
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a3a2f34382d3438203d3e203137343930.roa
File: 323430313a396130303a3a2f34382d3438203d3e203137343930.roa (raw, json)
Hash identifier: a53DIz4343BtEOhzoSxy1mzLQYRgyq5r+Xpoi4EjhPQ=
Subject key identifier: 52:1B:31:8A:EE:50:79:F5:ED:88:5D:79:BA:EE:A5:94:7E:70:CF:16
Certificate issuer: /CN=5253565A27C06C800009631402F5A6EE85C46456
Certificate serial: 0F57D0214FF442633DBC88A7E7F32B6090893F5E
Authority key identifier: 52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a3a2f34382d3438203d3e203137343930.roa
Signing time: Mon 01 Jun 2026 02:13:37 +0000
ROA not before: Mon 01 Jun 2026 02:08:37 +0000
ROA not after: Mon 31 May 2027 02:13:37 +0000
asID: 17490
IP address blocks: 2401:9a00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl
rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:57:d0:21:4f:f4:42:63:3d:bc:88:a7:e7:f3:2b:60:90:89:3f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5253565A27C06C800009631402F5A6EE85C46456
Validity
Not Before: Jun 1 02:08:37 2026 GMT
Not After : May 31 02:13:37 2027 GMT
Subject: CN=521B318AEE5079F5ED885D79BAEEA5947E70CF16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:43:64:69:81:8d:94:99:60:42:ef:99:5b:ed:
eb:ff:dd:3a:34:b2:75:5e:2b:35:a4:85:1a:3a:9f:
f2:f9:39:f3:63:35:ad:d6:7f:7d:57:3e:f9:d6:a3:
cd:e2:23:5b:92:41:38:df:c2:59:00:38:ed:67:55:
4c:fd:5a:0a:a3:a7:6b:6a:d5:56:a9:dd:d0:eb:a4:
d6:33:68:c7:fd:38:c9:0e:8b:e4:e8:77:5b:35:37:
4a:28:b4:27:ec:87:1a:b0:f3:b9:08:67:e5:44:8e:
17:5d:65:6a:33:db:8c:e3:01:eb:00:d1:fb:80:e6:
d7:f8:7e:c7:b2:6b:56:19:f8:62:36:bb:d2:3d:e5:
9c:30:b6:e2:76:3f:58:89:f5:76:c4:23:61:23:96:
35:4b:f3:62:85:38:89:71:6a:63:30:bd:35:54:c5:
fa:2a:a5:3d:c3:89:be:d5:4e:1b:44:ee:a1:a5:fa:
53:b2:d5:29:12:7d:25:1b:8b:f7:ab:40:02:df:30:
1e:01:7a:3f:6b:f2:b9:f3:a3:62:1d:b3:62:ed:b2:
19:22:5d:f1:d6:40:9a:59:15:aa:3a:f6:87:b0:6f:
7a:74:a5:fc:57:0e:16:f0:98:00:10:19:8f:60:00:
99:6d:8f:55:a8:04:bb:bf:1a:10:c7:34:ad:c7:87:
d9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1B:31:8A:EE:50:79:F5:ED:88:5D:79:BA:EE:A5:94:7E:70:CF:16
X509v3 Authority Key Identifier:
keyid:52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a3a2f34382d3438203d3e203137343930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:9a00::/48
Signature Algorithm: sha256WithRSAEncryption
36:5a:23:0e:90:5f:c0:c5:fe:2a:5c:13:81:6d:47:8a:cf:f7:
60:e1:a4:23:9a:3b:d3:4d:00:08:d7:2a:03:30:9d:c8:d7:93:
4c:c6:e8:08:00:42:5c:12:1c:12:46:77:c5:ce:67:5b:f0:29:
3d:8d:9c:cd:6a:21:53:fe:88:f9:4c:dc:ea:ff:98:d3:f8:67:
ce:6e:89:8d:81:61:74:63:23:bc:db:f2:4c:29:34:a7:06:dc:
8e:7a:7e:84:f4:0f:4f:54:10:cd:4f:db:d9:e9:a8:1e:9d:2c:
c8:0a:51:9f:8b:6c:ee:db:af:51:55:69:f5:9c:dc:bb:04:cb:
1a:83:d0:8e:74:f9:5e:10:1b:4a:f0:17:77:31:0a:ea:98:8c:
67:df:ef:6f:05:75:a1:14:54:1b:d9:a2:57:ce:6a:13:b9:75:
a4:cb:dd:0d:29:78:2b:1b:82:06:7a:00:9c:9a:00:ae:b6:a9:
f7:59:c6:fa:b1:15:cb:c3:20:19:35:5a:03:c3:ec:55:2c:59:
8f:62:f8:24:57:81:da:89:60:91:81:13:f6:da:52:b7:bf:74:
66:76:df:0d:fc:7d:48:3d:68:07:c5:cd:ca:e5:e1:a6:69:60:
e7:4c:ad:a2:d3:df:d8:96:b8:f9:0b:3e:3b:fb:8e:f9:b2:69:
a4:a3:f5:5f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:07:16 2026 by rpki-client