
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a383a3a2f34382d3438203d3e203137343930.roa
File: 323430313a396130303a383a3a2f34382d3438203d3e203137343930.roa (raw, json)
Hash identifier: O+HIIilvauQNGRRvPqVyRbUt8NY0XmsweQceHuXPx2M=
Subject key identifier: 17:EF:B0:88:21:72:BC:2B:1D:23:8E:87:BE:D5:DC:44:46:FF:6B:58
Certificate issuer: /CN=5253565A27C06C800009631402F5A6EE85C46456
Certificate serial: 142407F10A5AFF243E153D368B21E7C7EEBE0CE1
Authority key identifier: 52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a383a3a2f34382d3438203d3e203137343930.roa
Signing time: Mon 01 Jun 2026 02:14:49 +0000
ROA not before: Mon 01 Jun 2026 02:09:49 +0000
ROA not after: Mon 31 May 2027 02:14:49 +0000
asID: 17490
IP address blocks: 2401:9a00:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl
rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:24:07:f1:0a:5a:ff:24:3e:15:3d:36:8b:21:e7:c7:ee:be:0c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5253565A27C06C800009631402F5A6EE85C46456
Validity
Not Before: Jun 1 02:09:49 2026 GMT
Not After : May 31 02:14:49 2027 GMT
Subject: CN=17EFB0882172BC2B1D238E87BED5DC4446FF6B58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3e:84:ed:a3:bb:ca:49:10:c1:dc:57:89:5c:
39:54:4e:ce:5d:73:c8:72:e0:22:48:77:f3:f2:40:
6b:db:9b:6b:2e:8d:42:43:13:ef:7a:02:5a:95:16:
32:1e:28:e2:c5:53:08:d7:bf:1a:08:16:08:a4:ee:
b1:ef:55:eb:16:10:3a:01:0d:73:13:2c:e2:6b:d0:
5f:81:65:9e:d6:c2:22:10:11:bd:47:87:d8:ba:e0:
3f:42:2b:58:b2:1f:c3:12:31:56:5a:24:78:2e:09:
d7:7c:06:e2:f9:1b:92:53:5a:a7:06:67:56:b1:3e:
c8:53:a9:07:55:6a:57:e5:e4:a1:94:4a:2c:f5:89:
43:37:d4:02:2a:2d:1b:78:31:55:dd:af:ac:d5:a5:
48:23:2a:53:d8:aa:bb:c8:64:c1:36:d5:32:bc:0e:
70:ea:d2:af:43:51:e5:f6:2c:b4:9e:66:0b:05:23:
00:f8:e6:6c:bd:8e:9a:9f:14:8e:29:59:f5:c5:71:
28:b1:63:f8:50:42:6e:9f:04:e6:c4:d4:fa:a0:2c:
43:01:65:dd:a9:84:d5:d1:94:cb:5a:b5:40:2c:a4:
b7:dc:67:e1:6c:74:b4:0e:60:76:79:3f:fe:b2:df:
fc:5c:a3:b7:cc:9b:08:9e:1c:4c:e3:b7:75:e4:0f:
0c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EF:B0:88:21:72:BC:2B:1D:23:8E:87:BE:D5:DC:44:46:FF:6B:58
X509v3 Authority Key Identifier:
keyid:52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a383a3a2f34382d3438203d3e203137343930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:9a00:8::/48
Signature Algorithm: sha256WithRSAEncryption
cd:9f:a5:c7:3f:0f:1d:a7:2c:e1:98:cf:8b:3b:f4:99:e9:84:
17:df:b3:c2:f6:fe:de:59:a9:b1:a6:cc:c6:47:60:f3:b0:19:
b6:7f:b2:8b:a7:28:06:f5:0f:e7:4d:68:d6:12:84:31:ea:11:
77:5b:be:9b:03:33:03:bd:6a:f3:8c:e5:d8:8c:a5:aa:d3:71:
57:72:5f:76:61:0e:0c:e3:29:a5:4b:be:f4:96:45:5f:8a:a2:
41:af:a7:fc:58:aa:56:a9:dc:71:0e:f8:af:b2:27:06:9f:fd:
4d:80:65:0a:81:7c:40:a6:ab:bd:c9:82:fe:28:10:df:d9:f4:
c7:8d:e0:9a:d0:bb:ee:b6:0d:9b:47:a2:7c:46:70:3b:d8:67:
14:0d:3a:7a:05:d9:ed:e7:c1:37:2f:30:d4:a7:8f:a3:f8:41:
fe:e3:20:b2:f3:f7:b1:a6:83:ed:1d:3b:c3:c7:6f:5a:2a:46:
3a:11:26:18:e4:2c:ff:40:02:19:1d:1a:6a:f5:c0:54:ac:31:
05:25:f3:7a:0f:75:0d:5c:34:8e:35:f6:ed:09:7d:ab:5c:50:
22:4d:3f:24:34:58:e2:9f:22:b9:32:28:f0:ea:d6:2a:51:6e:
6a:a7:0b:82:41:3d:1c:da:4b:62:b2:b4:ac:a4:5c:1f:3e:8b:
fd:42:3e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:48:32 2026 by rpki-client