
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525036033/0/323430333a356238303a3a2f33322d3332203d3e2030.roa
File: 323430333a356238303a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier: 46/tjO14ih7NL7c3FlsSLZTwfgKKd0SVKFNff9MQoNM=
Subject key identifier: 3B:07:AF:92:FC:F6:87:01:0D:08:AE:D8:4D:86:A8:DA:A9:12:6D:3A
Certificate issuer: /CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359
Certificate serial: 1170C377159F07B7442E82E2DC13559CF029479C
Authority key identifier: EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/323430333a356238303a3a2f33322d3332203d3e2030.roa
Signing time: Thu 16 Apr 2026 06:27:01 +0000
ROA not before: Thu 16 Apr 2026 06:22:01 +0000
ROA not after: Thu 15 Apr 2027 06:27:01 +0000
asID: 0
IP address blocks: 2403:5b80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 07:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:70:c3:77:15:9f:07:b7:44:2e:82:e2:dc:13:55:9c:f0:29:47:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359
Validity
Not Before: Apr 16 06:22:01 2026 GMT
Not After : Apr 15 06:27:01 2027 GMT
Subject: CN=3B07AF92FCF687010D08AED84D86A8DAA9126D3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:27:4b:08:98:ea:fc:f0:d3:a9:48:89:e6:9f:
27:ae:83:e9:78:c6:bc:18:b5:c1:50:ea:11:38:d5:
b3:62:50:c9:35:a9:4b:f8:cc:35:a8:01:48:75:68:
4c:be:25:11:5f:2c:8e:d3:35:98:39:7e:e4:85:e1:
f8:35:9b:9b:3d:3c:e8:5e:31:60:08:8a:70:84:aa:
4b:15:d0:fa:24:ce:ca:fa:e9:c3:bf:30:d1:70:bb:
3c:85:e0:07:8a:ab:56:f6:c8:70:80:7e:e7:50:e3:
58:10:37:c1:e3:0a:f6:4b:52:05:b9:8e:d3:80:20:
ee:86:12:28:a9:8a:4b:e2:fb:dd:d2:a1:b5:1b:ec:
da:fb:af:74:74:47:60:97:5a:27:31:19:0a:20:fa:
31:8a:97:f2:49:e2:98:dd:92:ff:8d:df:75:14:27:
c7:c1:ad:6b:3c:6d:9a:0b:0c:19:15:47:37:af:f9:
e4:09:df:d4:ca:e0:5f:9f:64:be:7a:ca:c2:e7:b0:
60:de:29:72:34:95:da:de:37:89:73:0f:93:89:42:
b9:2a:6e:6d:38:71:2a:98:32:c8:56:f6:ec:37:bd:
c6:d8:5b:c1:93:3d:27:8a:cc:6a:bb:0d:0d:70:23:
d4:f3:66:cc:85:96:5e:bc:46:1a:4d:69:33:55:29:
6b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:07:AF:92:FC:F6:87:01:0D:08:AE:D8:4D:86:A8:DA:A9:12:6D:3A
X509v3 Authority Key Identifier:
keyid:EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/323430333a356238303a3a2f33322d3332203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:5b80::/32
Signature Algorithm: sha256WithRSAEncryption
77:f6:df:3c:82:68:4c:7d:d7:9b:38:7b:43:2d:be:3c:f7:95:
f2:af:6e:33:f4:ec:2a:bf:bc:d4:41:ca:26:a5:eb:c3:29:f7:
d6:3d:4a:07:9d:29:f9:e3:8f:70:06:a9:01:1e:03:ec:e3:b4:
eb:d1:7d:e7:d0:f1:e2:6f:81:e4:b2:85:98:f3:26:ce:7a:89:
a3:5c:06:4b:55:a4:a2:52:c2:8f:a1:d7:d6:0b:9e:02:1c:88:
cd:04:84:35:6e:b8:13:69:f9:7a:25:c8:d4:d4:d1:17:ec:9b:
b0:e3:c8:96:b0:89:1a:f2:90:c8:cb:50:5f:13:7d:c2:56:ea:
12:5c:df:6b:5a:4a:3b:0c:48:ac:d4:96:5f:79:ab:18:78:8a:
a9:1c:a0:08:36:f5:ef:1f:24:37:a6:d9:01:ec:43:1a:8f:91:
0f:ae:a3:de:d0:89:ec:e0:d7:63:fd:95:06:7d:c9:0a:16:0c:
24:36:6a:a4:1a:d0:3c:cd:00:d8:18:32:3b:b6:01:43:3c:91:
3c:39:4d:a0:d5:82:8c:40:19:1d:15:0e:13:46:b8:f9:e0:7e:
f4:cf:c1:98:46:c9:44:3e:55:67:0c:18:84:35:78:6a:3a:90:
b9:6e:74:46:a0:0a:fb:3c:33:68:62:67:50:d0:77:56:0c:16:
21:60:1a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:36:04 2026 by rpki-client