
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094519876787109889/1/323430333a323734303a3a2f33322d3332203d3e2030.roa
File: 323430333a323734303a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier: IdESYc0jNy5xZfS2MZLEfR1UMTQVz96JSTDcxEWLvUo=
Subject key identifier: 53:53:AA:10:E9:A4:1C:72:42:EA:82:5D:55:FC:F2:62:0D:EB:FE:43
Certificate issuer: /CN=786588C287D0F949A379F4D51335F9423A0E03E3
Certificate serial: 7888BEAB4E7C561290207D0F894AB59B8D54FD14
Authority key identifier: 78:65:88:C2:87:D0:F9:49:A3:79:F4:D5:13:35:F9:42:3A:0E:03:E3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/323430333a323734303a3a2f33322d3332203d3e2030.roa
Signing time: Wed 15 Apr 2026 13:30:20 +0000
ROA not before: Wed 15 Apr 2026 13:25:20 +0000
ROA not after: Wed 14 Apr 2027 13:30:20 +0000
asID: 0
IP address blocks: 2403:2740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.crl
rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 11:34:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:88:be:ab:4e:7c:56:12:90:20:7d:0f:89:4a:b5:9b:8d:54:fd:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=786588C287D0F949A379F4D51335F9423A0E03E3
Validity
Not Before: Apr 15 13:25:20 2026 GMT
Not After : Apr 14 13:30:20 2027 GMT
Subject: CN=5353AA10E9A41C7242EA825D55FCF2620DEBFE43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:72:30:c8:3d:4b:ec:20:62:d3:71:7e:02:6b:
2d:a0:ab:64:63:8d:c2:74:7a:2b:9c:d3:a9:03:d0:
a3:fb:4f:3b:ad:ca:c3:cc:be:6a:78:55:fa:b4:d4:
5f:69:a3:22:e1:3b:ab:4f:69:d7:d5:9c:e3:2a:97:
0f:81:fe:cf:c6:e3:0a:53:cf:bc:ec:d9:9a:7f:93:
ed:d4:d8:35:34:e6:58:f3:9a:b2:60:e9:57:0c:e7:
07:47:e5:f6:ac:38:73:38:4e:f6:c0:ca:b3:88:63:
a3:a4:40:03:f1:44:cd:6b:2d:40:2a:22:69:38:a5:
77:dd:9b:73:4d:7e:9a:15:12:21:53:f2:08:14:89:
c2:fb:2f:12:33:96:ce:b1:62:2d:93:e8:b4:11:68:
74:c8:a2:00:89:03:77:18:0a:4a:24:77:9b:ea:fb:
75:6b:6f:2e:ee:15:de:5a:a7:8f:40:30:a5:75:d9:
7b:f7:27:09:36:df:6c:c7:15:95:93:d9:f0:ef:87:
36:bb:8d:5b:e8:8f:88:c1:6a:22:a9:36:64:09:f9:
d8:ca:a9:d0:50:f8:50:ac:ba:ec:ed:39:8b:8a:40:
e0:58:2c:97:d5:a4:56:ad:0c:43:9e:3a:b6:24:fe:
b8:bc:3d:54:7e:9a:3c:8c:c5:e7:3e:f9:72:db:fe:
15:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:53:AA:10:E9:A4:1C:72:42:EA:82:5D:55:FC:F2:62:0D:EB:FE:43
X509v3 Authority Key Identifier:
keyid:78:65:88:C2:87:D0:F9:49:A3:79:F4:D5:13:35:F9:42:3A:0E:03:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/323430333a323734303a3a2f33322d3332203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:2740::/32
Signature Algorithm: sha256WithRSAEncryption
62:95:4b:5f:8c:57:18:9f:78:c1:f1:28:69:dd:27:55:d0:d0:
9a:56:95:51:5a:26:c9:06:d7:a7:c8:3b:59:75:78:ca:08:af:
76:de:07:80:1f:b4:1c:91:46:fb:94:06:b1:65:33:7e:60:69:
d4:5b:b4:f9:5e:33:8b:60:35:4c:e6:d7:6f:10:e2:66:6d:77:
ba:93:96:b2:11:ab:0b:0d:38:1a:51:3a:65:c7:1d:6c:92:85:
50:cb:d2:b2:8a:17:b3:6b:33:a0:e9:4f:64:c4:e3:ef:a8:f5:
4b:3b:af:c3:8f:22:29:74:29:ec:aa:7a:60:29:32:bb:f9:18:
69:98:ec:b9:e6:be:da:05:91:c0:87:0e:12:18:e1:d0:9c:26:
2a:1d:c4:b9:63:69:a4:69:40:44:5d:5f:5b:50:77:94:b2:49:
14:6a:87:73:9e:82:17:2f:91:e8:fa:7b:11:60:31:0d:23:ee:
cb:cd:85:cd:0f:10:37:88:63:4e:e1:97:08:00:d1:cf:37:2c:
c9:27:d6:d1:29:81:ff:3f:cb:8a:4c:c8:67:b2:3c:0c:13:98:
2f:51:22:e9:83:32:bc:8a:5a:35:38:f2:7c:3a:81:89:41:b7:
f8:f4:33:bc:d3:39:02:e7:52:5c:49:0c:4d:3b:f9:75:c8:fc:
9e:5f:5c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:36:05 2026 by rpki-client