
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/0/323430323a653763303a6330303a3a2f34322d3432203d3e20313334333636.roa
File: 323430323a653763303a6330303a3a2f34322d3432203d3e20313334333636.roa (raw, json)
Hash identifier: 0UikPrhI/+GFM55Vuzyt5EGwBY2bkgwQLA/oWxJuYHU=
Subject key identifier: A8:CB:D8:68:48:64:73:5F:EB:26:E2:00:B7:B6:7F:88:29:2F:86:E8
Certificate issuer: /CN=3685DAC8828B3EB4989761422A77AA7B265F96CE
Certificate serial: 2A6FE90E6F7EBDCF95F2A5588857442AB1C2F683
Authority key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/323430323a653763303a6330303a3a2f34322d3432203d3e20313334333636.roa
Signing time: Wed 15 Apr 2026 07:54:52 +0000
ROA not before: Wed 15 Apr 2026 07:49:52 +0000
ROA not after: Wed 14 Apr 2027 07:54:52 +0000
asID: 134366
IP address blocks: 2402:e7c0:c00::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:6f:e9:0e:6f:7e:bd:cf:95:f2:a5:58:88:57:44:2a:b1:c2:f6:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE
Validity
Not Before: Apr 15 07:49:52 2026 GMT
Not After : Apr 14 07:54:52 2027 GMT
Subject: CN=A8CBD8684864735FEB26E200B7B67F88292F86E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:40:44:db:4e:72:f7:21:0a:01:64:68:e5:da:
ab:f8:4a:b3:65:66:66:e2:f0:47:92:e0:4b:31:3b:
b4:32:d9:72:6b:d6:90:bb:ee:51:0d:be:fd:af:fd:
40:c5:fa:73:85:4a:2f:31:1e:fd:b1:00:2b:6b:3d:
6b:10:ca:62:6d:f7:7e:61:86:b7:54:07:0f:da:0d:
76:7a:2f:e6:9e:b8:c9:5f:e1:6d:74:6b:cf:d5:ab:
1d:1d:fa:75:72:75:0a:fd:45:7b:29:6b:79:6e:99:
d0:e5:cb:48:c3:0b:cb:ba:48:ea:40:63:ec:db:1f:
ce:f9:99:21:1c:37:07:c2:76:18:0e:e8:1f:fd:f5:
9d:dd:6d:62:28:33:38:08:82:41:f1:07:6d:66:1b:
5a:78:b4:be:17:05:61:fe:45:f7:be:ba:46:ff:bc:
7a:93:1b:de:a3:e6:f7:eb:c0:f1:2b:d6:a6:a2:c3:
82:00:9f:95:6e:4e:25:04:d5:a6:ed:ae:a0:c9:de:
0a:61:13:3f:52:ed:6a:48:98:9e:c9:3a:b4:68:35:
0d:0e:d9:09:60:e7:93:21:79:19:3c:61:44:80:ea:
fa:e1:31:f6:e0:53:70:f7:45:e7:a1:2b:54:9d:e2:
6d:35:97:74:6d:a4:3e:b4:6c:63:5c:aa:ec:19:55:
4c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CB:D8:68:48:64:73:5F:EB:26:E2:00:B7:B6:7F:88:29:2F:86:E8
X509v3 Authority Key Identifier:
keyid:36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/323430323a653763303a6330303a3a2f34322d3432203d3e20313334333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:e7c0:c00::/42
Signature Algorithm: sha256WithRSAEncryption
15:eb:79:c2:ae:03:4c:20:2f:60:35:b2:29:ae:01:b0:f2:17:
13:27:1b:ab:57:d2:2a:8f:2f:7c:d5:70:38:cc:bd:d6:08:5c:
07:da:7a:2b:58:7d:79:ac:0b:f5:f2:0a:40:5a:93:48:38:2a:
3f:00:89:2e:4c:56:4f:70:04:14:80:dd:c6:22:81:54:21:02:
63:de:03:27:3d:0c:90:3a:71:27:c1:2f:e4:7d:88:5a:5e:c3:
38:17:0a:c3:63:51:1c:e2:cd:1c:ff:f2:34:16:70:b4:0d:4a:
97:ba:67:52:81:38:57:1a:32:75:61:5f:1d:73:35:70:27:f3:
60:fe:75:b9:97:c9:91:bd:97:69:42:ea:6b:50:4c:e2:1d:c2:
57:ec:42:d9:c6:67:e1:09:4e:64:b7:26:17:42:b4:ce:93:68:
02:d3:04:c1:ba:47:1e:9a:2d:2f:65:6a:fd:a1:3c:f6:df:23:
94:19:ca:01:c8:44:6a:c3:3c:c4:90:27:37:54:94:0a:ef:9e:
6c:8d:cc:ce:ca:de:92:38:20:61:35:c1:c7:0f:7f:da:61:ab:
de:f1:41:fa:41:77:85:91:c2:8e:31:ce:78:17:b7:0a:31:43:
7c:0b:bf:d3:5e:6f:7a:99:c1:3c:84:73:4c:d4:e3:ea:8b:15:
eb:23:a2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:39:14 2026 by rpki-client