
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129459715/0/323430303a623230303a3a2f33322d3438203d3e203435313032.roa
File: 323430303a623230303a3a2f33322d3438203d3e203435313032.roa (raw, json)
Hash identifier: pY2dZ6dqSTgOgh45AcxUkhaZzPeNVeg4WabnzY7sOHE=
Subject key identifier: 1C:88:54:CD:A1:FB:2A:3D:95:FB:31:25:F0:8B:63:80:6C:CD:A2:35
Certificate issuer: /CN=C82667C2BCBB537DEB7A3E415577B2690521D5DD
Certificate serial: 45CDF92DF1F2E1BBB727A135AFC9B18A495E3804
Authority key identifier: C8:26:67:C2:BC:BB:53:7D:EB:7A:3E:41:55:77:B2:69:05:21:D5:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/323430303a623230303a3a2f33322d3438203d3e203435313032.roa
Signing time: Fri 27 Mar 2026 02:10:26 +0000
ROA not before: Fri 27 Mar 2026 02:05:26 +0000
ROA not after: Fri 26 Mar 2027 02:10:26 +0000
asID: 45102
IP address blocks: 2400:b200::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:cd:f9:2d:f1:f2:e1:bb:b7:27:a1:35:af:c9:b1:8a:49:5e:38:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C82667C2BCBB537DEB7A3E415577B2690521D5DD
Validity
Not Before: Mar 27 02:05:26 2026 GMT
Not After : Mar 26 02:10:26 2027 GMT
Subject: CN=1C8854CDA1FB2A3D95FB3125F08B63806CCDA235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:37:39:18:20:70:d9:14:14:f7:43:ee:88:8a:
76:20:7f:05:46:2e:02:5c:7b:f6:4a:9d:42:41:2f:
3f:db:08:cf:ed:71:9d:d7:62:97:a9:a2:1c:93:90:
f9:14:82:9e:29:bf:ba:7a:9f:96:80:f8:68:31:7d:
2b:6d:9f:33:09:6a:86:df:ab:8a:1f:e0:be:17:2d:
de:78:90:ec:a4:1f:66:fe:e0:37:10:5b:e8:48:fb:
57:6f:f5:08:c5:ef:03:50:85:a5:ef:1f:f6:4b:71:
6b:83:8c:06:b2:79:38:03:42:41:af:67:49:0b:73:
3c:8b:5c:38:4f:85:08:4a:02:53:31:4c:08:ca:c6:
8d:7e:db:46:a4:13:eb:ef:78:27:38:f1:49:62:4b:
8c:ec:41:a8:99:ac:7d:63:61:8b:0c:ff:63:8e:0f:
5e:28:9b:b7:4e:f4:b9:bc:e7:1f:63:bc:6e:aa:cf:
a2:c0:a4:f7:6c:87:9f:d0:6a:2d:10:d4:d2:d0:28:
3e:86:eb:db:11:a8:1f:49:49:10:7c:75:e1:23:3a:
70:0d:49:20:68:0c:3f:cd:2c:e4:00:f7:72:f9:32:
b0:17:f8:44:1e:6d:08:c5:4c:2a:3e:6c:c3:02:51:
96:0b:1b:4b:d5:2c:dc:08:48:b2:95:12:9d:9c:16:
b5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:88:54:CD:A1:FB:2A:3D:95:FB:31:25:F0:8B:63:80:6C:CD:A2:35
X509v3 Authority Key Identifier:
keyid:C8:26:67:C2:BC:BB:53:7D:EB:7A:3E:41:55:77:B2:69:05:21:D5:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/323430303a623230303a3a2f33322d3438203d3e203435313032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:b200::/32
Signature Algorithm: sha256WithRSAEncryption
8a:0b:d9:48:15:36:d0:72:c0:4b:cf:c4:8f:1e:e8:c8:ff:a3:
3d:68:2e:4d:fa:ee:6c:ee:03:09:74:ae:d4:53:84:7f:07:fc:
01:e5:c5:80:4d:f3:5f:ad:a3:cb:58:7a:5e:2c:9a:29:67:1d:
d8:8a:51:6b:15:74:44:bd:70:28:0b:05:14:2b:80:1e:98:1e:
08:a0:61:95:06:f6:4c:8e:1c:bb:de:dd:bf:68:5c:1d:68:dc:
9b:12:f0:08:b8:4c:9c:0e:a4:07:09:27:77:9b:b6:ac:3c:f9:
77:ac:79:1b:9e:ff:fe:ef:cf:07:19:3d:ea:dd:cd:36:72:c0:
44:31:83:19:a6:c0:f9:d9:01:4f:69:9b:98:51:76:c5:b9:e6:
5c:ea:06:c9:4d:3e:e4:f5:1e:ec:45:ba:60:03:aa:ad:5b:58:
e1:1e:f8:97:8b:3a:c0:18:95:ac:ff:91:93:ee:99:04:72:55:
62:20:10:04:2c:04:aa:9c:d8:5d:1d:ac:00:d4:04:0c:6a:f7:
d2:66:c0:f0:69:79:9e:8c:96:59:d2:1c:ec:07:cb:43:8e:73:
ca:b5:a8:e5:63:1a:1c:49:ce:77:74:a0:fd:7d:ed:bb:ae:dc:
87:0e:46:c8:73:31:27:fb:db:74:c7:3d:35:b9:d1:3f:01:3b:
94:8e:eb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:22:13 2026 by rpki-client