd:a9:c2:f1:64:99:
f6:ad:83:21:de:11:81:ad:f8:55:df:47:4a:30:bf:
1f:ea:e5:5f:06:90:59:1b:ea:28:8d:3e:8d:ed:a5:
da:85:71:1a:f7:68:1f:74:84:62:49:cf:23:80:f0:
b2:e1:b0:77:79:dc:25:cb:66:38:6a:14:45:97:d1:
9a:ce:c2:34:4e:62:38:dc:d9:54:75:2c:d1:43:de:
d9:78:b8:47:13:26:67:2e:72:84:47:e6:f6:d2:4e:
1f:85:51:14:97:ea:ad:c1:2a:5d:8f:33:c4:9d:ef:
bf:2a:d8:5b:82:f0:a4:f8:bb:20:d2:26:1e:8f:1a:
04:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:76:F9:A5:53:DC:1F:25:A9:F2:A1:71:77:C6:AC:CE:95:7E:A6:28
X509v3 Authority Key Identifier:
keyid:FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/323430353a653630303a3a2f33322d3332203d3e203233373731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:e600::/32
Signature Algorithm: sha256WithRSAEncryption
4e:10:0a:1a:ef:f0:30:ce:db:24:e1:e1:cc:d1:0a:f4:9a:51:
c4:48:e6:e8:82:cf:20:9c:5e:fb:83:50:b5:99:57:95:79:69:
dc:7d:fd:38:dc:a2:b3:a4:d6:76:f4:f3:8a:f7:3f:5d:2e:94:
e7:4d:ed:7f:1a:6e:10:89:47:0a:12:86:83:6f:a6:ef:97:e4:
29:94:f5:bf:9c:b8:7d:b8:b2:6a:fb:79:e1:bf:bc:15:3d:87:
cd:d9:18:31:31:0e:cd:3c:ef:71:89:a2:8d:5c:8f:77:89:6a:
e1:b6:0d:05:06:9a:57:5d:5b:74:7d:aa:d2:39:1d:dc:59:a3:
3c:c4:8d:ce:7e:83:bf:40:6d:5b:a9:1c:c5:de:97:3f:39:56:
4e:7c:47:c8:ae:c7:c3:b4:8f:40:42:a8:c0:06:74:7c:32:fc:
06:23:ab:b1:ab:c0:f4:d0:df:40:af:a6:91:0d:a5:39:33:d5:
0e:31:d1:1e:57:61:99:d6:56:75:f3:39:f7:58:76:81:15:f5:
a0:a2:ad:37:9b:cb:34:81:c3:18:00:e5:1e:4e:c6:95:47:1a:
b5:46:66:d4:59:72:0c:f0:5f:83:95:11:e3:83:ce:8f:89:d6:
a6:3b:a9:3d:be:6a:16:fa:c9:c1:3e:f5:af:69:4f:7b:5e:89:
8d:54:88:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:28:07 2026 by rpki-client