
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a31313a3a2f34382d3438203d3e203137343930.roa
File: 323430313a396130303a31313a3a2f34382d3438203d3e203137343930.roa (raw, json)
Hash identifier: YguQcbTYy8e55MeGIKzFtjZfx/+QyV6fJL4ytZgPoYA=
Subject key identifier: E3:82:2E:86:22:6C:31:85:37:EF:8E:3C:80:41:34:C7:37:5D:D4:AF
Certificate issuer: /CN=5253565A27C06C800009631402F5A6EE85C46456
Certificate serial: 25F43E7EA094C41923B49D2A8C957FB22F4317D2
Authority key identifier: 52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a31313a3a2f34382d3438203d3e203137343930.roa
Signing time: Mon 01 Jun 2026 02:14:49 +0000
ROA not before: Mon 01 Jun 2026 02:09:49 +0000
ROA not after: Mon 31 May 2027 02:14:49 +0000
asID: 17490
IP address blocks: 2401:9a00:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl
rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:f4:3e:7e:a0:94:c4:19:23:b4:9d:2a:8c:95:7f:b2:2f:43:17:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5253565A27C06C800009631402F5A6EE85C46456
Validity
Not Before: Jun 1 02:09:49 2026 GMT
Not After : May 31 02:14:49 2027 GMT
Subject: CN=E3822E86226C318537EF8E3C804134C7375DD4AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ad:c7:25:10:61:ea:8c:3c:26:d3:dd:1d:a2:
05:b3:4a:3a:28:f9:de:cb:42:2b:4a:bd:f7:65:76:
ae:d6:f8:d4:64:09:62:ef:f5:f7:7c:59:fc:c3:14:
16:ce:0d:e1:00:45:9c:91:83:f6:c3:8f:0d:4d:69:
83:c6:0a:4d:88:57:6e:83:c0:64:3e:56:4c:b1:9c:
c7:52:4b:74:b2:20:0f:e9:9d:ad:1b:83:a8:fe:f8:
6a:c9:c6:1a:96:bd:6f:b4:be:bd:18:33:f9:aa:9c:
5d:8b:23:b8:19:b8:1c:52:17:41:96:9f:42:79:8f:
9b:82:0b:f7:3e:fb:a4:0e:46:b0:37:ae:cb:00:03:
81:d2:c6:30:81:0d:b7:37:1d:c5:2e:33:e1:f4:36:
47:1e:26:34:90:ed:a7:d8:e0:0c:8c:cf:af:22:0b:
b9:63:8f:b0:94:38:52:6a:2e:7f:fa:e4:1a:20:0c:
66:dc:1d:4e:53:37:39:af:25:77:7a:9f:84:0b:2d:
44:d9:8d:9d:b2:d9:29:e8:ec:08:3f:e6:fb:56:ac:
7b:5e:db:11:65:70:1a:d7:9e:33:ff:51:f0:87:52:
e0:dc:3f:21:74:b8:e9:1e:7b:4e:75:6b:06:00:79:
81:b0:12:92:85:94:41:2e:e8:72:51:d8:5e:54:04:
8c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:82:2E:86:22:6C:31:85:37:EF:8E:3C:80:41:34:C7:37:5D:D4:AF
X509v3 Authority Key Identifier:
keyid:52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a31313a3a2f34382d3438203d3e203137343930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:9a00:11::/48
Signature Algorithm: sha256WithRSAEncryption
cf:6a:5c:d4:a5:98:90:8b:ac:54:72:10:f6:1c:0a:69:67:70:
e2:c2:74:0c:06:30:3d:71:38:53:16:14:c8:be:4e:5c:2a:68:
59:9c:c9:13:1e:14:96:e3:88:21:dc:13:14:6b:dd:1d:b2:a5:
48:b6:f9:b6:e8:45:86:c9:1f:fa:31:8c:eb:2d:47:23:5a:e9:
29:89:00:67:45:c3:c8:40:32:54:f9:49:20:17:a6:ff:99:dc:
e2:09:da:c9:73:2e:bb:eb:37:47:3f:1b:ee:90:9e:c8:3f:03:
6d:9d:69:e3:ca:ff:0f:d7:a2:b1:54:11:75:25:1f:18:a0:d6:
40:0a:46:46:87:a1:51:91:34:5b:36:94:39:cc:ad:50:26:c6:
fb:16:36:64:a2:ff:c0:91:7b:06:6d:fc:b7:27:0b:ea:10:57:
31:8c:d2:ca:af:bb:04:10:3e:07:43:41:43:44:46:0d:f6:cd:
1a:35:7e:8d:94:e4:96:71:72:b2:45:9d:1f:1e:83:2d:08:24:
d0:13:be:36:f3:3b:89:4f:8f:2c:d2:6e:ff:83:2d:b1:79:0c:
2e:06:27:7b:f5:ff:ed:bf:d3:ef:65:8e:b1:73:04:9c:21:f6:
b3:03:f3:e0:4a:bb:4e:d2:94:d0:6e:87:5b:e4:ae:a4:03:9d:
f7:a6:9f:6d
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUJfQ+fqCUxBkjtJ0qjJV/si9DF9IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTI1MzU2NUEyN0MwNkM4MDAwMDk2MzE0MDJGNUE2RUU4
NUM0NjQ1NjAeFw0yNjA2MDEwMjA5NDlaFw0yNzA1MzEwMjE0NDlaMDMxMTAvBgNV
BAMTKEUzODIyRTg2MjI2QzMxODUzN0VGOEUzQzgwNDEzNEM3Mzc1REQ0QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrrcclEGHqjDwm090dogWzSjoo
+d7LQitKvfdldq7W+NRkCWLv9fd8WfzDFBbODeEARZyRg/bDjw1NaYPGCk2IV26D
wGQ+VkyxnMdSS3SyIA/pna0bg6j++GrJxhqWvW+0vr0YM/mqnF2LI7gZuBxSF0GW
n0J5j5uCC/c++6QORrA3rssAA4HSxjCBDbc3HcUuM+H0NkceJjSQ7afY4AyMz68i
C7ljj7CUOFJqLn/65BogDGbcHU5TNzmvJXd6n4QLLUTZjZ2y2Sno7Ag/5vtWrHte
2xFlcBrXnjP/UfCHUuDcPyF0uOkee051awYAeYGwEpKFlEEu6HJR2F5UBIyLAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU44IuhiJsMYU37448gEE0xzdd1K8wHwYDVR0j
BBgwFoAUUlNWWifAbIAACWMUAvWm7oXEZFYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDg2NTI5NTI5NTY0MzY1MS8wLzUyNTM1NjVBMjdDMDZDODAwMDA5NjMxNDAyRjVB
NkVFODVDNDY0NTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTI1MzU2NUEyN0MwNkM4MDAwMDk2MzE0MDJGNUE2RUU4NUM0NjQ1Ni5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDk0ODY1Mjk1Mjk1NjQzNjUxLzAvMzIzNDMwMzEz
YTM5NjEzMDMwM2EzMTMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNzM0Mzkz
MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACQBmgAAETANBgkqhkiG9w0BAQsFAAOCAQEAz2pc1KWYkIus
VHIQ9hwKaWdw4sJ0DAYwPXE4UxYUyL5OXCpoWZzJEx4UluOIIdwTFGvdHbKlSLb5
tuhFhskf+jGM6y1HI1rpKYkAZ0XDyEAyVPlJIBem/5nc4gnayXMuu+s3Rz8b7pCe
yD8DbZ1p48r/D9eisVQRdSUfGKDWQApGRoehUZE0WzaUOcytUCbG+xY2ZKL/wJF7
Bm38tycL6hBXMYzSyq+7BBA+B0NBQ0RGDfbNGjV+jZTklnFyskWdHx6DLQgk0BO+
NvM7iU+PLNJu/4MtsXkMLgYne/X/7b/T72WOsXMEnCH2swPz4Eq7TtKU0G6HW+Su
pAOd96afbQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:25:28 2026 by rpki-client