
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346733569/0/323430363a646438303a3830303a3a2f33382d3338203d3e20333938373034.roa
File: 323430363a646438303a3830303a3a2f33382d3338203d3e20333938373034.roa (raw, json)
Hash identifier: xU6UP1bnP18c+EUx+ZQZ6GxBjOFs2tV0/H/ebp6xq4o=
Subject key identifier: 5E:B9:E6:59:DF:77:42:07:89:A9:59:EA:9C:E3:01:8F:78:9A:32:54
Certificate issuer: /CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20
Certificate serial: 16B2A77A9FE58FAB5CCCB650E1CBD9355379F2E2
Authority key identifier: 7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/323430363a646438303a3830303a3a2f33382d3338203d3e20333938373034.roa
Signing time: Fri 12 Jun 2026 07:10:15 +0000
ROA not before: Fri 12 Jun 2026 07:05:15 +0000
ROA not after: Fri 11 Jun 2027 07:10:15 +0000
asID: 398704
IP address blocks: 2406:dd80:800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:b2:a7:7a:9f:e5:8f:ab:5c:cc:b6:50:e1:cb:d9:35:53:79:f2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20
Validity
Not Before: Jun 12 07:05:15 2026 GMT
Not After : Jun 11 07:10:15 2027 GMT
Subject: CN=5EB9E659DF77420789A959EA9CE3018F789A3254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:80:f2:86:c1:b6:98:18:65:c2:2e:30:61:bf:
a8:d2:1d:b5:48:d5:b1:4d:71:a4:f4:da:53:2f:a0:
5f:48:3f:81:49:94:6c:e8:9a:4d:f8:b6:71:8a:52:
70:1c:70:f8:03:55:74:60:03:e7:38:73:a3:e2:37:
6e:96:f1:b7:3c:be:7d:b0:82:3d:bd:39:8c:3e:a4:
73:98:01:44:ff:23:6a:54:9e:f2:76:6f:d5:c1:c5:
2d:3b:1c:48:84:70:bd:5e:e6:27:41:8d:75:21:0d:
a9:d9:52:b1:a9:cf:41:6f:6e:a2:47:2b:bf:9d:da:
5a:5f:c3:21:c8:01:21:e0:32:86:d9:c9:b0:a5:fc:
bd:b2:8a:95:0b:c7:d7:a3:03:5f:5c:5c:f7:c2:b8:
5f:c0:02:bb:9c:1b:f5:bc:f7:63:08:61:56:8b:eb:
82:d7:94:a3:17:77:63:8c:9d:22:68:ef:c6:17:fb:
8d:e1:18:4b:e7:f9:9c:25:98:4c:88:3d:f9:53:dd:
8b:09:69:a1:b6:c5:95:a9:7a:d7:45:7f:4b:94:15:
dc:b4:f2:a9:a8:00:e2:6a:29:c2:dd:77:5f:fc:5b:
53:af:c6:53:0e:99:21:f8:25:fb:66:d5:13:5a:5c:
95:a3:97:db:42:11:17:fa:00:91:d1:6c:a3:e0:e9:
40:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B9:E6:59:DF:77:42:07:89:A9:59:EA:9C:E3:01:8F:78:9A:32:54
X509v3 Authority Key Identifier:
keyid:7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/323430363a646438303a3830303a3a2f33382d3338203d3e20333938373034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dd80:800::/38
Signature Algorithm: sha256WithRSAEncryption
88:a8:22:b1:d2:d4:41:60:20:84:73:7b:9a:8b:3d:0c:93:d6:
d1:41:1c:5a:22:99:f6:74:e5:0f:26:22:5b:68:5b:df:34:a2:
8a:c7:7f:2e:22:29:4e:d5:8f:a9:ae:79:aa:a0:72:7b:4d:97:
15:4f:ce:e9:2e:6f:df:b9:87:54:34:9b:5e:8b:1e:99:01:1e:
99:25:62:77:1e:4d:d1:a3:5e:12:f2:55:75:ec:a2:f0:94:59:
ee:e7:91:64:ce:f4:99:d4:ba:24:66:8e:3f:b4:49:ba:f2:c1:
4f:ad:b8:a6:3d:92:7c:ce:34:1c:b7:04:33:9b:bc:16:31:1d:
21:b0:db:6f:e7:16:f2:ed:7b:1b:83:bc:e7:d4:29:81:ac:0b:
82:ba:cf:be:6a:a3:48:3a:da:32:da:77:3f:4d:5e:8b:15:87:
f6:7b:40:6e:df:ce:53:91:2b:81:11:1f:49:0d:a0:c2:06:b6:
22:32:40:2f:3f:0a:d9:13:10:9d:48:71:9e:bf:70:a6:51:26:
93:66:ba:41:2e:6a:e0:c5:2d:1d:09:23:e0:66:02:8f:0c:f7:
ec:25:03:28:14:ab:7b:11:28:6c:b4:5b:f6:3d:fb:a8:d4:e1:
c6:7f:be:e8:4c:cc:23:ab:c0:cd:1f:16:1a:87:6f:d7:1d:e1:
29:cf:cd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:26:13 2026 by rpki-client