
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a343a3a2f34382d3438203d3e203137343930.roa
File: 323430313a396130303a343a3a2f34382d3438203d3e203137343930.roa (raw, json)
Hash identifier: MzEiYbVf+tu2q5rOdMEkXZogss4MET1R4kV3RWA+5lw=
Subject key identifier: 28:88:3B:31:23:C4:22:5E:7F:35:F6:A2:02:49:1C:4F:5A:D7:E1:59
Certificate issuer: /CN=5253565A27C06C800009631402F5A6EE85C46456
Certificate serial: 580C88DA0D83BF5B8FEB9D0C12766FB78801E20A
Authority key identifier: 52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a343a3a2f34382d3438203d3e203137343930.roa
Signing time: Mon 01 Jun 2026 02:14:49 +0000
ROA not before: Mon 01 Jun 2026 02:09:49 +0000
ROA not after: Mon 31 May 2027 02:14:49 +0000
asID: 17490
IP address blocks: 2401:9a00:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl
rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:0c:88:da:0d:83:bf:5b:8f:eb:9d:0c:12:76:6f:b7:88:01:e2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5253565A27C06C800009631402F5A6EE85C46456
Validity
Not Before: Jun 1 02:09:49 2026 GMT
Not After : May 31 02:14:49 2027 GMT
Subject: CN=28883B3123C4225E7F35F6A202491C4F5AD7E159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2b:03:b4:c4:c6:5c:0f:0d:a9:b8:0a:03:5c:
8c:b0:7a:de:02:6f:92:de:32:8f:7c:c7:33:6a:11:
1e:66:9a:25:2f:91:67:39:e6:41:30:0c:cd:19:68:
e6:35:fd:e6:9f:7e:4e:3e:58:bd:07:f1:d7:c0:ef:
06:f7:db:46:da:82:19:56:41:a7:f3:c3:34:47:fd:
83:dd:92:54:ff:e2:30:d6:a0:20:82:ac:ff:c8:4d:
32:14:36:49:e8:4b:10:1b:52:a5:bf:f3:d7:94:2d:
33:8f:0a:37:1d:e1:53:b0:0e:26:a4:6e:68:95:b8:
9b:40:23:e8:5f:8a:9b:72:6a:fe:50:c6:7c:6b:c5:
aa:27:ff:66:55:77:84:67:49:76:97:73:24:14:39:
c5:48:64:de:19:a4:3f:fc:38:b8:aa:f3:8c:9d:dc:
35:c5:cb:b2:39:ac:aa:ac:72:7a:d4:26:05:a9:c7:
dd:f0:c7:17:3a:3e:4c:ef:c1:32:6e:c4:cc:76:5f:
fb:8e:3a:13:c2:c3:94:2c:11:79:e2:62:38:68:a5:
6c:a7:2d:5a:22:47:23:80:cb:89:b0:81:be:81:4f:
3e:cc:b7:68:9e:c1:f2:28:6f:5d:e4:90:a6:ff:59:
a0:ef:b1:2b:36:68:08:4a:c0:c9:6a:ff:59:cc:51:
b2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:88:3B:31:23:C4:22:5E:7F:35:F6:A2:02:49:1C:4F:5A:D7:E1:59
X509v3 Authority Key Identifier:
keyid:52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a343a3a2f34382d3438203d3e203137343930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:9a00:4::/48
Signature Algorithm: sha256WithRSAEncryption
45:af:ee:5b:fd:a9:f3:56:8c:d3:96:b0:31:33:c1:7a:b1:cf:
2b:fd:8a:94:64:fc:29:51:08:9f:7b:0e:58:7a:a4:df:e5:4d:
37:5b:45:7c:dc:cc:b1:59:bb:b5:0f:90:a9:8f:f3:13:b4:3c:
0e:93:73:cb:d3:51:e4:f8:80:d6:34:c8:dd:16:50:31:6f:e4:
48:2e:57:6f:b7:83:06:6a:79:da:94:14:46:95:41:74:7c:6a:
7b:95:4f:5e:c7:63:a4:8c:03:ba:2c:c0:4c:b4:e5:00:13:4b:
df:a4:3c:71:2e:cd:15:c6:d6:cf:87:67:0d:a3:0c:b3:ee:ea:
18:2d:6a:26:4c:da:06:be:83:8a:41:fe:cc:d3:aa:7e:71:df:
a4:be:a8:19:dd:ec:79:c8:d9:dd:d7:6a:ef:81:3c:4c:c8:aa:
89:33:f3:03:09:90:98:5f:6a:d3:43:1a:9a:4f:cd:6f:d8:6f:
9b:03:85:3c:9b:50:de:68:a4:53:a7:fb:d7:2c:07:a4:44:93:
4c:52:15:5e:d5:af:e6:ab:47:fa:8e:bb:5c:d5:93:b1:a1:a6:
b0:d5:91:a5:57:fe:3b:8e:0a:2e:8f:f7:ec:b1:7f:97:ca:b9:
9b:7c:22:1b:ba:0f:0c:ea:93:f2:08:60:d1:7c:4d:c3:a3:b2:
06:4b:bc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:23:22 2026 by rpki-client