
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a393a3a2f34382d3438203d3e203137343930.roa
File: 323430313a396130303a393a3a2f34382d3438203d3e203137343930.roa (raw, json)
Hash identifier: iTrXfILKpX9nf1Oxuo48nIwZr8cg+TV+XoxRLsRYWbg=
Subject key identifier: E9:44:A0:23:40:8D:C2:00:5B:E2:07:C1:D1:44:37:9D:CB:2C:B7:8D
Certificate issuer: /CN=5253565A27C06C800009631402F5A6EE85C46456
Certificate serial: 4A966C0B6D7C720BB1214C88A5347D1D035F169A
Authority key identifier: 52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a393a3a2f34382d3438203d3e203137343930.roa
Signing time: Mon 01 Jun 2026 02:14:48 +0000
ROA not before: Mon 01 Jun 2026 02:09:48 +0000
ROA not after: Mon 31 May 2027 02:14:48 +0000
asID: 17490
IP address blocks: 2401:9a00:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl
rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:96:6c:0b:6d:7c:72:0b:b1:21:4c:88:a5:34:7d:1d:03:5f:16:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5253565A27C06C800009631402F5A6EE85C46456
Validity
Not Before: Jun 1 02:09:48 2026 GMT
Not After : May 31 02:14:48 2027 GMT
Subject: CN=E944A023408DC2005BE207C1D144379DCB2CB78D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:04:63:65:00:9b:39:14:31:c0:f4:9f:0f:51:
98:e5:42:6a:a0:2e:d3:90:37:d4:8c:7d:93:19:5c:
63:57:cf:86:c7:89:c9:5f:31:50:d2:e8:2a:14:72:
33:dd:20:45:f1:67:64:83:22:b6:37:a3:19:b7:0f:
cd:dc:eb:7d:25:df:33:58:8e:e0:dc:ef:24:df:e8:
53:3f:fc:01:c7:92:73:1a:ca:9b:3b:ae:f3:56:75:
0e:4e:98:2f:e0:60:e8:6d:70:4b:17:a1:8f:2b:d9:
fa:b4:f7:8c:b0:47:99:7a:14:ad:6e:bc:f5:9e:5d:
df:ab:e2:7b:76:47:73:c3:5a:3b:72:d0:0d:57:1b:
1f:d3:f7:cc:e5:73:db:76:4c:fb:43:bd:57:25:1a:
c0:52:9c:c7:f2:c6:f2:bd:72:52:5d:02:58:93:b8:
a2:a5:0d:5e:96:97:c9:94:27:d3:77:ac:9a:65:31:
14:fa:9c:70:52:b4:ed:a8:54:29:29:9e:d7:47:d2:
21:94:17:9b:aa:75:cd:30:cc:9a:c6:b8:f3:3a:0e:
6d:c1:83:2c:f4:8c:99:e7:c7:ec:ab:d0:95:e5:23:
d3:8d:56:04:ee:f0:fc:bb:48:5f:d0:83:d0:36:08:
de:a4:78:69:9c:8e:4d:9a:40:e0:0e:c1:3f:e1:b4:
bf:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:44:A0:23:40:8D:C2:00:5B:E2:07:C1:D1:44:37:9D:CB:2C:B7:8D
X509v3 Authority Key Identifier:
keyid:52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a393a3a2f34382d3438203d3e203137343930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:9a00:9::/48
Signature Algorithm: sha256WithRSAEncryption
01:28:57:8e:36:0f:9b:66:59:61:ac:d9:07:a3:4f:91:e0:8f:
cd:16:f1:d2:72:e4:2f:9f:19:00:c8:e0:df:8b:ba:bd:04:f3:
7b:db:60:f3:36:90:e0:11:d5:b0:49:9d:b1:49:9c:52:a3:23:
59:be:92:23:86:54:fd:f9:90:4d:b0:0b:9a:0c:e1:e3:48:67:
63:b8:2d:b4:c9:93:0f:8e:a8:fa:29:8d:56:3e:b9:56:c9:fd:
13:b0:27:58:27:78:b0:64:2f:37:3e:7e:64:5d:cd:04:a9:d1:
eb:6f:85:16:24:9d:39:68:bd:f7:b8:2a:1a:61:3f:39:16:8f:
f3:87:c3:7e:c1:70:04:f4:52:1f:df:11:cb:fb:d4:37:b1:d1:
e1:f6:93:56:94:f2:28:6e:f7:06:f7:c8:1b:ce:97:20:64:16:
e3:a9:ed:8c:a4:92:e8:c7:ba:f5:f6:28:b4:21:e1:26:52:99:
52:b2:bc:bd:b8:45:c3:fa:f9:ae:10:bb:7e:21:b8:a1:39:ce:
8d:45:eb:23:f0:89:73:80:09:63:62:ad:e9:0c:e4:47:87:4b:
e8:77:d6:84:78:33:c6:37:21:76:78:dd:d0:a9:29:66:77:bf:
08:1d:3f:80:9e:e3:63:ea:05:29:7c:e7:29:9c:1c:50:47:8d:
8b:66:bc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:24:06 2026 by rpki-client