
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a353a3a2f34382d3438203d3e203137343930.roa
File: 323430313a396130303a353a3a2f34382d3438203d3e203137343930.roa (raw, json)
Hash identifier: 4WychwwCHETIc36fWKONOxE90QNLPpoRYeH8tjTiyTU=
Subject key identifier: 6D:3C:98:53:6B:A5:8C:77:22:01:3C:EF:26:31:A8:D1:14:47:7C:57
Certificate issuer: /CN=5253565A27C06C800009631402F5A6EE85C46456
Certificate serial: 79435BF5D2FA058EAA2ED7E075AD09BAE5BC7EA5
Authority key identifier: 52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a353a3a2f34382d3438203d3e203137343930.roa
Signing time: Mon 01 Jun 2026 02:14:49 +0000
ROA not before: Mon 01 Jun 2026 02:09:49 +0000
ROA not after: Mon 31 May 2027 02:14:49 +0000
asID: 17490
IP address blocks: 2401:9a00:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl
rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:43:5b:f5:d2:fa:05:8e:aa:2e:d7:e0:75:ad:09:ba:e5:bc:7e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5253565A27C06C800009631402F5A6EE85C46456
Validity
Not Before: Jun 1 02:09:49 2026 GMT
Not After : May 31 02:14:49 2027 GMT
Subject: CN=6D3C98536BA58C7722013CEF2631A8D114477C57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:92:26:01:e5:b0:ac:97:e3:46:c1:1b:64:4c:
bc:0b:d7:47:26:7f:d0:15:17:f1:95:37:e6:9d:91:
ac:53:4f:55:a4:a4:f0:16:e8:1e:a3:ef:3f:64:2e:
88:80:fb:44:ac:2a:fc:5a:48:c5:55:da:45:60:e1:
62:bf:7d:ec:43:2b:08:cd:88:68:06:fe:2f:d8:11:
97:2c:e2:35:01:1a:06:dd:14:1f:46:54:50:34:f8:
9a:4f:a6:45:06:e2:26:d9:ed:1a:84:e3:69:53:35:
dd:52:ce:85:9b:37:07:9a:4a:aa:8c:4b:dd:2d:8a:
99:c8:5e:01:5f:0b:fa:1f:82:0b:fc:1e:5b:34:db:
ca:02:66:88:17:54:a7:4b:11:96:26:54:fc:c6:ee:
eb:f2:dc:8e:ba:48:b6:3e:80:95:62:5b:97:79:29:
ca:87:b4:3f:59:0a:ff:f0:45:4f:b8:65:9c:f1:76:
1d:d9:07:d0:74:40:2c:10:6d:3d:80:9b:3e:4a:a9:
ae:d1:f9:eb:a0:bb:cd:39:ac:56:86:10:de:9c:02:
f6:d5:e7:c2:c9:13:18:5c:a7:ee:7d:14:af:ae:b9:
3e:8f:fc:b4:a2:54:1b:79:5a:ab:42:aa:dd:57:55:
4f:6a:12:1a:b3:90:2f:c0:39:2d:35:84:bf:02:64:
9e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3C:98:53:6B:A5:8C:77:22:01:3C:EF:26:31:A8:D1:14:47:7C:57
X509v3 Authority Key Identifier:
keyid:52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a353a3a2f34382d3438203d3e203137343930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:9a00:5::/48
Signature Algorithm: sha256WithRSAEncryption
72:c6:e7:9f:dc:34:2c:e1:29:c5:9f:9d:f0:c6:a4:82:97:85:
48:bb:6d:5f:5f:e1:77:97:aa:bd:0d:c6:38:ac:42:f7:68:32:
69:bb:85:5d:73:8b:7c:98:8f:1c:0e:02:81:c1:ca:72:11:56:
86:0e:cb:dc:8d:ce:6b:f8:ac:f7:4d:74:4d:e8:33:9c:28:db:
79:a0:78:e1:bd:ca:af:4a:92:fc:0e:7a:a0:5c:2a:ac:bd:00:
1a:39:54:9a:96:0b:0e:79:51:f6:e7:02:8b:12:d9:fd:02:35:
c9:ed:0f:e2:5f:35:d0:59:e5:99:4f:d9:0d:a4:25:8b:57:9a:
23:0d:02:09:05:da:a4:ff:93:d9:cf:17:9a:85:6d:d5:16:1a:
3d:e4:41:a9:12:ce:f7:37:5b:e3:6f:93:33:63:de:36:8e:1d:
3e:17:2e:d3:ab:a4:a2:ef:9e:cd:89:b6:0d:27:89:9d:64:cb:
dd:13:8e:07:e3:c1:ba:01:cb:3f:a0:3b:f7:cc:f4:7b:ac:b9:
9c:dc:1c:58:fa:51:eb:96:9d:41:22:0a:64:11:98:93:b9:45:
9b:82:8c:f2:46:a9:9e:8e:76:bc:f7:e5:e6:89:ff:dd:38:e1:
69:b0:be:36:9f:b5:e3:cb:69:ef:b3:2c:d1:d8:7a:c2:7f:66:
ab:e2:a3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:24:07 2026 by rpki-client