
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a613a3a2f34382d3438203d3e203137343930.roa
File: 323430313a396130303a613a3a2f34382d3438203d3e203137343930.roa (raw, json)
Hash identifier: 3j0O2oIdg9zPFjb9gV7rPUE3nFTUDkhHET2qyQRev40=
Subject key identifier: 5F:72:F4:AB:2E:1F:46:61:3B:4F:63:30:81:D3:D4:CC:F8:B2:2F:50
Certificate issuer: /CN=5253565A27C06C800009631402F5A6EE85C46456
Certificate serial: 2557B6AAB8E2FD90A1DC5ED298CC85BA5E97FA40
Authority key identifier: 52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a613a3a2f34382d3438203d3e203137343930.roa
Signing time: Mon 01 Jun 2026 02:17:12 +0000
ROA not before: Mon 01 Jun 2026 02:12:12 +0000
ROA not after: Mon 31 May 2027 02:17:12 +0000
asID: 17490
IP address blocks: 2401:9a00:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl
rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 07:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:57:b6:aa:b8:e2:fd:90:a1:dc:5e:d2:98:cc:85:ba:5e:97:fa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5253565A27C06C800009631402F5A6EE85C46456
Validity
Not Before: Jun 1 02:12:12 2026 GMT
Not After : May 31 02:17:12 2027 GMT
Subject: CN=5F72F4AB2E1F46613B4F633081D3D4CCF8B22F50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5e:2c:2e:1f:36:c3:28:bd:dd:5c:6d:d2:90:
93:6b:81:56:b8:b5:ea:d9:8c:12:11:5a:1b:c7:f4:
15:76:2c:0e:82:a1:a4:6c:f1:85:da:0a:d0:1f:33:
fb:24:07:f3:09:e4:8f:0d:d5:61:ef:66:35:21:ae:
e6:ef:75:82:f6:a0:e1:5d:c8:fd:c3:d0:23:e9:90:
b2:46:ca:21:73:e0:43:c2:d6:48:d2:70:72:e2:34:
11:9b:3c:52:05:17:3d:1d:4f:b4:9c:36:29:14:60:
9e:21:d1:a2:be:d3:6d:bd:b9:c1:b9:0c:eb:72:0f:
4c:dd:4d:ba:96:61:4d:17:76:b0:00:a5:58:0b:f0:
44:0b:55:8d:e6:9b:c9:da:1e:a4:a5:0a:c7:4c:db:
a8:86:34:e3:5b:23:e2:fd:ab:e7:15:3b:71:ad:b2:
54:70:36:c9:8f:53:b5:63:78:5d:56:bc:59:a9:0d:
6d:a9:6b:a5:00:8b:8b:fd:f5:46:40:6f:ee:7f:cd:
b8:69:77:4f:7e:31:24:7d:2c:43:ab:02:d1:ea:64:
ba:3e:c4:43:e5:15:b6:44:31:aa:ff:c6:c9:c8:91:
f7:b6:fe:ee:f3:0e:6a:9a:b7:6d:25:64:2e:38:86:
54:62:31:8f:c4:f8:62:61:16:d8:d2:0a:48:f0:88:
f2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:72:F4:AB:2E:1F:46:61:3B:4F:63:30:81:D3:D4:CC:F8:B2:2F:50
X509v3 Authority Key Identifier:
keyid:52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a613a3a2f34382d3438203d3e203137343930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:9a00:a::/48
Signature Algorithm: sha256WithRSAEncryption
a9:f7:58:21:0a:46:e0:d6:14:fb:c7:5a:76:e6:22:da:03:15:
d2:15:13:24:c3:13:13:90:88:c7:d1:7c:cf:b1:94:69:ba:c2:
25:c4:4b:a0:a4:bd:d2:e0:cc:72:89:a5:28:05:c8:2d:8e:f9:
88:0f:79:0a:08:ed:9d:a1:e3:fa:97:96:85:33:e5:36:06:71:
92:6c:83:e4:bf:42:10:5d:36:6c:5b:5a:e2:36:cc:ac:00:ee:
a1:66:a3:68:ae:20:7a:1f:8f:47:8d:cf:f4:55:bc:b9:61:06:
85:f9:13:32:54:0b:75:ec:3e:d1:1f:8a:f3:c8:33:39:24:bf:
ab:f9:bd:78:f7:89:64:73:76:1c:7b:1a:95:73:83:a8:38:41:
a9:04:92:0d:05:c3:c5:32:0c:e7:ac:9c:41:ea:dc:8a:31:cb:
7b:15:fa:ef:d2:36:98:89:b7:e0:2e:47:4c:79:59:4f:7b:a8:
fc:ef:c2:44:21:d9:65:10:2a:44:fd:be:59:9a:ca:e3:a0:5b:
66:b6:98:a9:f5:c8:60:5b:ef:1c:81:91:4a:ef:83:02:cd:38:
82:81:a2:3a:e2:85:ef:0c:69:71:a3:32:a8:71:85:a1:c3:a6:
74:67:15:7c:21:18:8d:f8:79:b2:38:02:ca:5e:30:f2:34:e9:
8f:2b:16:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:07:34 2026 by rpki-client