
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079616203099471874/0/323430323a343036303a3a2f33322d3438203d3e20313337373731.roa
File: 323430323a343036303a3a2f33322d3438203d3e20313337373731.roa (raw, json)
Hash identifier: QjKlANhm0tw5r7xV3H/kvkMSIsu/YeG6xVH49RnDv8g=
Subject key identifier: 0B:A1:55:83:54:A7:DB:2D:F5:49:B6:20:2D:DA:8F:C3:1D:0F:7A:57
Certificate issuer: /CN=725E239772427EC7CCCA2C395A80836945A01BD5
Certificate serial: 2B09F5349E0890B0483A3F02D01332E0B299B968
Authority key identifier: 72:5E:23:97:72:42:7E:C7:CC:CA:2C:39:5A:80:83:69:45:A0:1B:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/323430323a343036303a3a2f33322d3438203d3e20313337373731.roa
Signing time: Fri 27 Feb 2026 04:11:42 +0000
ROA not before: Fri 27 Feb 2026 04:06:42 +0000
ROA not after: Fri 26 Feb 2027 04:11:42 +0000
asID: 137771
IP address blocks: 2402:4060::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.crl
rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 04:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:09:f5:34:9e:08:90:b0:48:3a:3f:02:d0:13:32:e0:b2:99:b9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725E239772427EC7CCCA2C395A80836945A01BD5
Validity
Not Before: Feb 27 04:06:42 2026 GMT
Not After : Feb 26 04:11:42 2027 GMT
Subject: CN=0BA1558354A7DB2DF549B6202DDA8FC31D0F7A57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b3:5d:4e:81:4f:a5:ca:7c:f5:30:33:62:e9:
2f:11:f4:52:5a:d9:96:c7:0b:76:51:7d:8b:f6:19:
73:33:94:4b:cb:e1:5b:ed:cb:f2:e9:97:41:7a:74:
72:45:0e:22:35:78:2e:84:b2:8b:09:14:ee:de:78:
0e:a0:86:db:1a:64:36:dc:7c:c8:b1:e3:a8:1a:33:
f1:70:f1:57:1a:e9:bc:7a:62:17:8c:39:29:86:c8:
b9:e3:ea:cf:6a:44:37:85:41:45:b7:db:d2:6a:4e:
9f:98:f1:df:cc:60:0b:78:bc:ce:5f:f1:39:47:bf:
0a:46:12:a5:ce:5b:c2:3f:ad:07:c2:ff:fc:c9:25:
41:40:f6:c1:f0:ed:27:20:e6:ec:ba:97:75:ac:a4:
0e:4a:1e:c4:10:2f:5a:47:8f:9a:c4:ba:cd:54:70:
43:f4:7e:57:5f:55:9c:75:b7:19:42:7c:08:f3:f3:
24:b5:43:69:48:7d:89:75:98:a6:ad:f3:71:f6:d1:
ac:a1:a5:f9:f4:bf:70:13:fe:39:52:02:95:0f:b0:
57:d2:05:1d:ff:72:9b:74:c0:d2:b6:00:7f:f0:ef:
80:e6:f1:a3:a4:bd:d0:e5:d8:0e:5b:9b:b6:92:ef:
9a:f1:6e:bb:4b:2d:44:08:3a:0d:b3:c0:a1:aa:29:
e1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A1:55:83:54:A7:DB:2D:F5:49:B6:20:2D:DA:8F:C3:1D:0F:7A:57
X509v3 Authority Key Identifier:
keyid:72:5E:23:97:72:42:7E:C7:CC:CA:2C:39:5A:80:83:69:45:A0:1B:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/323430323a343036303a3a2f33322d3438203d3e20313337373731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:4060::/32
Signature Algorithm: sha256WithRSAEncryption
35:1f:7e:fe:ec:49:3f:dd:6f:74:88:a5:d8:25:3d:87:5b:d3:
85:45:a6:1f:a4:5c:6a:07:47:8e:29:fa:89:d4:3d:46:7e:68:
69:d6:fb:2e:e4:27:2f:34:71:b3:64:7c:f3:3f:2d:a4:12:f5:
85:00:4a:8e:94:1f:8e:58:93:01:13:ce:68:d7:1f:54:b2:70:
66:e2:ab:d2:aa:b3:82:8d:78:ef:0f:23:ea:a9:8b:aa:14:73:
7f:d6:b6:46:30:83:ab:87:ca:db:aa:35:3d:8f:5b:1f:26:51:
d1:63:7f:b8:2d:8a:ca:bc:74:c8:e7:22:8d:25:c7:ab:5c:d3:
9d:3e:f3:46:88:ba:a5:a6:c7:d9:48:5f:86:00:9d:31:b0:5f:
27:00:08:49:10:db:8b:0c:f0:70:04:60:6a:c8:51:72:28:28:
80:a2:cd:12:02:02:87:2b:a4:a8:c3:12:dc:53:c9:d4:61:9c:
bd:48:9c:09:2f:41:6e:9d:ee:01:11:f3:0f:1a:85:9f:f9:ae:
47:04:76:37:b1:af:f9:ac:7b:76:e3:1b:11:19:31:cc:9c:02:
58:dd:d5:6d:43:bb:32:69:9e:8b:7b:bc:8c:e0:6e:1f:dc:41:
72:65:ce:60:63:0a:63:fd:6f:b2:cf:84:fe:01:34:79:3a:49:
8f:42:a3:8e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:29:44 2026 by rpki-client