
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721728001/0/323430313a353138303a3a2f33322d3634203d3e203331323136.roa
File: 323430313a353138303a3a2f33322d3634203d3e203331323136.roa (raw, json)
Hash identifier: hByfJEGkoLosWu98+UyPe1GFHZyB6Lb+I72uzppAPPE=
Subject key identifier: E3:FA:8D:6F:28:5E:29:7D:85:A4:A1:8E:77:90:B3:C3:F2:E3:BD:A5
Certificate issuer: /CN=A0234EE8675FA5228CCCF9670EE151D623AC6958
Certificate serial: 01AF1C15C88EE8C9FF8C16B2F21AF24E6E10487D
Authority key identifier: A0:23:4E:E8:67:5F:A5:22:8C:CC:F9:67:0E:E1:51:D6:23:AC:69:58
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/323430313a353138303a3a2f33322d3634203d3e203331323136.roa
Signing time: Tue 31 Mar 2026 15:50:32 +0000
ROA not before: Tue 31 Mar 2026 15:45:32 +0000
ROA not after: Tue 30 Mar 2027 15:50:32 +0000
asID: 31216
IP address blocks: 2401:5180::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 09:59:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:af:1c:15:c8:8e:e8:c9:ff:8c:16:b2:f2:1a:f2:4e:6e:10:48:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0234EE8675FA5228CCCF9670EE151D623AC6958
Validity
Not Before: Mar 31 15:45:32 2026 GMT
Not After : Mar 30 15:50:32 2027 GMT
Subject: CN=E3FA8D6F285E297D85A4A18E7790B3C3F2E3BDA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7e:a9:c6:ec:e8:42:34:15:d9:4f:0d:71:1b:
f0:e9:5d:f6:98:2e:8b:4b:e6:0c:bf:05:d0:e8:3c:
a1:b3:33:4f:0c:40:24:1a:df:dd:1f:aa:24:1e:9b:
f1:5f:3b:fc:4a:0f:bd:b6:cf:83:c8:24:ab:6f:19:
c3:56:70:31:5f:c5:64:26:d1:e9:0d:80:32:a3:8c:
cd:5c:e8:94:45:3e:0a:fc:a6:17:19:6a:1d:ef:33:
b4:ed:b6:c7:32:cc:83:d1:77:4b:20:7f:ee:22:1a:
72:fe:74:1f:fc:72:c2:bc:27:af:19:ad:71:1d:29:
3f:4c:e4:a2:2f:61:76:0a:2b:ba:fd:53:fe:b7:7d:
39:65:8b:94:cd:74:c5:c2:74:e3:c0:54:d1:73:46:
f9:4c:55:8e:e6:94:6c:d5:ac:27:74:1d:32:eb:76:
62:58:c4:db:6b:8b:84:56:ce:8e:1c:1c:91:da:96:
a4:39:4c:df:74:bc:be:4b:1a:5f:49:31:92:a2:22:
3c:83:53:20:39:df:33:bc:8c:a2:c0:31:a3:6d:1d:
4f:5b:24:9c:76:b1:75:9f:6e:16:5e:44:f5:0f:2e:
df:66:7e:76:8b:72:55:4e:0f:4b:c8:81:c7:6a:fd:
75:4c:90:b1:f8:3c:a1:db:56:a4:33:7e:7c:fa:2a:
c3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FA:8D:6F:28:5E:29:7D:85:A4:A1:8E:77:90:B3:C3:F2:E3:BD:A5
X509v3 Authority Key Identifier:
keyid:A0:23:4E:E8:67:5F:A5:22:8C:CC:F9:67:0E:E1:51:D6:23:AC:69:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/323430313a353138303a3a2f33322d3634203d3e203331323136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:5180::/32
Signature Algorithm: sha256WithRSAEncryption
6a:08:2b:e8:47:8e:30:d5:fc:38:73:61:6d:62:5a:63:8e:a5:
d0:dc:03:e0:49:c7:8f:70:04:6b:f4:41:2d:cf:f7:d9:97:0d:
0c:ef:aa:ea:10:a8:15:c9:fa:2e:07:a7:07:7f:43:fa:9e:d6:
64:6a:42:4d:59:e3:fe:21:19:0a:55:f6:e8:ad:b3:51:55:14:
0a:e8:51:23:a7:62:d2:83:9e:db:4f:01:30:fd:cb:fd:c3:61:
1d:46:02:4d:b8:de:ae:24:f8:39:b7:e7:db:8d:77:d9:db:2f:
c2:62:22:eb:45:87:7c:7d:17:c6:01:6f:78:77:27:d9:f9:bc:
46:da:86:96:ec:bd:35:54:dd:49:77:45:13:a8:c1:28:ed:25:
fa:a6:c0:74:e6:8e:84:d2:59:99:17:86:bd:d9:52:d6:df:1a:
d9:f0:78:70:cf:f5:f3:09:87:a8:7c:19:be:d6:f2:86:52:a8:
da:fc:48:37:5d:ff:95:48:79:96:05:52:87:47:fb:45:ad:47:
fb:e7:fc:ea:e3:38:08:a2:07:3e:34:7f:fb:bc:a2:e9:f5:13:
52:26:cd:50:8f:45:8f:4a:df:4b:f4:d8:e9:7d:78:da:a4:88:
c7:67:79:ba:d8:9f:90:8f:af:92:5a:fc:8f:bf:a2:07:15:0f:
e4:ca:1c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:38:38 2026 by rpki-client