
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/0/323430323a653763303a3a2f34322d3432203d3e203539303738.roa
File: 323430323a653763303a3a2f34322d3432203d3e203539303738.roa (raw, json)
Hash identifier: gxOBTlC3js0yW1Dym47gaM5d4HJKte5KiC5Kl+Ymteo=
Subject key identifier: 39:0E:B8:DE:95:31:A4:AB:9C:33:83:0C:53:4F:1A:45:B8:CD:AE:29
Certificate issuer: /CN=3685DAC8828B3EB4989761422A77AA7B265F96CE
Certificate serial: 4A43124ED5A79EB72754FEADCB4B49F0F382B9D5
Authority key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/323430323a653763303a3a2f34322d3432203d3e203539303738.roa
Signing time: Wed 15 Apr 2026 07:51:54 +0000
ROA not before: Wed 15 Apr 2026 07:46:54 +0000
ROA not after: Wed 14 Apr 2027 07:51:54 +0000
asID: 59078
IP address blocks: 2402:e7c0::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:43:12:4e:d5:a7:9e:b7:27:54:fe:ad:cb:4b:49:f0:f3:82:b9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE
Validity
Not Before: Apr 15 07:46:54 2026 GMT
Not After : Apr 14 07:51:54 2027 GMT
Subject: CN=390EB8DE9531A4AB9C33830C534F1A45B8CDAE29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8d:83:97:0a:2b:b3:83:9c:a5:b5:a1:e9:b5:
25:24:22:5e:d6:b4:16:b5:32:15:c7:39:fb:70:e0:
b4:ba:bc:86:5b:6b:df:c1:8d:dd:a2:a6:58:17:8e:
27:43:54:43:01:d9:fa:35:42:fa:10:8b:46:77:62:
ea:9d:0f:3c:56:24:2f:90:f4:45:21:a2:7c:96:71:
66:2f:66:a3:30:0d:6c:3b:98:71:18:dc:19:b3:34:
fe:07:07:4f:78:ba:cd:93:03:68:79:b6:53:8c:67:
83:55:74:c8:a6:ca:48:4f:b7:56:1e:79:46:d7:5a:
a4:02:53:5f:8a:89:96:82:b1:42:9c:b4:6b:b4:a5:
2a:9b:d1:e8:05:7d:2b:bc:96:08:0e:69:fe:04:b7:
90:83:bd:00:2f:fd:f0:60:2b:1f:26:d0:93:13:cf:
27:c9:ce:6f:2f:7e:75:8f:83:5d:3e:81:1e:bf:72:
4c:a9:1e:4c:32:59:08:50:0f:a0:15:36:84:f0:ed:
5f:91:e2:62:49:54:78:a3:8f:89:aa:f3:20:f5:69:
ec:1b:6d:18:bf:29:22:f5:37:5b:07:06:29:f8:d8:
ab:97:f0:bf:8f:9d:05:6f:d2:4a:da:dc:d5:f9:65:
c8:a0:2c:24:05:ae:ac:d8:b6:7a:3a:00:6b:d3:ed:
f7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0E:B8:DE:95:31:A4:AB:9C:33:83:0C:53:4F:1A:45:B8:CD:AE:29
X509v3 Authority Key Identifier:
keyid:36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/323430323a653763303a3a2f34322d3432203d3e203539303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:e7c0::/42
Signature Algorithm: sha256WithRSAEncryption
09:ef:3a:ed:9c:7c:7a:04:9a:b6:f1:42:fe:b9:2f:74:4f:46:
80:66:10:03:63:3d:5a:26:1b:cd:e9:de:77:81:cd:82:d9:75:
f0:56:0b:4a:7c:57:06:f7:d9:fb:f6:21:ce:22:76:72:89:1a:
44:8e:44:3a:0b:a1:b8:14:8b:a2:60:1f:a9:81:f1:ca:0f:dd:
12:3f:f7:b4:b2:78:40:45:a9:a4:bc:68:18:ab:f0:f8:4e:25:
ff:bf:96:a0:12:ac:94:3e:d6:0a:2b:c0:b9:5a:b0:b4:5f:e0:
14:15:d7:0d:bf:cf:60:7f:cf:7d:8a:63:63:89:90:7c:67:a2:
6e:c8:68:83:5c:dd:8f:4b:c5:33:e8:64:d5:c2:79:87:09:ab:
b2:12:5f:08:d1:5f:6b:d4:cb:1b:87:3c:83:ca:e5:c0:54:0d:
c4:58:4f:61:41:6f:a5:d4:36:41:05:2d:67:8a:7c:ef:db:4f:
ef:47:f9:16:20:5e:02:6f:e9:4a:83:72:33:fb:56:56:21:8a:
ef:32:9b:d2:28:99:11:16:87:d6:e0:87:60:a6:dd:57:87:e0:
89:1f:a7:54:a5:d3:87:93:a0:2c:18:33:e8:cb:06:6b:eb:d3:
11:3c:90:dd:70:a2:4e:fa:d0:c1:2e:d1:81:ef:eb:12:f3:39:
9a:d3:9a:ed
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:17:33 2026 by rpki-client