
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714881025/0/323430363a383838303a3a2f34382d3438203d3e20313531323936.roa
File: 323430363a383838303a3a2f34382d3438203d3e20313531323936.roa (raw, json)
Hash identifier: 2rEfRZGA1EAeckbEG0PTZGNkMZ/YcjvJUN2WIG7ZIvU=
Subject key identifier: D5:FC:43:DB:F0:68:DE:0A:69:D1:D9:15:2D:30:B5:31:06:67:B4:91
Certificate issuer: /CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Certificate serial: 3428977DCFC77302C8E7175AA4F054937D4AEEB0
Authority key identifier: 79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/323430363a383838303a3a2f34382d3438203d3e20313531323936.roa
Signing time: Fri 17 Apr 2026 07:58:07 +0000
ROA not before: Fri 17 Apr 2026 07:53:07 +0000
ROA not after: Fri 16 Apr 2027 07:58:07 +0000
asID: 151296
IP address blocks: 2406:8880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:28:97:7d:cf:c7:73:02:c8:e7:17:5a:a4:f0:54:93:7d:4a:ee:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Validity
Not Before: Apr 17 07:53:07 2026 GMT
Not After : Apr 16 07:58:07 2027 GMT
Subject: CN=D5FC43DBF068DE0A69D1D9152D30B5310667B491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:34:c1:2a:cf:09:a2:fb:ce:f6:84:41:42:88:
86:e9:8f:2e:88:70:f9:66:d6:98:81:46:11:f0:43:
15:87:57:ea:bf:7b:22:79:a4:a0:35:2b:0f:63:76:
1a:c8:15:85:80:4d:a4:8b:77:ae:48:31:cf:2a:74:
de:ce:ac:52:1d:6b:83:98:18:f0:1a:ed:e8:e8:2d:
a1:79:fd:b8:bc:f3:57:53:44:15:86:9b:ea:c3:64:
c0:79:3d:ae:36:21:f5:16:f3:4b:7b:ff:fd:0f:24:
20:aa:e7:f5:f2:70:1e:71:6f:89:2a:86:3e:2b:ee:
0f:74:48:78:d5:5c:19:53:1b:b6:77:52:bf:4a:2c:
52:31:ed:bf:8b:cc:21:62:a1:a2:41:74:42:c8:49:
19:6c:2f:7a:03:6f:d3:cd:df:2b:37:bd:29:f3:50:
62:a3:f6:32:19:5a:96:c0:05:7a:e5:89:15:46:4d:
c7:d5:19:01:ae:4a:e5:97:d2:85:0d:9c:e0:79:b6:
58:31:87:81:2a:27:4e:54:e6:b1:33:8f:ed:d6:ce:
88:99:e2:85:28:60:cb:1e:d9:7e:e8:9e:1f:40:ad:
87:b2:ed:de:43:d2:08:d9:6d:8a:38:8a:03:e3:1f:
0d:e3:20:44:ed:1d:23:6f:3c:b8:cf:27:8a:19:aa:
1d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FC:43:DB:F0:68:DE:0A:69:D1:D9:15:2D:30:B5:31:06:67:B4:91
X509v3 Authority Key Identifier:
keyid:79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/323430363a383838303a3a2f34382d3438203d3e20313531323936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:8880::/48
Signature Algorithm: sha256WithRSAEncryption
48:cd:09:8d:24:b5:c5:ca:a7:0b:5f:fd:51:e5:b3:f8:c5:c1:
65:c5:c2:47:96:5f:c2:3b:e7:01:6d:b4:f8:88:1a:c2:7f:25:
2f:00:81:7b:60:03:63:9e:8f:2d:ed:9c:c4:99:cc:96:63:8b:
9a:15:9d:29:67:28:d6:c1:21:2f:9b:4c:ba:e7:3b:90:e5:6e:
1d:70:68:88:3c:d0:5b:e9:4e:0f:29:2e:bb:4f:28:51:23:3a:
f8:dc:5b:dd:77:cc:be:8c:03:38:ee:38:3b:d5:7d:05:0e:4c:
98:ac:f3:bb:3c:c2:15:30:bd:91:6b:f8:6a:1d:88:94:0e:2f:
32:08:c9:de:20:dc:c6:60:da:8e:eb:11:bb:b1:05:d2:53:d3:
a4:6a:51:4a:9e:74:e5:5e:b5:3c:c5:07:5c:45:ac:24:b3:92:
a8:25:fd:d7:c5:fb:8b:9f:79:ec:ec:7e:be:96:b1:df:8a:49:
98:0b:91:57:d5:93:20:a3:a1:53:1b:fe:ad:4b:56:d7:2d:53:
6b:01:78:eb:78:cc:2d:92:08:b9:55:fc:1d:c1:14:64:93:86:
03:12:3a:70:e5:f4:f9:e7:80:8b:23:ea:29:aa:98:62:9e:a9:
06:d7:ac:85:81:2b:a7:49:13:d3:50:35:55:cd:de:20:a4:15:
04:91:bc:31
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUNCiXfc/HcwLI5xdapPBUk31K7rAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlBQ0NBRDQ0OTE1MjlFREEzODE3MEYzNEE1ODg0RDJB
MEY0MzJCRjAeFw0yNjA0MTcwNzUzMDdaFw0yNzA0MTYwNzU4MDdaMDMxMTAvBgNV
BAMTKEQ1RkM0M0RCRjA2OERFMEE2OUQxRDkxNTJEMzBCNTMxMDY2N0I0OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNNMEqzwmi+872hEFCiIbpjy6I
cPlm1piBRhHwQxWHV+q/eyJ5pKA1Kw9jdhrIFYWATaSLd65IMc8qdN7OrFIda4OY
GPAa7ejoLaF5/bi881dTRBWGm+rDZMB5Pa42IfUW80t7//0PJCCq5/XycB5xb4kq
hj4r7g90SHjVXBlTG7Z3Ur9KLFIx7b+LzCFioaJBdELISRlsL3oDb9PN3ys3vSnz
UGKj9jIZWpbABXrliRVGTcfVGQGuSuWX0oUNnOB5tlgxh4EqJ05U5rEzj+3WzoiZ
4oUoYMse2X7onh9ArYey7d5D0gjZbYo4igPjHw3jIETtHSNvPLjPJ4oZqh1rAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQU1fxD2/Bo3gpp0dkVLTC1MQZntJEwHwYDVR0j
BBgwFoAUeazK1EkVKe2jgXDzSliE0qD0Mr8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDg4MTAyNS8wLzc5QUNDQUQ0NDkxNTI5RURBMzgxNzBGMzRBNTg4
NEQyQTBGNDMyQkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzlBQ0NBRDQ0OTE1MjlFREEzODE3MEYzNEE1ODg0RDJBMEY0MzJCRi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3OTc5NjcxNDg4MTAyNS8wLzMyMzQzMDM2M2Ez
ODM4MzgzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzUzMTMyMzkzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQC
AAIwCQMHACQGiIAAADANBgkqhkiG9w0BAQsFAAOCAQEASM0JjSS1xcqnC1/9UeWz
+MXBZcXCR5ZfwjvnAW20+Igawn8lLwCBe2ADY56PLe2cxJnMlmOLmhWdKWco1sEh
L5tMuuc7kOVuHXBoiDzQW+lODykuu08oUSM6+Nxb3XfMvowDOO44O9V9BQ5MmKzz
uzzCFTC9kWv4ah2IlA4vMgjJ3iDcxmDajusRu7EF0lPTpGpRSp505V61PMUHXEWs
JLOSqCX918X7i5957Ox+vpax34pJmAuRV9WTIKOhUxv+rUtW1y1TawF463jMLZII
uVX8HcEUZJOGAxI6cOX0+eeAiyPqKaqYYp6pBteshYErp0kT01A1Vc3eIKQVBJG8
MQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:32:21 2026 by rpki-client