
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a363a3a2f34382d3438203d3e203137343930.roa
File: 323430313a396130303a363a3a2f34382d3438203d3e203137343930.roa (raw, json)
Hash identifier: K5GFCeRtG5eFgO77/YBKJJ0Xp/CpMEePW3+Bb4pst68=
Subject key identifier: C9:9C:4E:79:02:6F:BF:C9:60:A8:F0:C6:DA:71:A0:F9:A8:EF:EB:3D
Certificate issuer: /CN=5253565A27C06C800009631402F5A6EE85C46456
Certificate serial: 328F46745CC4FBD6FECD31A82126FF10E62E3180
Authority key identifier: 52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a363a3a2f34382d3438203d3e203137343930.roa
Signing time: Mon 01 Jun 2026 02:14:48 +0000
ROA not before: Mon 01 Jun 2026 02:09:48 +0000
ROA not after: Mon 31 May 2027 02:14:48 +0000
asID: 17490
IP address blocks: 2401:9a00:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl
rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 07:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:8f:46:74:5c:c4:fb:d6:fe:cd:31:a8:21:26:ff:10:e6:2e:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5253565A27C06C800009631402F5A6EE85C46456
Validity
Not Before: Jun 1 02:09:48 2026 GMT
Not After : May 31 02:14:48 2027 GMT
Subject: CN=C99C4E79026FBFC960A8F0C6DA71A0F9A8EFEB3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:01:f3:37:ab:bd:12:28:7d:ae:99:63:bd:1d:
ee:81:f0:f1:29:a8:1d:3a:61:f8:91:58:37:f5:d7:
1a:4a:af:e4:c2:6d:84:29:fc:5d:3c:92:5b:44:a5:
80:ca:1a:7c:4e:bf:e0:d2:a4:6c:6e:af:f7:93:40:
5a:a9:e0:5a:af:38:0b:80:8d:a5:b6:58:a4:be:76:
37:84:b3:be:49:d7:f1:8a:60:d4:52:23:40:e8:0a:
18:8e:d3:5a:ee:6c:7b:0d:e7:b6:01:40:55:82:59:
71:d8:1a:47:4b:5d:d7:6c:29:fa:00:01:67:f8:cd:
9c:6f:78:cd:74:c0:04:e7:ac:d0:31:ba:dc:77:05:
d5:9a:7d:a8:99:90:13:78:af:07:1b:56:62:83:fa:
d1:25:2b:f5:e4:3b:f3:65:0b:94:63:84:9c:01:fb:
50:11:18:3e:d5:c6:62:90:67:6d:30:0c:a5:1d:1d:
96:28:df:9e:26:5d:8c:95:5d:49:53:02:ba:0b:cf:
ba:bc:68:9d:99:49:20:79:be:45:6c:da:f9:e9:b4:
e5:9c:53:8d:50:45:18:68:17:dd:bf:80:e2:96:20:
c3:43:fb:dd:76:4b:1d:2c:ab:57:60:6d:f9:3a:4b:
74:30:90:02:37:1e:ac:1d:13:64:f9:22:42:e6:bf:
d2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9C:4E:79:02:6F:BF:C9:60:A8:F0:C6:DA:71:A0:F9:A8:EF:EB:3D
X509v3 Authority Key Identifier:
keyid:52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a363a3a2f34382d3438203d3e203137343930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:9a00:6::/48
Signature Algorithm: sha256WithRSAEncryption
31:f3:cd:ae:74:24:3e:a9:9c:8d:1d:57:a2:cd:5d:3e:12:0f:
c9:bd:14:ea:9f:5c:56:fd:57:8f:65:de:32:f1:c8:d2:af:ea:
4f:49:61:af:f6:0d:6a:83:d7:95:52:15:34:9a:ed:27:1b:77:
a1:eb:eb:23:eb:cc:91:0b:54:37:44:a3:d0:03:45:0c:8a:4b:
21:df:5b:57:d7:eb:10:b5:03:85:4f:c8:c1:a7:a7:fb:da:5e:
e1:9c:01:f9:f0:a5:cb:ed:1d:48:74:bf:98:4a:62:b5:68:70:
16:ad:98:35:bb:06:8d:88:2d:0d:41:16:e3:fa:d9:32:a6:ca:
e8:55:88:29:28:0f:49:ef:c2:01:08:6f:14:ad:80:10:11:74:
0f:4d:84:52:79:a6:39:e3:11:17:c4:97:3e:35:30:aa:e0:71:
17:a5:c9:50:7b:b2:e2:f9:c9:c0:58:c3:76:95:c5:c9:c8:8c:
21:83:26:5a:d5:e3:54:c1:a1:6c:b5:6b:db:cd:64:4e:46:59:
3e:b2:96:24:c6:8a:96:1f:aa:55:02:b9:c5:f8:a5:b9:e3:b0:
f7:bc:a6:d9:fd:c9:fc:4d:14:e9:7a:eb:1a:eb:e6:9c:4c:bc:
2e:b9:8b:88:73:db:d3:6d:4a:38:be:0f:24:35:cb:99:a6:81:
6d:fa:76:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:02:03 2026 by rpki-client